mirror of
https://github.com/Zeckmathederg/glfs.git
synced 2025-01-23 22:42:14 +08:00
Update to MIT Kerberos 1.12.1. Fixes #4565.
git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@12684 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
Pierre Labastie
parent
45d9840d0e
commit
bf7a21ddeb
@ -1646,6 +1646,15 @@
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
|
||||
<glossentry id="gRADIUS">
|
||||
<glossterm>
|
||||
<acronym>RADIUS</acronym>
|
||||
</glossterm>
|
||||
<glossdef>
|
||||
<para>Remote Authentication Dial-In User Service</para>
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
|
||||
<glossentry id="gRAM">
|
||||
<glossterm>
|
||||
<acronym>RAM</acronym>
|
||||
|
||||
@ -1,12 +1,12 @@
|
||||
<!-- $LastChangedBy$ $Date$ -->
|
||||
|
||||
<!ENTITY day "08"> <!-- Always 2 digits -->
|
||||
<!ENTITY day "09"> <!-- Always 2 digits -->
|
||||
<!ENTITY month "02"> <!-- Always 2 digits -->
|
||||
<!ENTITY year "2014">
|
||||
<!ENTITY copyrightdate "2001-&year;">
|
||||
<!ENTITY copyholder "The BLFS Development Team">
|
||||
<!ENTITY version "&year;-&month;-&day;">
|
||||
<!ENTITY releasedate "February 8th, &year;">
|
||||
<!ENTITY releasedate "February 9th, &year;">
|
||||
<!ENTITY pubdate "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
|
||||
<!ENTITY blfs-version "svn"> <!-- svn|[release #] -->
|
||||
<!ENTITY lfs-version "development"> <!-- version|testing|unstable|development] -->
|
||||
@ -155,7 +155,8 @@ export -f as_root</userinput></screen>
|
||||
<!ENTITY iptables-version "1.4.21">
|
||||
<!ENTITY libcap-version "2.24">
|
||||
<!ENTITY linux-pam-version "1.1.8">
|
||||
<!ENTITY mitkrb-version "1.11.4">
|
||||
<!ENTITY mitkrb-major-version "1.12">
|
||||
<!ENTITY mitkrb-version "&mitkrb-major-version;.1">
|
||||
<!ENTITY nettle-version "2.7.1">
|
||||
<!ENTITY nss-minor-version "15">
|
||||
<!ENTITY nss-micro-version "4">
|
||||
|
||||
@ -43,6 +43,17 @@
|
||||
</listitem>
|
||||
|
||||
-->
|
||||
|
||||
<listitem>
|
||||
<para>February 9th, 2014</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>[pierre] - Update to MIT Kerberos 1.12.1 Fixes
|
||||
<ulink url="&blfs-ticket-root;4565">#4565</ulink>.</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
</listitem>
|
||||
|
||||
<listitem>
|
||||
<para>February 8th, 2014</para>
|
||||
<itemizedlist>
|
||||
|
||||
@ -4,12 +4,12 @@
|
||||
<!ENTITY % general-entities SYSTEM "../../general.ent">
|
||||
%general-entities;
|
||||
|
||||
<!ENTITY mitkrb-download-http "http://web.mit.edu/kerberos/www/dist/krb5/1.11/krb5-&mitkrb-version;-signed.tar">
|
||||
<!ENTITY mitkrb-download-http "http://web.mit.edu/kerberos/www/dist/krb5/&mitkrb-major-version;/krb5-&mitkrb-version;-signed.tar">
|
||||
<!ENTITY mitkrb-download-ftp " ">
|
||||
<!ENTITY mitkrb-md5sum "138628ae154ff449bc41602c8de78e8b">
|
||||
<!ENTITY mitkrb-size "12 MB">
|
||||
<!ENTITY mitkrb-buildsize "121 MB (Additional 20 MB if running the testsuite)">
|
||||
<!ENTITY mitkrb-time "1.2 SBU (additional 3.0 SBU if running the testsuite)">
|
||||
<!ENTITY mitkrb-md5sum "524b1067b619cb5bf780759b6884c3f5">
|
||||
<!ENTITY mitkrb-size "11.4 MB">
|
||||
<!ENTITY mitkrb-buildsize "165 MB (Additional 25 MB if running the testsuite)">
|
||||
<!ENTITY mitkrb-time "0.9 SBU (additional 3.5 SBU if running the testsuite)">
|
||||
]>
|
||||
|
||||
<sect1 id="mitkrb" xreflabel="MIT Kerberos V5-&mitkrb-version;">
|
||||
@ -78,7 +78,8 @@
