summaryrefslogtreecommitdiffstats
path: root/kerberos5/lib
Commit message (Collapse)AuthorAgeFilesLines
* DIRDEPS_BUILD: Update dependencies.bdrewery2015-12-078-8/+0
| | | | Sponsored by: EMC / Isilon Storage Division
* META MODE: Prefer INSTALL=tools/install.sh to lessen the need for xinstall.host.bdrewery2015-11-2517-17/+0
| | | | | | | | This both avoids some dependencies on xinstall.host and allows bootstrapping on older releases to work due to lack of at least 'install -l' support. Sponsored by: EMC / Isilon Storage Division
* Partially revert r288266: Remove SUBDIR_PARALLEL from kerberos5/lib.bdrewery2015-10-131-1/+0
| | | | | | I intended to remove this before committing r288266. It works but is clearly wrong and working by accident due to the dependencies listed in the root Makefile.inc1 file.
* Add more SUBDIR_PARALLEL.bdrewery2015-09-261-0/+2
| | | | | MFC after: 3 weeks Sponsored by: EMC / Isilon Storage Division
* Make it buildable with WITH_OPENLDAP, again.ume2015-08-271-1/+2
| | | | MFC after: 1 week
* Fix a typo introduced in r262209.jkim2015-06-181-1/+1
| | | | MFC after: 3 days
* new dependssjg2015-06-167-0/+8
|
* Add META_MODE support.sjg2015-06-1322-1/+2992
|\ | | | | | | | | | | | | | | | | | | | | Off by default, build behaves normally. WITH_META_MODE we get auto objdir creation, the ability to start build from anywhere in the tree. Still need to add real targets under targets/ to build packages. Differential Revision: D2796 Reviewed by: brooks imp
| * Explain why NO_BEFOREBUILD_INCLUDES is neededsjg2015-06-101-0/+3
| |
| * Explain why NO_BEFOREBUILD_INCLUDES is neededsjg2015-06-101-0/+3
| |
| * Explain why NO_BEFOREBUILD_INCLUDES is neededsjg2015-06-101-0/+3
| |
| * dirdeps.mk now sets DEP_RELDIRsjg2015-06-0819-38/+0
| |
| * Merge sync of headsjg2015-05-2729-82/+38
| |\
| * \ Merge from head@274682sjg2014-11-192-3/+3
| |\ \
| * | | Supress beforebuild dependency on buildincludessjg2014-05-163-1/+8
| | | |
| * | | Updated dependenciessjg2014-05-1618-6/+30
| | | |
| * | | Updated dependenciessjg2014-05-106-0/+12
| | | |
| * | | Merge headsjg2014-04-286-12/+25
| |\ \ \
| * | | | Updated dependenciessjg2013-10-132-0/+12
| | | | |
| * | | | Merge headsjg2013-09-113-5/+4
| |\ \ \ \
| * \ \ \ \ Merge from headsjg2013-09-051-4/+28
| |\ \ \ \ \
| * | | | | | Updated dependenciessjg2013-03-1116-0/+16
| | | | | | |
| * | | | | | Updated dependenciessjg2013-02-1620-40/+0
| | | | | | |
| * | | | | | Sync with HEAD.obrien2013-02-081-9/+1
| |\ \ \ \ \ \
| * | | | | | | We need headers from ${KRB5DIR}/include toosjg2012-11-081-1/+2
| | | | | | | |
| * | | | | | | Updated/new Makefile.dependsjg2012-11-0819-0/+102
| | | | | | | |
| * | | | | | | Sync FreeBSD's bmake branch with Juniper's internal bmake branch.marcel2012-08-2220-0/+2891
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Requested by: Simon Gerraty <sjg@juniper.net>
* | | | | | | | Misc fixes from projects/bmakesjg2015-06-111-1/+2
| |_|_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | Differential Revision: D2748 Reviewed by: brooks imp
* | | | | | | Make kerberos use the same sqlite libraries as other sqlite consumer.bapt2015-05-203-13/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reduces the number of copy of sqlite we have to just one and easier tracking version of sqlite Differential Revision: https://reviews.freebsd.org/D2443 Reviewed by: imp, stas, bjk
* | | | | | | Add a ${CP} alias for copying files in the build.will2015-01-164-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some users build FreeBSD as non-root in Perforce workspaces. By default, Perforce sets files read-only unless they're explicitly being edited. As a result, the -f argument must be used to cp in order to override the read-only flag when copying source files to object directories. Bare use of 'cp' should be avoided in the future. Update all current users of 'cp' in the src tree. Reviewed by: emaste MFC after: 1 week Sponsored by: Spectra Logic
* | | | | | | Remove now useless USEPRIVATELIBbapt2014-11-251-1/+0
| | | | | | |
