summaryrefslogtreecommitdiffstats
path: root/kerberos5/tools
Commit message (Collapse)AuthorAgeFilesLines
* DIRDEPS_BUILD: Update dependenciesbdrewery2016-06-141-0/+1
| | | | | Approved by: re (gjb) Sponsored by: EMC / Isilon Storage Division
* DIRDEPS_BUILD: Connect new directories and update dependencies.bdrewery2016-06-031-1/+0
| | | | Sponsored by: EMC / Isilon Storage Division
* DIRDEPS_BUILD: Regenerate without local dependencies.bdrewery2016-02-243-44/+0
| | | | | | | | These are no longer needed after the recent 'beforebuild: depend' changes and hooking DIRDEPS_BUILD into a subset of FAST_DEPEND which supports skipping 'make depend'. Sponsored by: EMC / Isilon Storage Division
* DIRDEPS_BUILD: Add some missing build dependencies for kerberos5.bdrewery2016-02-242-0/+2
| | | | Sponsored by: EMC / Isilon Storage Division
* Add more SUBDIR_PARALLEL.bdrewery2015-09-261-0/+1
| | | | | MFC after: 3 weeks Sponsored by: EMC / Isilon Storage Division
* Add META_MODE support.sjg2015-06-133-0/+105
|\ | | | | | | | | | | | | | | | | | | | | Off by default, build behaves normally. WITH_META_MODE we get auto objdir creation, the ability to start build from anywhere in the tree. Still need to add real targets under targets/ to build packages. Differential Revision: D2796 Reviewed by: brooks imp
| * dirdeps.mk now sets DEP_RELDIRsjg2015-06-083-6/+0
| |
| * Merge sync of headsjg2015-05-274-4/+8
| |\ | |/ |/|
| * Merge from head@274682sjg2014-11-192-4/+0
| |\
| * \ Merge head from 7/28sjg2014-08-192-0/+4
| |\ \
| * | | Updated dependenciessjg2014-05-163-3/+0
| | | |
| * | | Updated dependenciessjg2014-05-103-0/+6
| | | |
| * | | Merge headsjg2014-04-283-3/+3
| |\ \ \
| * | | | Updated dependenciessjg2013-03-113-0/+3
| | | | |
| * | | | Updated dependenciessjg2013-02-163-6/+0
| | | | |
| * | | | Sync FreeBSD's bmake branch with Juniper's internal bmake branch.marcel2012-08-225-2/+108
| | | | | | | | | | | | | | | | | | | | Requested by: Simon Gerraty <sjg@juniper.net>
* | | | | Convert kerberos to LIBADD and reduce overlinking of the kerberos binaries andbapt2014-11-252-4/+6
| |_|_|/ |/| | | | | | | | | | | libraries
* | | | Revert r267233 for now. PIE support needs to be reworked.bdrewery2014-08-192-4/+0
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. 50+% of NO_PIE use is fixed by adding -fPIC to INTERNALLIB and other build-only utility libraries. 2. Another 40% is fixed by generating _pic.a variants of various libraries. 3. Some of the NO_PIE use is a bit absurd as it is disabling PIE (and ASLR) where it never would work anyhow, such as csu or loader. This suggests there may be better ways of adding support to the tree. Many of these cases can be fixed such that -fPIE will work but there is really no reason to have it in those cases. 4. Some of the uses are working around hacks done to some Makefiles that are really building libraries but have been using bsd.prog.mk because the code is cleaner. Had they been using bsd.lib.mk then NO_PIE would not have been needed. We likely do want to enable PIE by default (opt-out) for non-tree consumers (such as ports). For in-tree though we probably want to only enable PIE (opt-in) for common attack targets such as remote service daemons and setuid utilities. This is also a great performance compromise since ASLR is expected to reduce performance. As such it does not make sense to enable it in all utilities such as ls(1) that have little benefit to having it enabled. Reported by: kib
* | | In preparation for ASLR [1] support add WITH_PIE to support building with -fPIE.bdrewery2014-06-082-0/+4
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is currently an opt-in build flag. Once ASLR support is ready and stable it should changed to opt-out and be enabled by default along with ASLR. Each application Makefile uses opt-out to ensure that ASLR will be enabled by default in new directories when the system is compiled with PIE/ASLR. [2] Mark known build failures as NO_PIE for now. The only known runtime failure was rtld. [1] http://www.bsdcan.org/2014/schedule/events/452.en.html Submitted by: Shawn Webb <lattera@gmail.com> Discussed between: des@ and Shawn Webb [2]
* | NO_MAN= has been deprecated in favor of MAN= for some time, go aheadimp2014-04-133-3/+3
| | | | | | | | | | | | and finish the job. ncurses is now the only Makefile in the tree that uses it since it wasn't a simple mechanical change, and will be addressed in a future commit.
