[Bug 247940] Introduce gssapi=.. in DEFAULT_VERSIONS like for ssl=...

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 11 Sep 2023 17:06:30 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=247940

--- Comment #10 from Joseph Mingrone <jrm@freebsd.org> ---
(In reply to Michael Osipov from comment #7)
Based on your latest comment, there may be a few improvements we can
make.

- Update the default options for some ports, so hopefully you have fewer
  packages to build yourself.

- Ensure that more ports use standardized names for the GSSAPI/Kerberos
  options.  Of the ports you listed, most have the option names
  GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT, so we're close.  A few also
  have GSSAPI_NONE.

  This is good because it means you can put something like what's below
  in make.conf to configure most ports that have a GSSAPI knob and avoid
  the port dialogues.

  OPTIONS_SET_FORCE+=GSSAPI_MIT
  OPTIONS_UNSET_FORCE+=GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_NONE

  If there is a specific port, like ftp/curl, that you want configured
  differently, you also add this to make.conf.

  ftp_curl_SET_FORCE+=GSSAPI_HEIMDAL
  ftp_curl_UNSET_FORCE+=GSSAPI_BASE GSSAPI_MIT GSSAPI_NONE

  I tested by putting these lines in
  /usr/local/etc/poudriere.d/15amd64-make.conf and built the ports
  without answering any dialogues.  This is the result.

  % pkg info dns/bind918 | grep GSSAPI
        GSSAPI_BASE    : off
        GSSAPI_HEIMDAL : off
        GSSAPI_MIT     : on
        GSSAPI_NONE    : off

  # pkg info curl | grep GSSAPI
        GSSAPI_BASE    : off
        GSSAPI_HEIMDAL : on
        GSSAPI_MIT     : off
        GSSAPI_NONE    : off

Is this helpful?

Joe

-- 
You are receiving this mail because:
You are on the CC list for the bug.