kerberos5 @1.10.1 port update and more

[quentinmit (Quentin Smith)]

I've attached a patch here to update the kerberos5 port from 1.7.2 to 1.10.1. In addition to the patch, files/patch-pkinit_crypto_openssl.c.diff should be removed as it's no longer needed.

This new portfile also provides two new variants:

• com_err, which selects whether to install kerberos5's copy of com_err. With this variant disabled, kerberos5 can be installed side-by-side with e2fsprogs. This variant defaults to on for backwards compatibility, but I think it should probably be turned off at some point.
• rename, which installs the Kerberos binaries with an "mit-" prefix. This is especially important on Lion, where the system-provided Kerberos is not MIT Kerberos, and you often want to invoke both binaries. Again, for backwards compatibility with the previous port, this defaults to off.

I still know of a few outstanding issues with this port (though it's still better than it was before):

• It doesn't appear to link against libintl correctly; I have worked around this by disabling the configure check for libintl.
• If the rename variant is set, it installs a set of headers and libraries (such as gssapi.h and libkrb5.dylib that conflict with the system-provided versions. This is especially important since the system-provided Kerberos and this port are NOT fully compatible. It's especially bad since other ports will compile differently depending on whether this port happens to be activated!

I'm not sure how to resolve the latter point; it seems like this is a long-standing issue with this port. I could perhaps introduce a devel variant that installs the includes and libraries, but MacPorts doesn't seem to do that very often. Could this be a use case for subports?

[quentinmit (Quentin Smith)]

Sorry, that last bullet should read "Even if the rename variant is set".

[nonstop.server@…]

Cc Me!

[ryandesign (Ryan Carsten Schmidt)]

We don't use variants or subports to install libraries and headers; we install libraries and headers always, unconditionally.

[quentinmit (Quentin Smith)]

I know that's the case in general, but this is a very specific case - the kerberos5 port and the system Kerberos /conflict/ with each other, and it's important that other ports can be built against the system kerberos and NOT against the kerberos5 port.

[ryandesign (Ryan Carsten Schmidt)]

This ticket supersedes #33639.

[neverpanic (Clemens Lang)]

Most of this I have already done (or fixed otherwise) in

• r102458
• r102459
• r102461
• r102463
• r102464
• r102465
• r102466 and
• r102467

which closes ticket #26869.

The only thing left from your patch (which I unfortunately didn't see before doing all the work) is the rename variant and the incompatible headers and libraries. I think the latter could be fixed by installing headers and libraries in a subfolder (e.g. $prefix/include/mit-kerberos/ and $prefix/lib/mit-kerberos/). Doing this might create more problems than it solves, though…

[neverpanic (Clemens Lang)]

Most of this is fixed by now, closing due to lack of interest.