* | | | | | | Convert kerberos to LIBADD and reduce overlinking of the kerberos binaries andbapt2014-11-2518-39/+20
| |_|_|_|_|/ |/| | | | | | | | | | | | | | | | | libraries
* | | | | | Fix incremental builds involving non-root users with read-only source files.will2014-09-181-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a followup commit to r271771. MFC after: 1 month
* | | | | | Rework privatelib/internallibbapt2014-08-061-1/+1
| |_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make sure everything linking to a privatelib and/or an internallib does it directly from the OBJDIR rather than DESTDIR. Add src.libnames.mk so bsd.libnames.mk is not polluted by libraries not existsing in final installation Introduce the LD* variable which is what ld(1) is expecting (via LDADD) to link to internal/privatelib Directly link to the .so in case of private library to avoid having to complexify LDFLAGS. Phabric: https://phabric.freebsd.org/D553 Reviewed by: imp, emaste
* | | | | Fix installworld failure when kerberos source files have new timestampsemaste2014-04-224-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If a kerberos .hx source file is newer than the .h copy, but the content is the same, then during buildworld the "cmp -s || cp" command in the .hx.h rule would do nothing, leaving the .h copy with the older timestamp. During installworld the rule would again be invoked, causing a failure as neither cmp or cp would exist in the temporary path. As the underlying issue should be resolved by r262209, unconditionally copy the file. No objection: peter@ Tested by: gjb@ Sponsored by: The FreeBSD Foundation
* | | | | Revert my commit in r261253; the real problem was tackled in r262209.peter2014-02-204-8/+8
| | | | |
* | | | | Really (I think) fix the sporadic heimdal build failures with high -jpeter2014-02-194-0/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | levels. The root of the problem was that make was attempting to run up to three concurrent asn1_compile commands to produce the three outputs that it was declared to produce. The failure was caused when the asn1_compiles were started out of sync and a later one was truncating the files that another thread was trying to copy. In reality it is supposed to be run exactly once and all three outputs are produced in one pass. Use the same hack as for the parent's Makefile.inc for the compile_et multi-output rule.
* | | | | Speculatively replace a cp with a cat for gathering data on apeter2014-01-284-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | sporadic parallel build failure in the FreeBSD cluster on many-core systems with ZFS. cp uses mmap in this scenario, cat does not.
* | | | | Try and fix the dependency/bootstrap issues in kerberos5uqs2013-12-232-4/+3
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | libkafs5 needs a header from libkrb5, it includes this from ${.OBJDIR}/mumble, this used to work fine as long as you happen to have a krb_err.h in your base system, this doesn't work for bootstrapping or using a cross-compiler with a different sysroot. This is just a best-effort bandaid, sufficient parallelism can still break it. Fix a SRCS override that dropped krb5_err.h. Discussed with: stas
* | | | Clean up the Kerberos build by turning libheimipcc and libheimipcs intodes2013-09-103-5/+4
| |_|/ |/| | | | | | | | | | | | | | | | | | | | private shared libraries, instead of hacked-together archives of PIC objects. This makes it possible to build a static libkrb5 that works. Reviewed by: stas Approved by: re (gjb)
* | | Fix the getpwnam_r() call in the pname_to_uid() kerberos library function sormacklem2013-05-021-4/+28
| |/ |/| | | | | | | | | | | | | | | that it handles the ERANGE error return case. Without this fix, authentication of users for certain system setups could fail unexpectedly. Reported by: Elias Martenson (lokedhs@gmail.com) Tested by: Elias Martenson (earlier version) MFC after: 2 weeks
* | Only try to install one link at each path.brooks2013-01-231-9/+1
|/ | | | | Don't install verify_krb5_conf.8. It is installed in kerberos5/usr.bin/verify_krb5_conf.