* | Add support for bmake. This includes:marcel2012-10-062-2/+2
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Don't do upgrade_checks when using bmake. As long as we have WITH_BMAKE, there's a bootstrap complication in ths respect. Avoid it. Make the necessary changes to have upgrade_checks work wth bmake anyway. 2. Remove the use of -E. It's not needed in our build because we use ?= for the respective variables, which means that we'll take the environment value (if any) anyway. 3. Properly declare phony targets as phony as bmake is a lot smarter (and thus agressive) about build avoidance. 4. Make sure CLEANFILES is complete and use it on .NOPATH. bmake is a lot smarter about build avoidance and should not find files we generate in the source tree. We should not have files in the repository we want to generate, but this is an easier way to cross this hurdle. 5. Have behavior under bmake the same as it is under make with respect to halting when sub-commands fail. Add "set -e" to compound commands so that bmake is informed when sub-commands fail. 6. Make sure crunchgen uses the same make as the rest of the build. This is important when the make utility isn't called make (but bmake for example). 7. While here, add support for using MAKEOBJDIR to set the object tree location. It's the second alternative bmake looks for when determining the actual object directory (= .OBJDIR). Submitted by: Simon Gerraty <sjg@juniper.net> Submitted by: John Van Horne <jvanhorne@juniper.net>
* Centralize the specification of the krb5 build tools.obrien2012-06-011-1/+1
|
* * Remove headers from SRCS that are not generatedobrien2012-05-301-8/+2
| | | | | | (and are in /usr/src/crypto/heimdal/). * Avoid race conditions with 'make -j<N>'.
* - Update FreeBSD Heimdal distribution to version 1.5.1. This also bringsstas2012-03-226-67/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | several new kerberos related libraries and applications to FreeBSD: o kgetcred(1) allows one to manually get a ticket for a particular service. o kf(1) securily forwards ticket to another host through an authenticated and encrypted stream. o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1) and other user kerberos operations. klist and kswitch are just symlinks to kcc(1) now. o kswitch(1) allows you to easily switch between kerberos credentials if you're running KCM. o hxtool(1) is a certificate management tool to use with PKINIT. o string2key(1) maps a password into key. o kdigest(8) is a userland tool to access the KDC's digest interface. o kimpersonate(8) creates a "fake" ticket for a service. We also now install manpages for some lirbaries that were not installed before, libheimntlm and libhx509. - The new HEIMDAL version no longer supports Kerberos 4. All users are recommended to switch to Kerberos 5. - Weak ciphers are now disabled by default. To enable DES support (used by telnet(8)), use "allow_weak_crypto" option in krb5.conf. - libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings disabled due to the function they use (krb5_get_err_text(3)) being deprecated. I plan to work on this next. - Heimdal's KDC now require sqlite to operate. We use the bundled version and install it as libheimsqlite. If some other FreeBSD components will require it in the future we can rename it to libbsdsqlite and use for these components as well. - This is not a latest Heimdal version, the new one was released while I was working on the update. I will update it to 1.5.2 soon, as it fixes some important bugs and security issues.
* Add roken.h to SRCS. This fixes the compilation of slc during amarius2008-06-181-0/+1
| | | | | buildworld on a host running a world built with WITHOUT_KERBEROS defined.
* Fix conflicts after heimdal-1.1 import and add build infrastructure. Importdfr2008-05-073-3/+40
| | | | all non-style changes made by heimdal to our own libgssapi.
* Fix generator glue to only expose extern struct units %s_units[] iskan2007-05-191-1/+6
| | | | | struct units defintition it known. The above construct is treated as an incorrect C by GCC 4.2 otherwise.
* Apply the .PHONY attribute to the ../make*/make* targets. Thisru2005-11-101-2/+2
| | | | | | | causes them to be recreated (if needed) early, when doing "make depend" here, before generating headers that depend on them. This should fix breakages often seen while doing incremental (NO_CLEAN) cross-builds.
* Start the dreaded NOFOO -> NO_FOO conversion.ru2004-12-213-3/+3
| | | | OK'ed by: core
* style.Makefile(5).ru2004-02-051-5/+4
| | | | OK'ed by: nectar
* Try harder to pick up the correct print_version.c. The old versionru2004-02-051-4/+3
| | | | | | | | works before bsd.dep.mk,v 1.44, whether .depend file exists or not, but the contents of .depend file is wrong. With bsd.dep.mk,v 1.44, the contents of .depend file is always broken, and build without a .depend file is broken too. With this change it works reliably in all cases. Ugh.
* asn1_compile needs roken.h.ru2004-02-012-2/+9
|
* Overhaul of kerberos5/ makefiles. Most significant changes are:ru2004-01-315-0/+71
- Dropped support for standalone builds, this was only partially supported anyway, and required so much magic in makefiles that made life dangerous (e.g., by using the custom yacc rules). - Got rid of .OBJDIR in makefiles -- makes building of individual files possible again. - Made the .x.c transformations -j safe. - Reprogrammed LDADD to fix static build of some utilities that was broken. - Fixed LDFLAGS and DPADD in the WITH_OPENLDAP case -- positively affects the contents of .depend files. - Removed redundant .h's from SRCS, only kept those that are generated. - libkrb5/ INCS were bogusly installed again with libgssapi/. - Made build-tools real tools with their own makefiles in separate directories. This allows us to properly track their dependencies, etc. - Faster build, 21% less of makefile code! Approved by: nectar Reviewed by: markm Silence on: arch
OpenPOWER on IntegriCloud