|
||||
|
||||
<bridgehead renderas="sect4">Optional</bridgehead>
|
||||
<para role="optional">
|
||||
<xref linkend="dejagnu"/> (required to run the testsuite),
|
||||
<xref linkend="dejagnu"/> (for full test coverage),
|
||||
<xref linkend="gnupg2"/> (to authenticate the package),
|
||||
<xref linkend="keyutils"/>,
|
||||
<xref linkend="openldap"/>,
|
||||
<xref linkend="python2"/> (used during the testsuite) and
|
||||
@ -148,19 +149,27 @@ sed -e "s@python2.5/Python.h@& python2.7/Python.h@g" \
|
||||
-i configure.in &&
|
||||
sed -e "s@interp->result@Tcl_GetStringResult(interp)@g" \
|
||||
-i kadmin/testing/util/tcl_kadm5.c &&
|
||||
sed -e 's@\^u}@^u cols 300}@' \
|
||||
-i tests/dejagnu/config/default.exp &&
|
||||
sed -e '/run\.test/d' \
|
||||
-i plugins/kdb/db2/libdb2/test/Makefile.in &&
|
||||
autoconf &&
|
||||
./configure CPPFLAGS="-I/usr/include/et -I/usr/include/ss" \
|
||||
--prefix=/usr \
|
||||
--sysconfdir=/etc \
|
||||
--localstatedir=/var/lib \
|
||||
--with-system-et \
|
||||
--with-system-ss \
|
||||
./configure --prefix=/usr \
|
||||
--sysconfdir=/etc \
|
||||
--localstatedir=/var/lib \
|
||||
--with-system-et \
|
||||
--with-system-ss \
|
||||
--enable-dns-for-realm &&
|
||||
make</userinput></screen>
|
||||
|
||||
<para>
|
||||
The regression test suite is designed to be run after the
|
||||
installation has been completed.
|
||||
To test the build, issue: <command>make check</command>. You need at
|
||||
least <xref linkend="tcl"/>, which is used to drive the testsuite.
|
||||
Furthermore, <xref linkend="dejagnu"/> must be available for some
|
||||
of the tests to run. If you have a former version of MIT Kerberos V5
|
||||
installed, it may happen that the test suite pick up the installed
|
||||
versions of the libraries, rather than the newly built ones. If so,
|
||||
it is better to run the tests after the installation.
|
||||
</para>
|
||||
|
||||
<para>
|
||||
@ -170,7 +179,7 @@ make</userinput></screen>
|
||||
<screen role="root"><userinput>make install &&
|
||||
|
||||
for LIBRARY in gssapi_krb5 gssrpc k5crypto kadm5clnt kadm5srv \
|
||||
kdb5 kdb_ldap krb5 krb5support verto ; do
|
||||
kdb5 kdb_ldap krad krb5 krb5support verto ; do
|
||||
[ -e /usr/lib/lib$LIBRARY.so ] && chmod -v 755 /usr/lib/lib$LIBRARY.so
|
||||
done &&
|
||||
|
||||
@ -190,10 +199,6 @@ cp -vfr ../doc/* /usr/share/doc/krb5-&mitkrb-version; &&
|
||||
|
||||
unset LIBRARY</userinput></screen>
|
||||
|
||||
<para>
|
||||
To test the installation, you must have <xref linkend="dejagnu"/>
|
||||
installed and issue: <command>make check</command>.
|
||||
</para>
|
||||
|
||||
</sect2>
|
||||
|
||||
@ -201,9 +206,12 @@ unset LIBRARY</userinput></screen>
|
||||
<title>Command Explanations</title>
|
||||
|
||||
<para>
|
||||
<command>sed -e ...</command>: First <command>sed</command> fixes
|
||||
<application>Python</application> detection and second one fixes
|
||||
build with <application>Tcl</application> 8.6.
|
||||
<command>sed -e ...</command>: The first <command>sed</command> fixes
|
||||
<application>Python</application> detection. The second one fixes
|
||||
building with <application>Tcl</application> 8.6. The third one increases
|
||||
the width of the virtual terminal used for some tests, to prevent
|
||||
some spurious characters to be echoed, which is taken as a failure. The
|
||||
last one disables one test, which may hang under certain circumstances.
