Bug 281120 - security/p5-Authen-SASL: remove GSSAPI from OPTIONS_DEFAULT
Summary: security/p5-Authen-SASL: remove GSSAPI from OPTIONS_DEFAULT
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Michael Osipov
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-08-29 03:36 UTC by Siva Mahadevan
Modified: 2024-12-09 10:37 UTC (History)
2 users (show)

See Also:
michaelo: maintainer-feedback-

Attachments
[PATCH] security/p5-Authen-SASL: remove GSSAPI from OPTIONS_DEFAULT (907 bytes, patch)
2024-08-29 03:36 UTC, Siva Mahadevan 		no flags Details | Diff
[PATCH] security/p5-Authen-SASL: remove KERBEROS from OPTIONS_DEFAULT (915 bytes, patch)
2024-12-04 14:06 UTC, Siva Mahadevan 		no flags Details | Diff
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Siva Mahadevan 2024-08-29 03:36:30 UTC 
Created attachment 253157 [details]
[PATCH] security/p5-Authen-SASL: remove GSSAPI from OPTIONS_DEFAULT

Kerberos deployments are part of the minority and are not functional out-of-the-box without configuration in FreeBSD. Removing GSSAPI from OPTIONS_DEFAULT in security/p5-Authen-SASL avoids bringing in Kerberos dependencies (either from base or from ports through Heimdal or MIT krb5) in the majority of default installations. This is in accordance with all other ports that enable GSSAPI support through OPTIONS and USES=gssapi.
Comment 1 Michael Osipov freebsd_committer freebsd_triage 2024-08-29 06:37:34 UTC 
(In reply to Siva Mahadevan from comment #0)

I agree with that position.
Comment 2 Siva Mahadevan 2024-12-04 14:06:44 UTC 
Created attachment 255626 [details]
[PATCH] security/p5-Authen-SASL: remove KERBEROS from OPTIONS_DEFAULT

Refreshing the patch, I realize that I had previously rebased it on top of the wrong local git branch. This should work now.

Any updates on merging this?
Comment 3 Michael Osipov freebsd_committer freebsd_triage 2024-12-04 20:17:54 UTC 
The Cyrus SASL port doesn't include the GSSAPI plugin by default and it needs to be installed additionally. Here I would consider the same. Will prepare a review.
Comment 4 Michael Osipov freebsd_committer freebsd_triage 2024-12-05 08:06:41 UTC 
Maintainer feedback has been requested also four months ago, no response.
Comment 5 commit-hook freebsd_committer freebsd_triage 2024-12-09 10:37:25 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=423876d30ff75d1f35ee47571d6f3c2784fb0a92

commit 423876d30ff75d1f35ee47571d6f3c2784fb0a92
Author:     Siva Mahadevan <me@svmhdvn.name>
AuthorDate: 2024-06-28 20:02:20 +0000
Commit:     Michael Osipov <michaelo@FreeBSD.org>
CommitDate: 2024-12-09 10:36:15 +0000

    security/p5-Authen-SASL: remove KERBEROS from OPTIONS_DEFAULT

    security/cyrus-sasl2 does not bundle the GSS-API mech plugin by default,
    for consistency reasons this port shouldn't do it too.
    This is in preparation of 'uses=gssapi' knob in the ports system.

    PR:             281120
    Approved by:    jrm (mentor), otis (mentor), perl (maintainer timeout)
    Differential Revision:  https://reviews.freebsd.org/D47929

 security/p5-Authen-SASL/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)