git: 4e44a84dcc9a - main - security/heimdal-devel: New port tracking Heimdal develpment
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 18 Nov 2022 00:01:58 UTC
The branch main has been updated by cy: URL: https://cgit.FreeBSD.org/ports/commit/?id=4e44a84dcc9abab445f7cd2dc37346338bfd9691 commit 4e44a84dcc9abab445f7cd2dc37346338bfd9691 Author: Cy Schubert <cy@FreeBSD.org> AuthorDate: 2022-11-17 23:57:46 +0000 Commit: Cy Schubert <cy@FreeBSD.org> CommitDate: 2022-11-18 00:01:41 +0000 security/heimdal-devel: New port tracking Heimdal develpment This new heimdal port tracks the Heimdal development branch. The last security advisory showed us we might want to track its development. --- security/Makefile | 1 + security/heimdal-devel/Makefile | 131 ++ security/heimdal-devel/distinfo | 3 + security/heimdal-devel/files/ipropd_master.in | 45 + security/heimdal-devel/files/ipropd_slave.in | 37 + security/heimdal-devel/files/kpasswdd-Makefile | 15 + security/heimdal-devel/files/kpasswdd-cracklib.c | 22 + .../heimdal-devel/files/patch-cf-make-proto.pl | 11 + .../files/patch-cf_check-compile-et.m4 | 11 + security/heimdal-devel/files/patch-ch_pthreads.m4 | 11 + security/heimdal-devel/files/patch-configure.ac | 10 + .../heimdal-devel/files/patch-lib-krb5-krb5_locl.h | 20 + .../heimdal-devel/files/patch-lib__sl__slc-lex.l | 11 + .../files/patch-tools-heimdal-gssapi.pc.in | 10 + .../heimdal-devel/files/patch-tools-krb5-config.in | 10 + security/heimdal-devel/pkg-descr | 3 + security/heimdal-devel/pkg-message | 11 + security/heimdal-devel/pkg-plist | 1258 ++++++++++++++++++++ 18 files changed, 1620 insertions(+) diff --git a/security/Makefile b/security/Makefile index 276b83d3a083..d007ea104370 100644 --- a/security/Makefile +++ b/security/Makefile @@ -204,6 +204,7 @@ SUBDIR += heaan SUBDIR += headscale SUBDIR += heimdal + SUBDIR += heimdal-devel SUBDIR += helib SUBDIR += hexl SUBDIR += highwayhash diff --git a/security/heimdal-devel/Makefile b/security/heimdal-devel/Makefile new file mode 100644 index 000000000000..2b6486aeb434 --- /dev/null +++ b/security/heimdal-devel/Makefile @@ -0,0 +1,131 @@ +PORTNAME= heimdal +PORTVERSION= ${HEIMDAL_COMMIT_DATE} +CATEGORIES= security +PKGNAMESUFFIX= -devel +HASH= c132e6ff4 +HEIMDAL_COMMIT_DATE= 2022.11.17 + +MAINTAINER= cy@FreeBSD.org +COMMENT= Popular BSD-licensed implementation of Kerberos 5 +WWW= https://www.h5l.org/ + +LICENSE= BSD3CLAUSE +LICENSE_FILE= ${WRKSRC}/LICENSE + +USE_GITHUB= yes +GH_TAGNAME= ${HASH} + +CONFLICTS= krb5 krb5-* + +USES= cpe gettext-runtime gssapi:bootstrap,heimdal libtool pathfix \ + pkgconfig python:build readline makeinfo ssl +CPE_VENDOR= ${PORTNAME}_project +USE_LDCONFIG= ${GSSAPILIBDIR} + +# Needs clang-format which is only provided by the port. +# Else asm1_fails resulting in a command not found error. +BUILD_DEPENDS= clang${LLVM_DEFAULT}:devel/llvm${LLVM_DEFAULT} + +LIB_DEPENDS= liblockfile.so:devel/liblockfile + +GNU_CONFIGURE= yes +CONFIGURE_ENV= ac_cv_header_fnmatch_h=yes \ + ac_cv_header_db_h=no \ + ac_cv_header_db3_db_h=no \ + ac_cv_header_db4_db_h=no \ + ac_cv_header_db5_db_h=no \ + ac_cv_header_db6_db_h=no \ + ac_cv_prog_COMPILE_ET=${WRKSRC}/lib/com_err/compile_et +CONFIGURE_ARGS= --with-berkeley-db \ + --with-libintl \ + --with-libintl-include="${LOCALBASE}/include" \ + --with-libintl-lib="${LOCALBASE}/lib" \ + --libdir="${GSSAPILIBDIR}" \ + --includedir="${GSSAPIINCDIR}" \ + --with-kcm \ + --with-openssl \ + --with-openssl-include="${OPENSSLINC}" \ + --with-openssl-lib="${OPENSSLLIB}" \ + --enable-otp \ + --enable-pthread-support \ + --with-readline="${LOCALBASE}" \ + --with-hdbdir="/var/${PORTNAME}" \ + --sysconfdir="${PREFIX}/etc" \ + CLANG_FORMAT="${LOCALBASE}/bin/clang-format${LLVM_DEFAULT}" \ + --enable-kx509 +# XXX --with-readline picks up libreadline even if found in /usr/lib. +MAKE_ENV= INSTALL_CATPAGES=no +INSTALL_TARGET= install-strip +.if !exists(/etc/rc.d/ipropd_master) +USE_RC_SUBR= ipropd_master ipropd_slave +.endif +INFO= heimdal hx509 + +MAKE_JOBS_UNSAFE= yes + +OPTIONS_DEFINE= IPV6 BDB LMDB SQLITE LDAP PKINIT DIGEST KX509 CRACKLIB +OPTIONS_DEFAULT=IPV6 BDB PKINIT DIGEST KX509 +OPTIONS_SUB= yes + +IPV6_CONFIGURE_WITH= ipv6 + +BDB_DESC= Enable BerkeleyDB KDC backend support +BDB_USES= bdb:5 localbase +BDB_CONFIGURE_ENV= ac_cv_header_db${BDB_VER}_db_h=yes \ + ac_cv_func_db_create=yes \ + ac_cv_funclib_db_create="-l${BDB_LIB_NAME}" +BDB_CONFIGURE_ON= --disable-ndbm-db +BDB_CONFIGURE_ENV_OFF= ac_cv_header_db_h=yes \ + ac_cv_func_db_create=no \ + ac_cv_funclib_db_create=no +BDB_CONFIGURE_OFF= --enable-ndbm-db + +LMDB_DESC= Enable LMDB KDC backend support +LMDB_CONFIGURE_ENABLE= mdb_db +LMDB_LIB_DEPENDS= liblmdb.so:databases/lmdb + +SQLITE_DESC= Enable SQLite KDC backend support +SQLITE_USES= sqlite +SQLITE_CONFIGURE_ON= --with-sqlite3-include="${LOCALBASE}/include" \ + --with-sqlite3-lib="${LOCALBASE}/lib" +SQLITE_CONFIGURE_WITH= sqlite3 + +LDAP_DESC= Enable OpenLDAP KDC backend support +LDAP_USE= OPENLDAP=yes +LDAP_CONFIGURE_ON= --with-openldap-include="${LOCALBASE}/include" \ + --with-openldap-lib="${LOCALBASE}/lib" +LDAP_CONFIGURE_WITH= openldap + +PKINIT_DESC= Enable PK-INIT support +PKINIT_CONFIGURE_ENABLE=pk-init + +DIGEST_DESC= Enable DIGEST support +DIGEST_CONFIGURE_ENABLE=digest + +KX509_DESC= Enable kx509 support +KX509_CONFIGURE_ENABLE= kx509 + +CRACKLIB_DESC= Use CrackLib for password quality checking +CRACKLIB_LIB_DEPENDS= libcrack.so:security/cracklib + +.include <bsd.port.options.mk> + +post-extract: + @${MKDIR} ${WRKSRC}/kpasswdd-cracklib + ${INSTALL_DATA} ${FILESDIR}/kpasswdd-cracklib.c \ + ${WRKSRC}/kpasswdd-cracklib + ${INSTALL_DATA} ${FILESDIR}/kpasswdd-Makefile \ + ${WRKSRC}/kpasswdd-cracklib/Makefile + +pre-configure: + cd ${WRKSRC} && ./autogen.sh + +post-build-CRACKLIB-on: + cd ${WRKSRC}/kpasswdd-cracklib && \ + ${SETENV} ${MAKE_ENV} ${MAKE} ${MAKE_ARGS} ${BUILD_TARGET} + +post-install-CRACKLIB-on: + cd ${WRKSRC}/kpasswdd-cracklib && \ + ${SETENV} ${MAKE_ENV} ${MAKE} ${MAKE_ARGS} ${INSTALL_TARGET} + +.include <bsd.port.mk> diff --git a/security/heimdal-devel/distinfo b/security/heimdal-devel/distinfo new file mode 100644 index 000000000000..0fac28169091 --- /dev/null +++ b/security/heimdal-devel/distinfo @@ -0,0 +1,3 @@ +TIMESTAMP = 1668725642 +SHA256 (heimdal-heimdal-2022.11.17-c132e6ff4_GH0.tar.gz) = 333ea842bc604c972e2b9b508f3962de01acae6d356222f274ded298f67fb8d8 +SIZE (heimdal-heimdal-2022.11.17-c132e6ff4_GH0.tar.gz) = 13069492 diff --git a/security/heimdal-devel/files/ipropd_master.in b/security/heimdal-devel/files/ipropd_master.in new file mode 100644 index 000000000000..274d6e01303f --- /dev/null +++ b/security/heimdal-devel/files/ipropd_master.in @@ -0,0 +1,45 @@ +#!/bin/sh + +# PROVIDE: ipropd_master +# REQUIRE: kerberos +# KEYWORD: shutdown + +# ipropd_master_keytab: +# Keytab file for iprop service. +# ipropd_master_slaves: +# A list of slave nodes (hostname). + +. /etc/rc.subr + +name=ipropd_master +rcvar=${name}_enable +: ${ipropd_master_enable:=NO} +: ${ipropd_master_program:=%%PREFIX%%/libexec/ipropd-master} +: ${ipropd_master_keytab:="/etc/krb5.keytab"} +required_files="$ipropd_master_keytab" +start_precmd=${name}_start_precmd +start_postcmd=${name}_start_postcmd + +ipropd_master_start_precmd() +{ + + if [ -z "$ipropd_master_slaves" ]; then + warn "\$ipropd_master_slaves is empty." + return 1 + fi + for _slave in $ipropd_master_slaves; do + echo $_slave + done > /var/heimdal/slaves || return 1 + command_args="$command_args \ + --keytab=\"$ipropd_master_keytab\" \ + --detach \ + " +} +ipropd_master_start_postcmd() +{ + + echo "${name}: slave nodes: $ipropd_master_slaves" +} + +load_rc_config $name +run_rc_command "$1" diff --git a/security/heimdal-devel/files/ipropd_slave.in b/security/heimdal-devel/files/ipropd_slave.in new file mode 100644 index 000000000000..482409573aca --- /dev/null +++ b/security/heimdal-devel/files/ipropd_slave.in @@ -0,0 +1,37 @@ +#!