|
||||
</para>
|
||||
|
||||
<para>
|
||||
@ -357,22 +365,22 @@ EOF</userinput></screen>
|
||||
</para>
|
||||
|
||||
<screen role="root"><userinput>kadmin.local
|
||||
<prompt>kadmin:</prompt> add_policy dict-only
|
||||
<prompt>kadmin:</prompt> addprinc -policy dict-only <replaceable><loginname></replaceable></userinput></screen>
|
||||
<prompt>kadmin.local:</prompt> add_policy dict-only
|
||||
<prompt>kadmin.local:</prompt> addprinc -policy dict-only <replaceable><loginname></replaceable></userinput></screen>
|
||||
|
||||
<para>
|
||||
The KDC server and any machine running kerberized
|
||||
server daemons must have a host key installed:
|
||||
</para>
|
||||
|
||||
<screen role="root"><userinput><prompt>kadmin:</prompt> addprinc -randkey host/<replaceable><belgarath.lfs.org></replaceable></userinput></screen>
|
||||
<screen role="root"><userinput><prompt>kadmin.local:</prompt> addprinc -randkey host/<replaceable><belgarath.lfs.org></replaceable></userinput></screen>
|
||||
|
||||
<para>
|
||||
After choosing the defaults when prompted, you will have to
|
||||
export the data to a keytab file:
|
||||
</para>
|
||||
|
||||
<screen role="root"><userinput><prompt>kadmin:</prompt> ktadd host/<replaceable><belgarath.lfs.org></replaceable></userinput></screen>
|
||||
<screen role="root"><userinput><prompt>kadmin.local:</prompt> ktadd host/<replaceable><belgarath.lfs.org></replaceable></userinput></screen>
|
||||
|
||||
<para>
|
||||
This should have created a file in
|
||||
@ -436,9 +444,9 @@ EOF</userinput></screen>
|
||||
<title>Additional Information</title>
|
||||
|
||||
<para>
|
||||
For additional information consult <ulink
|
||||
url="http://web.mit.edu/kerberos/www/krb5-1.11/#documentation">
|
||||
Documentation for krb5-&mitkrb-version;</ulink> on which the above
|
||||
For additional information consult the <ulink
|
||||
url="http://web.mit.edu/kerberos/www/krb5-&mitkrb-major-version;/#documentation">
|
||||
documentation for krb5-&mitkrb-version;</ulink> on which the above
|
||||
instructions are based.
|
||||
</para>
|
||||
|
||||
@ -479,15 +487,16 @@ EOF</userinput></screen>
|
||||
<seglistitem>
|
||||
<seg>
|
||||
gss-client, gss-server, k5srvutil, kadmin, kadmin.local,
|
||||
kadmind, kdb5_ldap_util, kdb5_util, kdestroy, kinit, klist,
|
||||
kadmind, kdb5_ldap_util (optional), kdb5_util, kdestroy, kinit, klist,
|
||||
kpasswd, kprop, kpropd, kproplog, krb5-config, krb5kdc, krb5-send-pr,
|
||||
ksu, kswitch, ktutil, kvno, sclient, sim_client, sim_server,
|
||||
sserver, uuclient and uuserver
|
||||
</seg>
|
||||
<seg>
|
||||
libgssapi_krb5.so, libgssrpc.so, libk5crypto.so,
|
||||
libkadm5clnt.so, libkadm5srv.so, libkdb5.so, libkdb_ldap.so,
|
||||
libkrb5.so, libkrb5support.so, and libverto.so
|
||||
libkadm5clnt.so, libkadm5srv.so, libkdb5.so, libkdb_ldap.so
|
||||
(optional), libkrad.so, libkrb5.so, libkrb5support.so, and
|
||||
libverto.so
|
||||
</seg>
|
||||
<seg>
|
||||
/usr/include/gssapi,
|
||||
@ -795,6 +804,18 @@ EOF</userinput></screen>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry id="libkrad">
|
||||
<term><filename class="libraryfile">libkrad.so</filename></term>
|
||||
<listitem>
|
||||
<para>
|
||||
contains the internal support library for RADIUS functionality.
|
||||
</para>
|
||||
<indexterm zone="mitkrb libkrad">
|
||||
<primary sortas="c-libkrad">libkrad.so</primary>
|
||||
</indexterm>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry id="libkrb5">
|
||||
<term><filename class="libraryfile">libkrb5.so</filename></term>
|
||||
<listitem>
|
||||
|
||||
Loading…
Reference in New Issue
Block a user