security/cyrus-sasl2{,-saslauthd}: lmdb did not work for postfix

- sasldb2-lock requires write permission for mail group
- introduce SASLDB_IN_VAR option which places sasldb into /var/db

Reported by:	Herbert J. Skuhra <herbert@gojira.at>

security/cyrus-sasl2: Remove INVALID_BDB_VER from Makefile.common

PR:		263012
Reported by:	yasu

security/cyrus-sasl2: Update to 2.1.28.

PR:		262133
Relnotes:	https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
Security:	CVE-2019-19906, CVE-2022-24407

security/cyrus-sasl2-sql: Escape password for SQL insert/update commands

Obtained
from:	https://github.com/cyrusimap/cyrus-sasl/commit/2d2e97b0eb53fa7f87a3bf1529d8f712dd954480
Security:	CVE-2022-24407

security/cyrus-sasl2-gssapi: remove patch-plugins_gssapi.c

PR:		260017
Reported by:	Michael Osipov
Discussed with: hrs
MFH:		2021Q4

security/cyrus-sasl2: Disable sphinx build.

PR:		257877

security/cyrus-sasl2: Respect CC.

PR:		257566

net/openldap24-server: Make SASL permanent for OpenLDAP port.

PR:		ports/257374
Reviewed by:	obrien
Approved by:	portmgr (exp-run by antoine)
Differential Revision: https://reviews.freebsd.org/D31301

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

Repo. was moved.

Reported by:	 Odhiambo Washington <odhiambo@gmail.com>

Revert r15574.
It was wrong, and was not approved by the maintainer.

Reported by:	jkim

- Call gss_acquire_cred() before gss_init_sec_context()
  in gssapi_client_mech_step()
- Fix a bug which prevented the client from retrieving
  a credential from CCACHE.

These patches were already merged into upstream.

  https://github.com/cyrusimap/cyrus-sasl/pull/575
  https://github.com/cyrusimap/cyrus-sasl/pull/591

Submitted by:	hrs

bump PORTREVISION for my previous change.

check exit status of sasldblistusers2 when deinstalling
cyrus-sasl2 package.

PR:		243363
Reported by:	hsakamt__at__tsnr.com

security/cyrus-sasl2: unbreak building with stock OpenSSL for stable/11

Sendmail bundled with FreeBSD has SASL support and the Handbook tells
how to rebuild the Sendmail with SASL enabled if you have installed
cyrus-sasl2 that links with OpenSSL's libcrypto.

Sendmail uses old OpenSSL 1.0.2 API, so cyrus-sasl2 should be built
with stock libcrypto even if newer OpenSSL is installed for Ports.

This change adds new option SSL to the port (enabled by default).
If disabled, cyrus-sasl2 is built witch stock libcrypto not depending
on ports version of OpenSSL.

PORTREVISION not changed as default build is not affected.

Drop the ipv6 virtual category for s* category as it is not relevant anymore

Convert to UCL & cleanup pkg-message (categories s)

Fix sanity for cyrus-sasl2 plugins

Update to 2.1.27.

Update `databases/gdbm' to version 1.18.1, an important bugfix release
which restores compatibility with old databases (version 1.8) and some
later versions which were built without mmap(2) support.  Due to shlib
version change, bump port revisions of the consumer ports.

PR:		233059
Exp-run by:	antoine
Approved by:	maintainer (johans, numerous timeouts)

Fix build the saslauthd when the OPENLDAP option is enabled.

PR:		231871
Reported by:	Nathan <ndowens [...] yahoo.com>

Add OpenSSL 1.1.0 support for saslauthd.
There are the patches to support OpenSSL 1.1.0 in cyrus-sasl2
port, already.  But, it was incomplete for saslauthd.

PR:		231647
Submitted by:	dewayne [...] heuristicsystems.com.au (with some modifications)

- Backport from 2.1.27-rc7 OpenSSL 1.1 fixes
- Fix WWW

PR:		225891
Submitted by:	brnrd

Make local DB-errors more descriptive.
This patch will be included into comming 2.1.27.