/bin/sh + +# PROVIDE: ipropd_slave +# REQUIRE: kerberos +# KEYWORD: shutdown + +# ipropd_slave_keytab: +# Keytab file for iprop service. +# ipropd_slave_master: +# Hostname of the master node. + +. /etc/rc.subr + +name=ipropd_slave +rcvar=${name}_enable +: ${ipropd_slave_enable:=NO} +: ${ipropd_slave_program:=%%PREFIX%%/libexec/ipropd-slave} +: ${ipropd_slave_keytab:="/etc/krb5.keytab"} +required_files="$ipropd_slave_keytab" +start_precmd=${name}_start_precmd + +ipropd_slave_start_precmd() +{ + + if [ -z "$ipropd_slave_master" ]; then + warn "\$ipropd_slave_master is empty." + return 1 + fi + command_args=" \ + $command_args \ + --keytab=\"$ipropd_slave_keytab\" \ + --detach \ + $ipropd_slave_master" +} + +load_rc_config $name +run_rc_command "$1" diff --git a/security/heimdal-devel/files/kpasswdd-Makefile b/security/heimdal-devel/files/kpasswdd-Makefile new file mode 100644 index 000000000000..2ef50e5253f8 --- /dev/null +++ b/security/heimdal-devel/files/kpasswdd-Makefile @@ -0,0 +1,15 @@ +all: kpasswdd-cracklib.so + +kpasswdd-cracklib.so: kpasswdd-cracklib.c + ${CC} ${CFLAGS} -fPIC -shared \ + -DLOCALBASE=\"${LOCALBASE}\" \ + -I${LOCALBASE}/include -I./include \ + -o ${.TARGET} ${.ALLSRC} \ + -lcrack -L${LOCALBASE}/lib + +install-strip: install + +install: ${DESTDIR}${PREFIX}/lib/heimdal/kpasswdd-cracklib.so + +${DESTDIR}${PREFIX}/lib/heimdal/kpasswdd-cracklib.so: kpasswdd-cracklib.so + ${BSD_INSTALL_LIB} ${.ALLSRC} ${.TARGET} diff --git a/security/heimdal-devel/files/kpasswdd-cracklib.c b/security/heimdal-devel/files/kpasswdd-cracklib.c new file mode 100644 index 000000000000..83be6904ebb3 --- /dev/null +++ b/security/heimdal-devel/files/kpasswdd-cracklib.c @@ -0,0 +1,22 @@ +#include <stdlib.h> +#include <string.h> +#include <krb5.h> +#include <packer.h> + +int version = 0; + +const char * +passwd_check(krb5_context context, krb5_principal principal, + krb5_data *password) +{ + char *p, *result; + + p = malloc(password->length + 1); + if (p == NULL) + return "out of memory"; + memcpy(p, password->data, password->length); + p[password->length] = '\0'; + result = FascistCheck(p, LOCALBASE "/libdata/cracklib/cracklib-words"); + free(p); + return result; +} diff --git a/security/heimdal-devel/files/patch-cf-make-proto.pl b/security/heimdal-devel/files/patch-cf-make-proto.pl new file mode 100644 index 000000000000..bf6fd1447cdc --- /dev/null +++ b/security/heimdal-devel/files/patch-cf-make-proto.pl @@ -0,0 +1,11 @@ +--- cf/make-proto.pl.orig 2019-06-07 06:21:35 UTC ++++ cf/make-proto.pl +@@ -4,7 +4,7 @@ + use Getopt::Std; + use File::Compare; + +-use JSON; ++# use JSON; + + my $comment = 0; + my $doxygen = 0; diff --git a/security/heimdal-devel/files/patch-cf_check-compile-et.m4 b/security/heimdal-devel/files/patch-cf_check-compile-et.m4 new file mode 100644 index 000000000000..49dd2ffeaacc --- /dev/null +++ b/security/heimdal-devel/files/patch-cf_check-compile-et.m4 @@ -0,0 +1,11 @@ +--- cf/check-compile-et.m4.orig 2022-11-17 06:42:48.000000000 -0800 ++++ cf/check-compile-et.m4 2022-11-17 15:10:14.877952000 -0800 +@@ -7,7 +7,7 @@ + + krb_cv_compile_et="no" + krb_cv_com_err_need_r="" +-krb_cv_compile_et_cross=no ++krb_cv_compile_et_cross=yes + if test "${COMPILE_ET}" != "no"; then + + dnl We have compile_et. Now let's see if it supports `prefix' and `index'. diff --git a/security/heimdal-devel/files/patch-ch_pthreads.m4 b/security/heimdal-devel/files/patch-ch_pthreads.m4 new file mode 100644 index 000000000000..60ada3bc55ac --- /dev/null +++ b/security/heimdal-devel/files/patch-ch_pthreads.m4 @@ -0,0 +1,11 @@ +--- cf/pthreads.m4.orig 2022-11-17 06:42:48.000000000 -0800 ++++ cf/pthreads.m4 2022-11-17 15:04:24.219994000 -0800 +@@ -34,7 +34,7 @@ + ;; + *-*-freebsd*) + native_pthread_support=yes +- PTHREAD_LIBADD="-pthread" ++ PTHREAD_LIBADD="-lpthread" + ;; + *-*-openbsd*) + native_pthread_support=yes diff --git a/security/heimdal-devel/files/patch-configure.ac b/security/heimdal-devel/files/patch-configure.ac new file mode 100644 index 000000000000..048b6c83b622 --- /dev/null +++ b/security/heimdal-devel/files/patch-configure.ac @@ -0,0 +1,10 @@ +--- configure.ac.orig 2019-06-07 06:21:39 UTC ++++ configure.ac +@@ -153,6 +153,7 @@ AC_ARG_ENABLE(kx509, + if test "$enable_kx509" != no ;then + AC_DEFINE([KX509], 1, [Define to enable kx509.]) + fi ++AM_CONDITIONAL(KX509, test "$enable_kx509" != no) + + dnl Need to test if pkg-config exists + PKG_PROG_PKG_CONFIG diff --git a/security/heimdal-devel/files/patch-lib-krb5-krb5_locl.h b/security/heimdal-devel/files/patch-lib-krb5-krb5_locl.h new file mode 100644 index 000000000000..7c1d29183477 --- /dev/null +++ b/security/heimdal-devel/files/patch-lib-krb5-krb5_locl.h @@ -0,0 +1,20 @@ +--- lib/krb5/krb5_locl.h.orig 2019-06-07 06:21:39 UTC ++++ lib/krb5/krb5_locl.h +@@ -143,7 +143,7 @@ struct _krb5_krb_auth_data; + #include <krb5.h> + #include <krb5_err.h> + #include <asn1_err.h> +-#ifdef PKINIT ++#if defined(PKINIT) || defined(KX509) + #include <hx509.h> + #endif + +@@ -271,7 +271,7 @@ typedef struct krb5_context_data { + #define KRB5_CTX_F_RD_REQ_IGNORE 16 + #define KRB5_CTX_F_FCACHE_STRICT_CHECKING 32 + struct send_to_kdc *send_to_kdc; +-#ifdef PKINIT ++#if defined(PKINIT) || defined(KX509) + hx509_context hx509ctx; + #endif + unsigned int num_kdc_requests; diff --git a/security/heimdal-devel/files/patch-lib__sl__slc-lex.l b/security/heimdal-devel/files/patch-lib__sl__slc-lex.l new file mode 100644 index 000000000000..c9d450472321 --- /dev/null +++ b/security/heimdal-devel/files/patch-lib__sl__slc-lex.l @@ -0,0 +1,11 @@ +--- lib/sl/slc-lex.l.orig 2017-04-11 21:38:21 UTC ++++ lib/sl/slc-lex.l +@@ -47,8 +47,6 @@ unsigned lineno = 1; + static void handle_comment(void); + static char * handle_string(void); + +-#define YY_NO_UNPUT +- + #undef ECHO + + %} diff --git a/security/heimdal-devel/files/patch-tools-heimdal-gssapi.pc.in b/security/heimdal-devel/files/patch-tools-heimdal-gssapi.pc.in new file mode 100644 index 000000000000..8e133986b39d --- /dev/null +++ b/security/heimdal-devel/files/patch-tools-heimdal-gssapi.pc.in @@ -0,0 +1,10 @@ +--- tools/heimdal-gssapi.pc.in.orig 2017-04-11 21:38:21 UTC ++++ tools/heimdal-gssapi.pc.in +@@ -9,6 +9,6 @@ Description: Heimdal is an implementatio + Version: @VERSION@ + URL: http://www.pdc.kth.se/heimdal/ + Requires.private: heimdal-krb5 +-Libs: -L${libdir} -lgssapi ++Libs: -L${libdir} -Wl,-rpath=${libdir} -lgssapi + Libs.private: -lheimntlm @LIB_crypt@ + Cflags: -I${includedir} diff --git a/security/heimdal-devel/files/patch-tools-krb5-config.in b/security/heimdal-devel/files/patch-tools-krb5-config.in new file mode 100644 index 000000000000..30d434611fe3 --- /dev/null +++ b/security/heimdal-devel/files/patch-tools-krb5-config.in @@ -0,0 +1,10 @@ +--- tools/krb5-config.in.orig 2017-04-11 21:38:21 UTC ++++ tools/krb5-config.in +@@ -85,6 +85,7 @@ for i in $*; do + ;; + --libs) + do_libs=yes ++ do_lib_deps=yes + ;; + --deps) + do_lib_deps=yes diff --git a/security/heimdal-devel/pkg-descr b/security/heimdal-devel/pkg-descr new file mode 100644 index 000000000000..5f407e6fc487 --- /dev/null +++ b/security/heimdal-devel/pkg-descr @@ -0,0 +1,3 @@ +Heimdal is an implementation of Kerberos 5, largely written in Sweden +(due to crypto export legal issues in the US at the time). It is freely +available under a three clause BSD style license. diff --git a/security/heimdal-devel/pkg-message