* Centralize the specification of the krb5 build tools.obrien2012-06-016-12/+0
|
* * Remove headers from SRCS that are not generatedobrien2012-05-3014-44/+8
| | | | | | (and are in /usr/src/crypto/heimdal/). * Avoid race conditions with 'make -j<N>'.
* - Add a "real" symbol version map to libasn1. The upstream versionstas2012-04-084-11/+1618
| | | | | | | | | | of the version map just exported all the symbols, which caused a binutils bug being triggered when ld fails to link two objects, one of which exports a versioned version of the symbol, and another -- unversioned. [1] - Also add version map for libkafs5. Submitted by: jchandra@ (based on)
* Assume a big-endian default on MIPS and drop the "eb" suffix from MACHINE_ARCH.jmallett2012-03-291-2/+1
| | | | | | | | | | | | | | | This makes our naming scheme more closely match other systems and the expectations of much third-party software. MIPS builds which are little-endian should require and exhibit no changes. Big-endian TARGET_ARCHes must be changed: From: To: mipseb mips mipsn32eb mipsn32 mips64eb mips64 An entry has been added to UPDATING and some foot-shooting protection (complete with warnings which should become errors in the near future) to the top-level base system Makefile.
* - Apply binutils workaround on mips.mips as well. Though this TARGET_ARCHstas2012-03-241-1/+2
| | | | is deprecated, tinderbox uses it.
* - Update FreeBSD Heimdal distribution to version 1.5.1. This also bringsstas2012-03-2226-634/+1281
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | several new kerberos related libraries and applications to FreeBSD: o kgetcred(1) allows one to manually get a ticket for a particular service. o kf(1) securily forwards ticket to another host through an authenticated and encrypted stream. o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1) and other user kerberos operations. klist and kswitch are just symlinks to kcc(1) now. o kswitch(1) allows you to easily switch between kerberos credentials if you're running KCM. o hxtool(1) is a certificate management tool to use with PKINIT. o string2key(1) maps a password into key. o kdigest(8) is a userland tool to access the KDC's digest interface. o kimpersonate(8) creates a "fake" ticket for a service. We also now install manpages for some lirbaries that were not installed before, libheimntlm and libhx509. - The new HEIMDAL version no longer supports Kerberos 4. All users are recommended to switch to Kerberos 5. - Weak ciphers are now disabled by default. To enable DES support (used by telnet(8)), use "allow_weak_crypto" option in krb5.conf. - libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings disabled due to the function they use (krb5_get_err_text(3)) being deprecated. I plan to work on this next. - Heimdal's KDC now require sqlite to operate. We use the bundled version and install it as libheimsqlite. If some other FreeBSD components will require it in the future we can rename it to libbsdsqlite and use for these components as well. - This is not a latest Heimdal version, the new one was released while I was working on the update. I will update it to 1.5.2 soon, as it fixes some important bugs and security issues.
* - Make heimdal buildable with WITH_OPENLDAP defined, again.ume2011-12-051-3/+3
| | | | - Our heimdal uses the deprecated OpenLDAP functions.
* - Add missing interdependencies to kerberos libraries. Some of thestas2011-09-2712-7/+33
| | | | | | | | | kerberos libraries were not linked properly (missing dependencies), which causes 3rd party applications linking to fail when --as-needed ld flag is used. I also added the --no-undefined ld(1) flag to make sure that there're no missing dependencies. MFC after: 3 days
OpenPOWER on IntegriCloud