aboutsummaryrefslogtreecommitdiffstats
path: root/security/krb5-17
Commit message (Collapse)AuthorAgeFilesLines
* Fix pkg-plist when KRB5_KRB4_COMPAT=NO is specified.cy2002-10-292-9/+15
| | | | Submitted by: Craig Boston <craig@olyun.gank.org>
* Circumvent the use of bison, use FreeBSD yacc instead.cy2002-10-251-1/+1
| | | | PR: 44446
* Fix buffer overflow in kadmind4 (remote user can gain root access tocy2002-10-242-0/+27
| | | | | | | KDC host). Obtained from: Tom Yu <tlyu@mit.edu> on kerberos-announce mailing list, MIT krb5 Security Advisory 2002-002
* Crypto-publish.org has finally put krb5-1.2.6 up on their site. Thecy2002-09-262-7/+3
| | | | | | | patch reimplements code to fetch MIT Kerberos from their site when USA_RESIDENT=NO. Approved by: kris
* Update 1.2.5 --> 1.2.6cy2002-09-134-42/+9
| | | | | Note: Since crypto-publish.org does not yet have krb5-1.2.6 up on their website, fetch from their site has been temporarily disabled.
* Fix extract for non-root users.cy2002-08-171-2/+6
| | | | | Noticed by: nectar Pointy hat to: cy
* Correct Sun RPC buffer overflow.nectar2002-08-032-1/+21
| | | | | <URL:http://online.securityfocus.com/archive/1/285308> <URL:http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823>
* README.FreeBSD fix.cy2002-07-011-1/+1
| | | | | PR: 39936 Submitted by: Matthew West <mwest@uct.ac.za>
* Fix problem with V4 keys. We should get KRB5_KDB_NO_MATCHING_KEY, notcy2002-06-262-0/+17
| | | | | | | | ENOENT. Obtained from /cvs/krbdev/krb5/src/kdc/kdc_preauth.c,v rev 5.31 in MIT KRB5 tree (fix etype info; wrong termination condition used in get_etype_info). Obtained from: Sam Hartman <hartmans@mit.edu>
* I add missing krb5-config.cy2002-06-161-0/+1
|
* Now that www.crypto-publish.org has put the latest version of MIT KRB5cy2002-05-032-1/+9
| | | | | | | up on their website again, reimplementation of the Makefile patch that fetched the the tarball from their site for users outside of the US (originally in Makefile rev 1.29). USA_RESIDENT=YES still supports manual fetching from web.mit.edu.
* Upgrade 1.2.4 --> 1.2.5cy2002-05-022-2/+2
|
* www.crypto-publish.org does not have krb5-1.2.4.{tar,tar.Z,tar.gz,tar.bz2}.cy2002-03-291-6/+0
| | | | Reported by: bento
* MIT currently distributes their KRB5 distribution in a tarball (.tar)cy2002-03-192-1/+8
| | | | | | | | | | that contains the distribution itself, in a tar.gz file, and a signature certificate, contained in a detached .tar.gz.asc file. Prior to this patch, users installing MIT KRB5 had to extract the tarball into /usr/ports/distfiles, then proceed with the installation. This caused confusion among those installing the port. This patch addresses the problem by extracting the .tar.gz file from the tarball, then unpacking the .tar.gz file before continuing with the build.
