Bug 281120
| Summary: | security/p5-Authen-SASL: remove GSSAPI from OPTIONS_DEFAULT | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Siva Mahadevan <me> | ||||||
| Component: | Individual Port(s) | Assignee: | Michael Osipov <michaelo> | ||||||
| Status: | Closed FIXED | ||||||||
| Severity: | Affects Only Me | CC: | me, michaelo | ||||||
| Priority: | --- | Flags: | michaelo:
maintainer-feedback-
|
||||||
| Version: | Latest | ||||||||
| Hardware: | Any | ||||||||
| OS: | Any | ||||||||
| Attachments: |
|
||||||||
(In reply to Siva Mahadevan from comment #0) I agree with that position. Created attachment 255626 [details]
[PATCH] security/p5-Authen-SASL: remove KERBEROS from OPTIONS_DEFAULT
Refreshing the patch, I realize that I had previously rebased it on top of the wrong local git branch. This should work now.
Any updates on merging this?
The Cyrus SASL port doesn't include the GSSAPI plugin by default and it needs to be installed additionally. Here I would consider the same. Will prepare a review. Maintainer feedback has been requested also four months ago, no response. A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=423876d30ff75d1f35ee47571d6f3c2784fb0a92 commit 423876d30ff75d1f35ee47571d6f3c2784fb0a92 Author: Siva Mahadevan <me@svmhdvn.name> AuthorDate: 2024-06-28 20:02:20 +0000 Commit: Michael Osipov <michaelo@FreeBSD.org> CommitDate: 2024-12-09 10:36:15 +0000 security/p5-Authen-SASL: remove KERBEROS from OPTIONS_DEFAULT security/cyrus-sasl2 does not bundle the GSS-API mech plugin by default, for consistency reasons this port shouldn't do it too. This is in preparation of 'uses=gssapi' knob in the ports system. PR: 281120 Approved by: jrm (mentor), otis (mentor), perl (maintainer timeout) Differential Revision: https://reviews.freebsd.org/D47929 security/p5-Authen-SASL/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) |
Created attachment 253157 [details] [PATCH] security/p5-Authen-SASL: remove GSSAPI from OPTIONS_DEFAULT Kerberos deployments are part of the minority and are not functional out-of-the-box without configuration in FreeBSD. Removing GSSAPI from OPTIONS_DEFAULT in security/p5-Authen-SASL avoids bringing in Kerberos dependencies (either from base or from ports through Heimdal or MIT krb5) in the majority of default installations. This is in accordance with all other ports that enable GSSAPI support through OPTIONS and USES=gssapi.