Opened 11 years ago
Last modified 5 years ago
#40707 assigned enhancement
serf1: enable GSSAPI/Kerberos
Reported by: | dogcow@… | Owned by: | |
---|---|---|---|
Priority: | Normal | Milestone: | |
Component: | ports | Version: | |
Keywords: | Cc: | ||
Port: | serf1 |
Description
By default, serf-1.3.1 and prior (at very least) do not enable use of Kerberos and/or GSSAPI; they can be enabled by invoking scons as scons GSSAPI=/path/to/kerb
- e.g. scons GSSAPI=/usr
for the system libraries, scons GSSAPI=${prefix}
for the macports-provided kerberos libraries, etc.
It would be nice if it were enableable by default or as a variant.
Change History (4)
comment:1 Changed 11 years ago by ryandesign (Ryan Carsten Schmidt)
Keywords: | kerberos gssapi removed |
---|---|
Owner: | changed from macports-tickets@… to blair@… |
Summary: | enable GSSAPI/Kerberos in serf1 → serf1: enable GSSAPI/Kerberos |
Version: | 2.2.0 |
comment:2 Changed 11 years ago by blair (Blair Zajac)
comment:3 Changed 9 years ago by thomas.downes@…
It is not empirically true that cyrus-sasl2 provides the necessary client library to login to my KRB protected website. I tried a Portfile which depends on port:kerberos5 and set GSSAPI=${prefix}. Compiled successfully but would hang at authentication. /usr/bin/svn was OK, so I tried having it look for the system-wide kerberos installation.
This may be because I am working on a laptop that is integrated into a campus Active Directory server that uses kerberos in some way. I wouldn't be surprised if system-wide Kerberos libraries are loaded pretty early on in boot.
You might also consider updating to 1.3.8 and http://serf.apache.org/ as the URI. Google code is read-only.
--- Portfile.bak 2015-09-10 12:14:35.000000000 -0500 +++ Portfile 2015-09-10 12:39:59.000000000 -0500 @@ -49,6 +49,7 @@ build.target APR=${prefix} \ APU=${prefix} \ OPENSSL=${prefix} \ + GSSAPI=/usr \ PREFIX=${prefix} destroot.cmd ${build.cmd}
comment:4 Changed 5 years ago by mf2k (Frank Schima)
Owner: | blair deleted |
---|---|
Status: | new → assigned |
Please submit a patch for this feature that includes support and I'll commit it.
Since Subversion is the primary serf1 dependent and Subversion depends upon cyrus-sasl2 which has a default variant to depend upon kerberos so there's no need to make a variant for it.