* Update 1.2.3 --> 1.2.4cy2002-03-012-2/+2
|
* Update 1.2.2 -> 1.2.3cy2002-01-1613-1600/+56
|
* In order to make the MIT KRB5 port compatible with FreeBSD, the portcy2002-01-087-2/+123
| | | | | | | | | | | now makes use of login.conf and login.access. This is performed by using FreeBSD login(1) instead of MIT KRB5 login.krb5(8). The MIT KRB5 login.krb5(8) can still be used by specifying "-L" in the klogind and telnetd arguments in inetd.conf. This is documented in a new file called README.FreeBSD. Reviewed by: nectar
* = Modify `ksu' so that it uses the login cap database. Michael Allmannectar2001-09-082-26/+89
| | | | | | | | | | <msa@dinosauricon.com> provided the original patches. = For users outside of the US, point to www.crypto-publish.org for the distfiles. It was Chris Knight <chris@aims.com.au>'s idea. Submitted by: Cy.Schubert@uumail.gov.bc.ca (MAINTAINER) PR: ports/29865
* New maintainer: Cy Schubert <Cy.Schubert@uumail.gov.bc.ca>nectar2001-07-251-1/+1
|
* Update telnetd vulnerability fixes from FreeBSD.nectar2001-07-251-0/+11
| | | | Submitted by: Cy Schubert <Cy.Schubert@uumail.gov.bc.ca>
* Bump PORTREVISION.nectar2001-07-241-1/+1
| | | | Update telnetd vulnerability fixes from FreeBSD.
* Update telnetd vulnerability fixes from FreeBSD.nectar2001-07-244-28/+102
| | | | Submitted by: Cy Schubert <Cy.Schubert@uumail.gov.bc.ca>
* Merge telnetd vulnerability fix from FreeBSD.nectar2001-07-217-1/+1219
| | | | Submitted by: Cy Schubert <Cy.Schubert@uumail.gov.bc.ca>
* Bump PORTREVISION for ftpd buffer overflow fix.nectar2001-04-281-0/+1
|
* Security fix:nectar2001-04-281-0/+19
| | | | | | | | ``Buffer overflows exist in the FTP daemon included with MIT krb5.'' See <URL:http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt> and <URL:http://web.mit.edu/kerberos/www/advisories/ftpbuf_122_patch.txt>. Obtained from: MIT Kerberos mailing list
* Security fix:nectar2001-04-281-3/+273
| | | | | | | | ``Buffer overflows exist in the FTP daemon included with MIT krb5.'' See <URL:http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt> and <URL:http://web.mit.edu/kerberos/www/advisories/ftpbuf_122_patch.txt>. Obtained from: MIT Kerberos mailing list
* Update 1.2.1 -> 1.2.2nectar2001-03-034-70/+2
|
* Bump PORTREVISION for previous commit (fix for _PATH_NOLOGIN).nectar2001-01-101-0/+1
| | | | Reminded by: kris
* kshd has /etc/nologin hardcoded instead of using _PATH_NOLOGINnectar2001-01-101-0/+28
| | | | | | | | from <paths.h> (if available) like login.krb5 does. As a result, on FreeBSD 4.2 these two programs end up using different paths for the nologin file (which is /var/run/nologin on FreeBSD). Submitted by: <djm@test.pubnix.com>
* Update 1.2 -> 1.2.1. From the announcement:nectar2000-07-012-2/+2
| | | | | | | | | | | | | The MIT Kerberos Team announces the availibility of MIT Kerberos 5 Release 1.2.1. This is primarily a bugfix release. Changes include: * A bug in the gssapi library that prevented kadmin clients from working has been fixed. For some reason this was not caught during beta testing. * login.c now correctly sets the default ccache name. * A memory leak in conv_princ.c has been fixed.
* Oops, had a bogus PORTVERSION/DISTNAME from when I was testingnectar2000-06-241-2/+1
| | | | 1.2-beta4.