b/security/heimdal-devel/pkg-message new file mode 100644 index 000000000000..e9c263eac41b --- /dev/null +++ b/security/heimdal-devel/pkg-message @@ -0,0 +1,11 @@ +[ +{ type: install + message: <<EOM +heimdal-7.1.0_1 uses a new database format which is incompatible +with Heimdal in the base system and heimdal-1.5.3_6 or prior. + +Please read 20161112 in /usr/ports/UPDATING carefully to upgrade +your database. +EOM +} +] diff --git a/security/heimdal-devel/pkg-plist b/security/heimdal-devel/pkg-plist new file mode 100644 index 000000000000..7c19b3414004 --- /dev/null +++ b/security/heimdal-devel/pkg-plist @@ -0,0 +1,1258 @@ +bin/afslog +bin/bsearch +bin/gsstool +bin/heimtools +bin/hxtool +bin/idn-lookup +bin/kadmin +bin/kdestroy +bin/kf +bin/kgetcred +bin/kinit +bin/klist +bin/kpasswd +bin/krb5-config +bin/kswitch +bin/ktutil +bin/otp +bin/otpprint +bin/pagsh +bin/string2key +bin/su +bin/verify_krb5_conf +include/heimdal/asn1-common.h +include/heimdal/asn1_err.h +include/heimdal/base64.h +include/heimdal/cms_asn1.h +include/heimdal/com_err.h +include/heimdal/com_right.h +include/heimdal/crmf_asn1.h +include/heimdal/der-private.h +include/heimdal/der-protos.h +include/heimdal/der.h +include/heimdal/digest_asn1.h +include/heimdal/getarg.h +include/heimdal/gssapi.h +include/heimdal/gssapi/gkrb5_err.h +include/heimdal/gssapi/gssapi.h +include/heimdal/gssapi/gssapi_krb5.h +include/heimdal/gssapi/gssapi_ntlm.h +include/heimdal/gssapi/gssapi_oid.h +include/heimdal/gssapi/gssapi_spnego.h +include/heimdal/hcrypto/aes.h +include/heimdal/hcrypto/bn.h +include/heimdal/hcrypto/des.h +include/heimdal/hcrypto/dh.h +include/heimdal/hcrypto/dsa.h +include/heimdal/hcrypto/ec.h +include/heimdal/hcrypto/ecdh.h +include/heimdal/hcrypto/ecdsa.h +include/heimdal/hcrypto/engine.h +include/heimdal/hcrypto/evp-cc.h +include/heimdal/hcrypto/evp-hcrypto.h +include/heimdal/hcrypto/evp-openssl.h +include/heimdal/hcrypto/evp-pkcs11.h +include/heimdal/hcrypto/evp.h +include/heimdal/hcrypto/hmac.h +include/heimdal/hcrypto/md4.h +include/heimdal/hcrypto/md5.h +include/heimdal/hcrypto/pkcs12.h +include/heimdal/hcrypto/rand.h +include/heimdal/hcrypto/rc2.h +include/heimdal/hcrypto/rc4.h +include/heimdal/hcrypto/rsa.h +include/heimdal/hcrypto/sha.h +include/heimdal/hcrypto/ui.h +include/heimdal/hcrypto/undef.h +include/heimdal/hdb-protos.h +include/heimdal/hdb.h +include/heimdal/hdb_asn1.h +include/heimdal/hdb_err.h +include/heimdal/heim-ipc.h +include/heimdal/heim_asn1.h +include/heimdal/heim_err.h +include/heimdal/heimbase.h +include/heimdal/heimntlm-protos.h +include/heimdal/heimntlm.h +include/heimdal/hex.h +include/heimdal/hx509-protos.h +include/heimdal/hx509.h +include/heimdal/hx509_err.h +include/heimdal/k524_err.h +include/heimdal/kadm5/admin.h +include/heimdal/kadm5/kadm5-private.h +include/heimdal/kadm5/kadm5-protos.h +include/heimdal/kadm5/kadm5-pwcheck.h +include/heimdal/kadm5/kadm5_err.h +include/heimdal/kadm5/private.h +include/heimdal/kafs.h +include/heimdal/kdc-protos.h +include/heimdal/kdc.h +include/heimdal/krb5-protos.h +include/heimdal/krb5-types.h +include/heimdal/krb5.h +include/heimdal/krb5/an2ln_plugin.h +include/heimdal/krb5/ccache_plugin.h +include/heimdal/krb5/db_plugin.h +include/heimdal/krb5/locate_plugin.h +include/heimdal/krb5/send_to_kdc_plugin.h +include/heimdal/krb5/windc_plugin.h +include/heimdal/krb5_asn1.h +include/heimdal/krb5_ccapi.h +include/heimdal/krb5_err.h +include/heimdal/kx509_asn1.h +include/heimdal/ntlm_err.h +include/heimdal/ocsp_asn1.h +include/heimdal/otp.h +include/heimdal/parse_bytes.h +include/heimdal/parse_time.h +include/heimdal/parse_units.h +include/heimdal/pkcs10_asn1.h +include/heimdal/pkcs12_asn1.h +include/heimdal/pkcs8_asn1.h +include/heimdal/pkcs9_asn1.h +include/heimdal/pkinit_asn1.h +include/heimdal/resolve.h +include/heimdal/rfc2459_asn1.h +include/heimdal/roken-common.h +include/heimdal/roken.h +include/heimdal/rtbl.h +include/heimdal/sl.h +include/heimdal/wind.h +include/heimdal/wind_err.h +include/heimdal/xdbm.h +%%CRACKLIB%%lib/heimdal/kpasswdd-cracklib.so +lib/heimdal/libasn1.a +lib/heimdal/libasn1.so +lib/heimdal/libasn1.so.8 +lib/heimdal/libasn1.so.8.0.0 +lib/heimdal/libcom_err.a +lib/heimdal/libcom_err.so +lib/heimdal/libcom_err.so.1 +lib/heimdal/libcom_err.so.1.1.3 +lib/heimdal/libgssapi.a +lib/heimdal/libgssapi.so +lib/heimdal/libgssapi.so.3 +lib/heimdal/libgssapi.so.3.0.0 +lib/heimdal/libhcrypto.a +lib/heimdal/libhcrypto.so +lib/heimdal/libhcrypto.so.4 +lib/heimdal/libhcrypto.so.4.1.0 +lib/heimdal/libhdb.a +lib/heimdal/libhdb.so +lib/heimdal/libhdb.so.9 +lib/heimdal/libhdb.so.9.2.0 +lib/heimdal/libheimbase.a +lib/heimdal/libheimbase.so +lib/heimdal/libheimbase.so.1 +lib/heimdal/libheimbase.so.1.0.0 +lib/heimdal/libheimntlm.a +lib/heimdal/libheimntlm.so +lib/heimdal/libheimntlm.so.0 +lib/heimdal/libheimntlm.so.0.1.0 +%%NO_SQLITE%%lib/heimdal/libheimsqlite.a +%%NO_SQLITE%%lib/heimdal/libheimsqlite.so +%%NO_SQLITE%%lib/heimdal/libheimsqlite.so.0 +%%NO_SQLITE%%lib/heimdal/libheimsqlite.so.0.0.0 +lib/heimdal/libhx509.a +lib/heimdal/libhx509.so +lib/heimdal/libhx509.so.5 +lib/heimdal/libhx509.so.5.0.0 +lib/heimdal/libkadm5clnt.a +lib/heimdal/libkadm5clnt.so +lib/heimdal/libkadm5clnt.so.7 +lib/heimdal/libkadm5clnt.so.7.0.1 +lib/heimdal/libkadm5srv.a +lib/heimdal/libkadm5srv.so +lib/heimdal/libkadm5srv.so.8 +lib/heimdal/libkadm5srv.so.8.0.1 +lib/heimdal/libkafs.a +lib/heimdal/libkafs.so +lib/heimdal/libkafs.so.0 +lib/heimdal/libkafs.so.0.5.1 +lib/heimdal/libkdc.a +lib/heimdal/libkdc.so +lib/heimdal/libkdc.so.2 +lib/heimdal/libkdc.so.2.0.0 +lib/heimdal/libkrb5.a +lib/heimdal/libkrb5.so +lib/heimdal/libkrb5.so.26 +lib/heimdal/libkrb5.so.26.0.0 +lib/heimdal/libotp.a +lib/heimdal/libotp.so +lib/heimdal/libotp.so.0 +lib/heimdal/libotp.so.0.1.5 +lib/heimdal/libroken.a +lib/heimdal/libroken.so +lib/heimdal/libroken.so.18 +lib/heimdal/libroken.so.18.1.0 +lib/heimdal/libsl.a +lib/heimdal/libsl.so +lib/heimdal/libsl.so.0 +lib/heimdal/libsl.so.0.2.1 +lib/heimdal/libwind.a +lib/heimdal/libwind.so +lib/heimdal/libwind.so.0 +lib/heimdal/libwind.so.0.0.0 +lib/heimdal/windc.a +lib/heimdal/windc.so +lib/heimdal/windc.so.0 +lib/heimdal/windc.so.0.0.0 +libdata/pkgconfig/heimdal-gssapi.pc +libdata/pkgconfig/heimdal-kadm-client.pc +libdata/pkgconfig/heimdal-kadm-server.pc +libdata/pkgconfig/heimdal-krb5.pc +libdata/pkgconfig/kadm-client.pc +libdata/pkgconfig/kadm-server.pc +libdata/pkgconfig/kafs.pc +libdata/pkgconfig/krb5-gssapi.pc +libdata/pkgconfig/krb5.pc +libexec/digest-service +libexec/heimdal/asn1_compile +libexec/heimdal/asn1_print +libexec/heimdal/slc +libexec/hprop +libexec/hpropd +libexec/ipropd-master +libexec/ipropd-slave +libexec/kadmind +libexec/kcm +libexec/kdc +libexec/kdigest +libexec/kfd +libexec/kimpersonate +libexec/kpasswdd +man/man1/afslog.1.gz +man/man1/bsearch.1.gz +man/man1/kadmin.1.gz +man/man1/kdestroy.1.gz +man/man1/kf.1.gz +man/man1/kgetcred.1.gz +man/man1/kinit.1.gz +man/man1/klist.1.gz +man/man1/kpasswd.1.gz +man/man1/krb5-config.1.gz +man/man1/kswitch.1.gz +man/man1/ktutil.1.gz +man/man1/otp.1.gz +man/man1/otpprint.1.gz +man/man1/pagsh.1.gz +man/man1/su.1.gz +man/man3/HDB.3.gz +man/man3/arg_printusage.3.gz +man/man3/data.3.gz +man/man3/ecalloc.3.gz +man/man3/emalloc.3.gz +man/man3/eread.3.gz +man/man3/erealloc.3.gz +man/man3/esetenv.3.gz +man/man3/estrdup.3.gz +man/man3/ewrite.3.gz +man/man3/getarg.3.gz +man/man3/gss_accept_sec_context.3.gz +man/man3/gss_acquire_cred.3.gz +man/man3/gss_add_cred.3.gz +man/man3/gss_add_oid_set_member.3.gz +man/man3/gss_canonicalize_name.3.gz +man/man3/gss_compare_name.3.gz +man/man3/gss_context_time.3.gz +man/man3/gss_create_empty_oid_set.3.gz +man/man3/gss_delete_sec_context.3.gz +man/man3/gss_display_name.3.gz +man/man3/gss_display_status.3.gz +man/man3/gss_duplicate_name.3.gz +man/man3/gss_export_name.3.gz +man/man3/gss_export_sec_context.3.gz +man/man3/gss_get_mic.3.gz +man/man3/gss_import_name.3.gz +man/man3/gss_import_sec_context.3.gz +man/man3/gss_indicate_mechs.3.gz +man/man3/gss_init_sec_context.3.gz +man/man3/gss_inquire_attrs_for_mech.3.gz +man/man3/gss_inquire_context.3.gz +man/man3/gss_inquire_cred.3.gz +man/man3/gss_inquire_cred_by_mech.3.gz +man/man3/gss_inquire_mechs_for_name.3.gz +man/man3/gss_inquire_names_for_mech.3.gz +man/man3/gss_inquire_saslname_for_mech.3.gz +man/man3/gss_krb5_ccache_name.3.gz +man/man3/gss_krb5_compat_des3_mic.3.gz +man/man3/gss_krb5_copy_ccache.3.gz +man/man3/gss_krb5_get_tkt_flags.3.gz +man/man3/gss_krb5_import_ccache.3.gz +man/man3/gss_krb5_import_cred.3.gz +man/man3/gss_oid_equal.3.gz +man/man3/gss_process_context_token.3.gz +man/man3/gss_release_buffer.3.gz +man/man3/gss_release_cred.3.gz +man/man3/gss_release_iov_buffer.3.gz +man/man3/gss_release_name.3.gz +man/man3/gss_release_oid_set.3.gz +man/man3/gss_seal.3.gz +man/man3/gss_sign.3.gz +man/man3/gss_test_oid_set_member.3.gz +man/man3/gss_unseal.3.gz +man/man3/gss_unwrap.3.gz +man/man3/gss_unwrap_iov.3.gz +man/man3/gss_verify.3.gz +man/man3/gss_verify_mic.3.gz +man/man3/gss_wrap.3.gz +man/man3/gss_wrap_iov.3.gz +man/man3/gss_wrap_iov_length.3.gz +man/man3/gss_wrap_size_limit.3.gz +man/man3/gssapi.3.gz +man/man3/gssapi_mechs_intro.3.gz +man/man3/gssapi_services_intro.3.gz +man/man3/gsskrb5_extract_authz_data_from_sec_context.3.gz +man/man3/gsskrb5_register_acceptor_identity.3.gz +man/man3/hdb__del.3.gz +man/man3/hdb__get.3.gz +man/man3/hdb__put.3.gz +man/man3/hdb_auth_status.3.gz +man/man3/hdb_check_constrained_delegation.3.gz +man/man3/hdb_check_pkinit_ms_upn_match.3.gz +man/man3/hdb_check_s4u2self.3.gz +man/man3/hdb_close.3.gz +man/man3/hdb_destroy.3.gz +man/man3/hdb_entry_ex.3.gz +man/man3/hdb_fetch_kvno.3.gz +man/man3/hdb_firstkey.3.gz +man/man3/hdb_free.3.gz +man/man3/hdb_get_realms.3.gz +man/man3/hdb_lock.3.gz +man/man3/hdb_name.3.gz +man/man3/hdb_nextkey.3.gz +man/man3/hdb_open.3.gz +man/man3/hdb_password.3.gz +man/man3/hdb_remove.3.gz +man/man3/hdb_rename.3.gz +man/man3/hdb_set_sync.3.gz +man/man3/hdb_store.3.gz +man/man3/hdb_unlock.3.gz +man/man3/heim_ntlm_build_ntlm1_master.3.gz +man/man3/heim_ntlm_build_ntlm2_master.3.gz +man/man3/heim_ntlm_calculate_lm2.3.gz +man/man3/heim_ntlm_calculate_ntlm1.3.gz +man/man3/heim_ntlm_calculate_ntlm2.3.gz +man/man3/heim_ntlm_decode_targetinfo.3.gz +man/man3/heim_ntlm_encode_targetinfo.3.gz +man/man3/heim_ntlm_encode_type1.3.gz +man/man3/heim_ntlm_encode_type2.3.gz +man/man3/heim_ntlm_encode_type3.3.gz +man/man3/heim_ntlm_free_buf.3.gz +man/man3/heim_ntlm_free_targetinfo.3.gz +man/man3/heim_ntlm_free_type1.3.gz +man/man3/heim_ntlm_free_type2.3.gz +man/man3/heim_ntlm_free_type3.3.gz +man/man3/heim_ntlm_keyex_unwrap.3.gz +man/man3/heim_ntlm_nt_key.3.gz +man/man3/heim_ntlm_ntlmv2_key.3.gz +man/man3/heim_ntlm_verify_ntlm2.3.gz +man/man3/heimbase.3.gz +man/man3/hx509.3.gz +man/man3/hx509_bitstring_print.3.gz +man/man3/hx509_ca.3.gz +man/man3/hx509_ca_sign.3.gz +man/man3/hx509_ca_sign_self.3.gz +man/man3/hx509_ca_tbs_add_crl_dp_uri.3.gz +man/man3/hx509_ca_tbs_add_eku.3.gz +man/man3/hx509_ca_tbs_add_san_hostname.3.gz +man/man3/hx509_ca_tbs_add_san_jid.3.gz +man/man3/hx509_ca_tbs_add_san_ms_upn.3.gz +man/man3/hx509_ca_tbs_add_san_otherName.3.gz +man/man3/hx509_ca_tbs_add_san_pkinit.3.gz +man/man3/hx509_ca_tbs_add_san_rfc822name.3.gz +man/man3/hx509_ca_tbs_free.3.gz +man/man3/hx509_ca_tbs_init.3.gz +man/man3/hx509_ca_tbs_set_ca.3.gz +man/man3/hx509_ca_tbs_set_domaincontroller.3.gz +man/man3/hx509_ca_tbs_set_notAfter.3.gz +man/man3/hx509_ca_tbs_set_notAfter_lifetime.3.gz +man/man3/hx509_ca_tbs_set_notBefore.3.gz +man/man3/hx509_ca_tbs_set_proxy.3.gz +man/man3/hx509_ca_tbs_set_serialnumber.3.gz +man/man3/hx509_ca_tbs_set_signature_algorithm.3.gz +man/man3/hx509_ca_tbs_set_spki.3.gz +man/man3/hx509_ca_tbs_set_subject.3.gz +man/man3/hx509_ca_tbs_set_template.3.gz +man/man3/hx509_ca_tbs_set_unique.3.gz +man/man3/hx509_ca_tbs_subject_expand.3.gz +man/man3/hx509_ca_tbs_template_units.3.gz +man/man3/hx509_cert.3.gz +man/man3/hx509_cert_binary.3.gz +man/man3/hx509_cert_check_eku.3.gz +man/man3/hx509_cert_cmp.3.gz +man/man3/hx509_cert_find_subjectAltName_otherName.3.gz +man/man3/hx509_cert_free.3.gz +man/man3/hx509_cert_get_SPKI.3.gz +man/man3/hx509_cert_get_SPKI_AlgorithmIdentifier.3.gz +man/man3/hx509_cert_get_attribute.3.gz +man/man3/hx509_cert_get_base_subject.3.gz +man/man3/hx509_cert_get_friendly_name.3.gz +man/man3/hx509_cert_get_issuer.3.gz +man/man3/hx509_cert_get_issuer_unique_id.3.gz +man/man3/hx509_cert_get_notAfter.3.gz +man/man3/hx509_cert_get_notBefore.3.gz +man/man3/hx509_cert_get_serialnumber.3.gz +man/man3/hx509_cert_get_subject.3.gz +man/man3/hx509_cert_get_subject_unique_id.3.gz +man/man3/hx509_cert_init.3.gz +man/man3/hx509_cert_init_data.3.gz +man/man3/hx509_cert_keyusage_print.3.gz +man/man3/hx509_cert_ref.3.gz +man/man3/hx509_cert_set_friendly_name.3.gz +man/man3/hx509_certs_add.3.gz +man/man3/hx509_certs_append.3.gz +man/man3/hx509_certs_end_seq.3.gz +man/man3/hx509_certs_filter.3.gz +man/man3/hx509_certs_find.3.gz +man/man3/hx509_certs_free.3.gz +man/man3/hx509_certs_info.3.gz +man/man3/hx509_certs_init.3.gz +man/man3/hx509_certs_iter_f.3.gz +man/man3/hx509_certs_merge.3.gz +man/man3/hx509_certs_next_cert.3.gz +man/man3/hx509_certs_start_seq.3.gz +man/man3/hx509_certs_store.3.gz +man/man3/hx509_ci_print_names.3.gz +man/man3/hx509_clear_error_string.3.gz +man/man3/hx509_cms.3.gz +man/man3/hx509_cms_create_signed_1.3.gz +man/man3/hx509_cms_envelope_1.3.gz +man/man3/hx509_cms_unenvelope.3.gz +man/man3/hx509_cms_unwrap_ContentInfo.3.gz +man/man3/hx509_cms_verify_signed.3.gz +man/man3/hx509_cms_wrap_ContentInfo.3.gz +man/man3/hx509_context_free.3.gz +man/man3/hx509_context_init.3.gz +man/man3/hx509_context_set_missing_revoke.3.gz +man/man3/hx509_crl_add_revoked_certs.3.gz +man/man3/hx509_crl_alloc.3.gz +man/man3/hx509_crl_free.3.gz +man/man3/hx509_crl_lifetime.3.gz +man/man3/hx509_crl_sign.3.gz +man/man3/hx509_crypto.3.gz +man/man3/hx509_env.3.gz +man/man3/hx509_env_add.3.gz +man/man3/hx509_env_add_binding.3.gz +man/man3/hx509_env_find.3.gz +man/man3/hx509_env_find_binding.3.gz +man/man3/hx509_env_free.3.gz +man/man3/hx509_env_lfind.3.gz +man/man3/hx509_err.3.gz +man/man3/hx509_error.3.gz +man/man3/hx509_free_error_string.3.gz +man/man3/hx509_free_octet_string_list.3.gz +man/man3/hx509_general_name_unparse.3.gz +man/man3/hx509_get_error_string.3.gz +man/man3/hx509_get_one_cert.3.gz +man/man3/hx509_keyset.3.gz +man/man3/hx509_lock.3.gz +man/man3/hx509_misc.3.gz +man/man3/hx509_name.3.gz +man/man3/hx509_name_binary.3.gz +man/man3/hx509_name_cmp.3.gz +man/man3/hx509_name_copy.3.gz +man/man3/hx509_name_expand.3.gz +man/man3/hx509_name_free.3.gz +man/man3/hx509_name_is_null_p.3.gz +man/man3/hx509_name_to_Name.3.gz +man/man3/hx509_name_to_string.3.gz +man/man3/hx509_ocsp_request.3.gz +man/man3/hx509_ocsp_verify.3.gz +man/man3/hx509_oid_print.3.gz +man/man3/hx509_oid_sprint.3.gz +man/man3/hx509_parse_name.3.gz +man/man3/hx509_peer.3.gz +man/man3/hx509_peer_info_add_cms_alg.3.gz +man/man3/hx509_peer_info_alloc.3.gz +man/man3/hx509_peer_info_free.3.gz +man/man3/hx509_peer_info_set_cert.3.gz +man/man3/hx509_peer_info_set_cms_algs.3.gz +man/man3/hx509_print.3.gz +man/man3/hx509_print_cert.3.gz +man/man3/hx509_print_stdout.3.gz +man/man3/hx509_query.3.gz +man/man3/hx509_query_alloc.3.gz +man/man3/hx509_query_free.3.gz *** 781 LINES SKIPPED ***