From bf7a21ddeb19de583c1235a8bc9a799fe3447e4b Mon Sep 17 00:00:00 2001 From: Pierre Labastie Date: Sun, 9 Feb 2014 10:48:11 +0000 Subject: [PATCH] Update to MIT Kerberos 1.12.1. Fixes #4565. git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@12684 af4574ff-66df-0310-9fd7-8a98e5e911e0 --- appendices/glossary.xml | 9 ++++ general.ent | 7 +-- introduction/welcome/changelog.xml | 11 ++++ postlfs/security/mitkrb.xml | 85 +++++++++++++++++++----------- 4 files changed, 77 insertions(+), 35 deletions(-) diff --git a/appendices/glossary.xml b/appendices/glossary.xml index eedc1ce79a..d0a6f57279 100644 --- a/appendices/glossary.xml +++ b/appendices/glossary.xml @@ -1646,6 +1646,15 @@ + + + RADIUS + + + Remote Authentication Dial-In User Service + + + RAM diff --git a/general.ent b/general.ent index 864c7541ab..73748c3b84 100644 --- a/general.ent +++ b/general.ent @@ -1,12 +1,12 @@ - + - + @@ -155,7 +155,8 @@ export -f as_root - + + diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml index d5e20077bb..377969585a 100644 --- a/introduction/welcome/changelog.xml +++ b/introduction/welcome/changelog.xml @@ -43,6 +43,17 @@ --> + + + February 9th, 2014 + + + [pierre] - Update to MIT Kerberos 1.12.1 Fixes + #4565. + + + + February 8th, 2014 diff --git a/postlfs/security/mitkrb.xml b/postlfs/security/mitkrb.xml index 148cbb12ec..25d7211d26 100644 --- a/postlfs/security/mitkrb.xml +++ b/postlfs/security/mitkrb.xml @@ -4,12 +4,12 @@ %general-entities; - + - - - - + + + + ]> @@ -78,7 +78,8 @@ Optional - (required to run the testsuite), + (for full test coverage), + (to authenticate the package), , , (used during the testsuite) and @@ -148,19 +149,27 @@ sed -e "s@python2.5/Python.h@& python2.7/Python.h@g" \ -i configure.in && sed -e "s@interp->result@Tcl_GetStringResult(interp)@g" \ -i kadmin/testing/util/tcl_kadm5.c && +sed -e 's@\^u}@^u cols 300}@' \ + -i tests/dejagnu/config/default.exp && +sed -e '/run\.test/d' \ + -i plugins/kdb/db2/libdb2/test/Makefile.in && autoconf && -./configure CPPFLAGS="-I/usr/include/et -I/usr/include/ss" \ - --prefix=/usr \ - --sysconfdir=/etc \ - --localstatedir=/var/lib \ - --with-system-et \ - --with-system-ss \ +./configure --prefix=/usr \ + --sysconfdir=/etc \ + --localstatedir=/var/lib \ + --with-system-et \ + --with-system-ss \ --enable-dns-for-realm && make - The regression test suite is designed to be run after the - installation has been completed. + To test the build, issue: make check. You need at + least , which is used to drive the testsuite. + Furthermore, must be available for some + of the tests to run. If you have a former version of MIT Kerberos V5 + installed, it may happen that the test suite pick up the installed + versions of the libraries, rather than the newly built ones. If so, + it is better to run the tests after the installation. @@ -170,7 +179,7 @@ make make install && for LIBRARY in gssapi_krb5 gssrpc k5crypto kadm5clnt kadm5srv \ - kdb5 kdb_ldap krb5 krb5support verto ; do + kdb5 kdb_ldap krad krb5 krb5support verto ; do [ -e /usr/lib/lib$LIBRARY.so ] && chmod -v 755 /usr/lib/lib$LIBRARY.so done && @@ -190,10 +199,6 @@ cp -vfr ../doc/* /usr/share/doc/krb5-&mitkrb-version; && unset LIBRARY - - To test the installation, you must have - installed and issue: make check. - @@ -201,9 +206,12 @@ unset LIBRARY Command Explanations - sed -e ...: First sed fixes - Python detection and second one fixes - build with Tcl 8.6. + sed -e ...: The first sed fixes + Python detection. The second one fixes + building with Tcl 8.6. The third one increases + the width of the virtual terminal used for some tests, to prevent + some spurious characters to be echoed, which is taken as a failure. The + last one disables one test, which may hang under certain circumstances. @@ -357,22 +365,22 @@ EOF kadmin.local -kadmin: add_policy dict-only -kadmin: addprinc -policy dict-only <loginname> +kadmin.local: add_policy dict-only +kadmin.local: addprinc -policy dict-only <loginname> The KDC server and any machine running kerberized server daemons must have a host key installed: -kadmin: addprinc -randkey host/<belgarath.lfs.org> +kadmin.local: addprinc -randkey host/<belgarath.lfs.org> After choosing the defaults when prompted, you will have to export the data to a keytab file: -kadmin: ktadd host/<belgarath.lfs.org> +kadmin.local: ktadd host/<belgarath.lfs.org> This should have created a file in @@ -436,9 +444,9 @@ EOF Additional Information - For additional information consult - Documentation for krb5-&mitkrb-version; on which the above + For additional information consult the + documentation for krb5-&mitkrb-version; on which the above instructions are based. @@ -479,15 +487,16 @@ EOF gss-client, gss-server, k5srvutil, kadmin, kadmin.local, - kadmind, kdb5_ldap_util, kdb5_util, kdestroy, kinit, klist, + kadmind, kdb5_ldap_util (optional), kdb5_util, kdestroy, kinit, klist, kpasswd, kprop, kpropd, kproplog, krb5-config, krb5kdc, krb5-send-pr, ksu, kswitch, ktutil, kvno, sclient, sim_client, sim_server, sserver, uuclient and uuserver libgssapi_krb5.so, libgssrpc.so, libk5crypto.so, - libkadm5clnt.so, libkadm5srv.so, libkdb5.so, libkdb_ldap.so, - libkrb5.so, libkrb5support.so, and libverto.so + libkadm5clnt.so, libkadm5srv.so, libkdb5.so, libkdb_ldap.so + (optional), libkrad.so, libkrb5.so, libkrb5support.so, and + libverto.so /usr/include/gssapi, @@ -795,6 +804,18 @@ EOF + + libkrad.so + + + contains the internal support library for RADIUS functionality. + + + libkrad.so + + + + libkrb5.so