* Update 1.1.1 -> 1.2nectar2000-06-245-26/+26
|
* Rename INSTALLS_SHLIBS to INSTALLS_SHLIB. (There was a typo in theasami2000-06-171-1/+1
| | | | | | | | | previous commit message to bsd.port.mk, which said INSTALL_SHLIBS. Boo.) Line up the rhs of variable assignments nicely. Remove a couple of extra whitespaces while I'm here. Suggested by: sobomax
* Fourth round of INSTALLS_SHLIBS conversion.sobomax2000-06-162-4/+1
|
* Update with the new PORTNAME/PORTVERSION variablescpiazza2000-04-101-2/+2
|
* Update 1.1 -> 1.1.1nectar2000-01-175-216/+156
|
* Fix for abort in login.krb5 (segment violation when trying to get anectar1999-10-141-0/+100
| | | | | | TGT). Obtained from: MIT Kerberos GNATS PR krb5-appl/762, 763
* Update 1.0.6 -> 1.1nectar1999-10-047-259/+157
|
* FreeBSD.ORG -> FreeBSD.orgmharo1999-08-311-2/+2
| | | | | Prompted by PR: 13476, 13477 Submitted by: KATO Tsuguru
* $Id$ -> $FreeBSD$peter1999-08-311-1/+1
|
* expr -> ${EXPR}mharo1999-08-281-2/+2
| | | | | | mv -> ${MV} rm -> ${RM} tr -> ${TR}
* chmod -> ${CHMOD}mharo1999-08-231-2/+1
| | | | chown -> ${CHOWN}
* #4/4 enforcing Caps, no periodhoek1999-06-271-1/+1
| | | | | | | | | | | | [Has anyone figured-out what makes the number 393 so interesting to PW, now?] I wonder what was going through Jordan's head during his infamous $Id$-smashing commit. Before I forget.... Thanks to naddy@mips.rhein-neckar.de (Christian Weisgerber) for prompting this commit. See msg-id: 7geokh$tje$1@mips.rhein-neckar.de
* Remove the test to create ${PREFIX}/share/info/dir as it is nowmharo1999-06-062-6/+1
| | | | in bsd.port.mk and this helps to unify the check and install.
* Update 1.0.5 -> 1.0.6nectar1999-05-273-13/+16
|
* Add WWW: to DESCR filesmharo1999-05-031-1/+1
|
* Teach krlogind, telnetd, et. al. about FreeBSD's available ptys.nectar1999-04-061-0/+50
| | | | | | | In other words, /dev/pty[p-zP-T][0-9a-f] -> /dev/pty[p-sP-S][0-9a-v] Submitted by: John Polstra <jdp@polstra.com>
* Make this work with current's new version of texinfo.steve1999-01-261-0/+11
| | | | | PR: 9587 Submitted by: Sheldon Hearn <axl@iafrica.com>
* Use bsd.port.{pre,post}.mk to move PORTOBJFORMAT to front, or changeasami1998-11-141-8/+10
| | | | | shell loops to make loops. Use EXTRA_PKG_FLAGS to add install scripts instead of adding it to PKG_FLAGS after bsd.port.mk.
* Build and install correctly for a.out and ELF.nectar1998-11-072-15/+35
|
* Honour CFLAGS.markm1998-09-271-2/+2
|
* Generalise the fetch process, and allow those outside the USA tomarkm1998-09-151-8/+34
| | | | fetch as well.
* Secure the freedom of the manpages! Free the manpages!hoek1998-08-201-32/+0
| | | | PR: ports/7651
* Use more sane CMD_PATH.dima1998-08-031-0/+13
|
* Honor KRB5_HOME variable.dima1998-08-021-1/+6
|
* Minor change to make it work with other awk versions (The one that OpenBSDdima1998-07-281-2/+2
| | | | has for example)
* * Remove gmake from BUILD_DEPENDS; it is implied by USE_GMAKE.nectar1998-07-071-31/+44
| | | | | | | | * Allow override of CONFIGURE_ARGS. * Control building of KerberosIV compatible libraries with KRB5_KRB4_COMPAT. * Use ECHO, FALSE, and DO_NADA as appropriate. * Combine pre-fetch and do-fetch targets.
* Additional patches (already committed to krb5-current):nectar1998-07-075-0/+298
| | | | | | | | | | | * Paths corrected in applications * ftpd now logs to facility LOG_FTP * use openpty to obtain pseudo-terminal * corrected detection of TCL libraries * fix a forwarding bug * add -m flag to ksu (preserve USER, HOME, SHELL) * cosmetic bug fix to telnet.c Submitted by: Dima Ruban <dima@best.net>
* New port, KerberosV 1.0.5.nectar1998-07-069-0/+372
PR: ports/6870 Submitted by: Jacques Vidrine <n@nectar.com>