Bug 236037 - databases/postgresql*: postgresql ports do not configure Kerberos support correctly
Summary: databases/postgresql*: postgresql ports do not configure Kerberos support cor...
Status: Open
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Palle Girgensohn
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-02-25 19:29 UTC by Garrett Wollman
Modified: 2020-05-21 11:50 UTC (History)
3 users (show)

See Also:


Attachments
patch to databases/postgresql11-server (1.21 KB, text/plain)
2019-02-25 19:29 UTC, Garrett Wollman
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Garrett Wollman freebsd_committer freebsd_triage 2019-02-25 19:29:32 UTC
Created attachment 202363 [details]
patch to databases/postgresql11-server

Support for GSSAPI authentication with Kerberos has been broken in the master port's makefile for several years.

First problem: selection of Kerberos libraries is inexplicably limited to ancient (no longer supported) PostgreSQL releases.

Second problem: the actual Kerberos library dependency is only recorded if Kerberos is already installed at build time, which is a violation of ports conventions and fails to configure when building packages because package builds always run in a clean environment with no undeclared dependencies installed.

The attached patch makes 9.4 build, package, and function properly (tested only with MIT Kerberos, we don't use Heimdal here) and more recent releases build and package.
Comment 1 Garrett Wollman freebsd_committer freebsd_triage 2019-08-08 19:00:31 UTC
This is still a problem now that the master port has been updated to 12.x.
Comment 2 Marcin Cieślak 2020-05-21 11:50:23 UTC
I have to rebuild many packages manually because postgresql is built without Kerberos support. Maybe GSSAPI support should be always enabled and only MIT Kerberos be enabled with a knob? Otherwise it should fall back to the built-in Heimdal.