forked from Lainports/freebsd-ports
8e584a521a
- Add a SASL port option
- Fix the KERBEROS ports option - it was a no-op, setting a
configure flag which modifies how Kerberos was used without
setting the flag that actually enables it.
- Use GSSAPI instead of $ENV{KRB5CCNAME} to set the credential
cache. The latter pollutes the unsuspecting application's
environment and does not always work (for instance, it breaks when
nss_ldap is invoked from OpenSSH, although I haven't quite
determined why)
- Add patches to support Heimdal in addition to MIT Kerberos. Note
that I tried to ensure that the code is unchanged in the
non-Heimdal case, but that I have no way of testing with MIT
Kerberos.
With the above changes, I have successfully configured a FreeBSD 9.2
server to authenticate users against a Microsoft Windows 2012 Active
Directory server.
Non-functional changes:
- Modernize and stagify
- Remove text in pkg-message about a change that was made ten years ago
- Take maintainership as current maintainer has been AWOL for 2+ years
- Bump PORTREVISION
Approved by: maintainer hasn't been heard of for 2+ years
26 lines
661 B
C
26 lines
661 B
C
--- ldap-nss.c.orig
|
|
+++ ldap-nss.c
|
|
@@ -69,7 +69,7 @@
|
|
#endif
|
|
|
|
/* Try to handle systems with both SASL libraries installed */
|
|
-#if defined(HAVE_SASL_SASL_H) && defined(HAVE_SASL_AUXPROP_REQUEST)
|
|
+#if defined(HAVE_SASL_SASL_H)
|
|
#include <sasl/sasl.h>
|
|
#elif defined(HAVE_SASL_H)
|
|
#include <sasl.h>
|
|
@@ -78,11 +78,11 @@
|
|
#ifndef HAVE_SNPRINTF
|
|
#include "snprintf.h"
|
|
#endif
|
|
-#ifdef HAVE_GSSAPI_H
|
|
-#include <gssapi.h>
|
|
-#elif defined(HAVE_GSSAPI_GSSAPI_KRB5_H)
|
|
+#ifdef HAVE_GSSAPI_GSSAPI_KRB5_H
|
|
#include <gssapi/gssapi.h>
|
|
#include <gssapi/gssapi_krb5.h>
|
|
+#elif defined(HAVE_GSSAPI_H)
|
|
+#include <gssapi.h>
|
|
#endif
|
|
#ifdef CONFIGURE_KRB5_CCNAME
|
|
#include <krb5.h>
|