PR:		198323
Submitted by:	Mikhail Teterin

Remove support for variables that have been deprecated for a while.

variables                  deprecation       revision
WITHOUT_NLS                2013-12-13        r336337
WITH_/WITHOUT_             2014-02-24        r345870
NOPORT(DOC|EXAMPLE)S       2014-04-19        r351587
WITH_BDB_VER               2016-05-02        r414444
OVERRIDE_LINUX_BASE_PORT   2016-09-05        r421387
WITH_OPENSSL_(BASE|PORT)   2016-06-16        r416965

While there, add an ERROR variable that works like DEV_ERROR, but for
user facing errors, and move NOPORTDOCS,
NOPORTEXAMPLES and WITHOUT_NLS to it.

Cleanup bsd.sanity.mk a bit.

Fix fallout.

PR:		224613
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D13490

security/cyrus-sasl2: separate sql plugins into security/cyrus-sasl2-sql
Fix circular-dependency problem happens after SASL/LDAP was added as
plugin to mysql57-client in r446496

Reviewed by:	bapt, mat (mentor), ume (maintainer)
Approved by:	mat (mentor), ume (maintainer)
MFH:		2017Q3
Differential Revision:	https://reviews.freebsd.org/D11805

Unbreak, do not overwrite USES

Remove all USE_OPENSSL occurrences.

Sponsored by:	Absolight

Use USES=bdb and USES=mysql.

Remove USE_SQLITE from bsd.databases.mk, replaced by USES=sqlite.

While there replace USE_SQLITE=x by USES=sqlite:x.

PR:		208971
Submitted by:	mat
Exp-run by:	antoine
With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D5951

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

Make it buildable with GDBM on.

PR:		208194
Reported by:	vas__at__mpeks.tomsk.su

Add the forgot patch at my previous commit.

- Make SASLdb excludable.
- Make SASLdb buildable with GDBM.
- Make sure to disable the plugins where it is not required.

Move PLIST_FILES for plugins into cyrus-sasl2/Makefile.common.

Move the common part of the cyrus-sasl2 separated ports into
Makefile.common, to make further maintenance easier.

Revert r409585 to avoid dependency loop.
I've completely forgot this issue.

PR:		207512

OPTIONSfy ANONYMOUS authentication.
On by default.

Add OPTIONS for the separeted cyrus-sasl2 ports.

Add Cyrus SASL SRP authentication plugin.

Requested by:	Kyle Amon <amonk__at__backwatcher.com>

Use OPTIONS helper.

r398691 placed the patch in the wrong directory, where it had no effect.
Move it to the master port and bump the subport again.

Reviewed by:	ume@

Backout r398328 and r398370, they break packages depending on them.

With hat:	portmgr
MFH:		2015Q4
Sponsored by:	Absolight, The FreeBSD Foundation

Use SUB_FILES.

Fix DOCSDIR.

Sync package name with origin.

PR:		202756

Add CPE information.

fix option of pw.

Spotted by:	Sean Eric Fagan <sef__at__Kithrup.COM>

Switch to USES=pgsql

Simplify plist

databases/sqlite2:
- Convert to USES=libtool and bump dependent ports

Rename all patches that contain '::' as a path separator, and use
'__' instead.

Bump more ports that depend on libsqlite3.so:
- ports that set USE_SQLITE with the *_USE option helper
- ports that depend on libsqlite3 indirectly as reported by pkg rquery

Approved by:	portmgr (implicit)

- Keep .la files for now and delete a libtool patch. [1]
- Replace a Makefile.in patch with USES=pathfix.

Reported by:	Willy Offermans <Willy@Offermans.Rompen.nl> [1]

A postscript was added to pkg-messase so that those who
need them for existence of cyrus-sasl2-gssapi and
cyrus-sasl2-ldapdb might notice.

Spotted by:	zi

- Use USES=libtool
- Add one more MASTER_SITE
- Add DOCS to OPTIONS_DEFINE

Fix build with enabling SQLITE on recent 10-STABLE and later.

Spotted by:	Marc Fournier <scrappy__at__hub.org>

Make libsasl2.pc usable.

Spotted by:	davide

SASL GSSAPI authentication plugin is divided into port
different from cyrus-sasl2.

Spotted by:	Erick Turnquist <jhujhiti__at__adjectivism.org>,
		Scot Hetzel <swhetzel__at__gmail.com>

Strip shared library.

use opt_USE knob.

Spotted by:	sunpoet

enable stage.

- use modern OPTIONS helper.
- remove LATEST_LINK as this port has no package name collision.

- Try to unbreak parallel (-jX) builds
- Improve knobs sort order within Makefile

Reported by:	crees, marino
Approved by:	ume (maintainer timeout, 3 weeks)

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

Mark security/cyrus-sasl2 MAKE_JOBS_UNSAFE.

PR:		ports/181626
Submitted by:	amdmi3

- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)

- Add http mirror in case FTP is not available

Approved by:	portmgr (implicit)

Don't search lib32 on FreeBSD/i386.

Use proper krb5-config when using HEIMDAL in ports.

When building with security/krb5 (specifying KRB5_HOME), make
sure to link mit-krb5 libs.

Mark cyrus-sasl2 as MAKE_JOBS_SAFE.

Submitted by:	Kevin Zheng <kevinz5000__at__gmail.com>

Add upstream commit to define size_t in sasl.h.

PR:		ports/174379, ports/174692
Submitted by:	rakuco
Obtained
from:	http://git.cyrusimap.org/cyrus-sasl/commit/include/sasl.h?id=67a188693796a14e3a76ac603104807fbbfddfc4

- Use OPTIONS_RADIO and OPTIONS_GROUP.
- Remove useless DEV_URANDOM option. [1]

Spotted by:	des[1]

Commit the patch that was forgotten when my
previous commit.

Pointy hat to:	ume

Update cyrus-sasl2 to 2.1.26.
This bumps shlib version of libsasl2.

Convert to use new OPTIONS framework.

Fix broken get_fqhostname() logic. Without that fix mail/mutt-devel
compiled with WITH_MUTT_CYRUS_SASL2 option is not able to
connect to IMAPS mailbox.

PR:             161890
Submitted by:   novel (myself)
Approved by:    maintainer timeout (more than 4 months)
Obtained from:  https://bugzilla.cyrusimap.org/show_bug.cgi?id=3589
Feature safe:   yes

Fix GSSAPI client crash, NULL ptr dereference.

Submitted by:   Phil Pennock <cyrus-sasl-phil__at__spodhuis.org>
Obtained from: 
http://lists.andrew.cmu.edu/pipermail/cyrus-sasl/2011-October/002358.html

Update to 2.1.25.

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

Try to fix GSSAPI when using heimdal from ports.

Submitted by:   Graham Todd <gtodd__at__bellanet.org>
Feature safe:   yes

Backout previous commit.
Unfortunately, it broke GSSAPI when using heimdal in base.
I have no idea how to detect whether heimdal is in base or
from ports, now.

Feature safe:   yes

* Fix GSSAPI when using heimdal from ports

PR:             152071
Submitted by:   Joerg Pulz <Joerg.Pulz@frm2.tum.de>
Approved by:    maintainer timeout
Feature safe:   yes

Sync to new bsd.autotools.mk

- Remove KERBEROS4 option which depends on a removed port
  (security/krb4)
- Use dirrmtry on PREFIX/lib/sasl2 where configurations may stay
- Remove MD5 in distinfo

PR:             ports/152261
Submitted by:   sunpoet

Make it buildable with db50.

Fix compilation with gcc44.
It seems there is this fix in cyrus-sasl-2.1.24rc1.

PR:             132573
Submitted by:   Anonymous <swell.k__at__gmail.com>
Reviewed by:    OISHI Masakuni <yamasa__at__bsdhouse.org>

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:      marcus and kwm
Pointyhat-exp:  a few times by pav
Tested by:      pgollucci, "Romain Tartière" <romain@blogreen.org>, and
                a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:    marcus
Approved by:    portmgr

Update to 2.1.23.

Security:       http://www.kb.cert.org/vuls/id/238019

Be able to install as non-root.

PR:             ports/133791
Submitted by:   jhb

- Remove conditional checks for FreeBSD 5.x and older

Change authdaemond_path from /dev/null to
/var/run/authdaemond/socket.  Though, authdaemond_path could
be set by the sasl2 config file, it should be good to have
its default value for ports/security/courier-authlib.

PR:             ports/95102, ports/122234
Submitted by:   Artis Caune <Artis.Caune__at__latnet.lv>

- Install saslauthd.mdoc to ${PREFIX}/man/man8/saslauthd.8.
- Use ${BDB_LIB_DIR}.

PR:             ports/127809
Submitted by:   "Scot W. Hetzel" <swhetzel__at__gmail.com>

Oops, forgot to commit the fix

- Use OPTIONS.
- Obey the default BDB version defined in bsd.database.mk.

Allow to build with db45 and db46 as well.

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
  supports them.  This is determined by running ``configure --help'' in
  do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
  which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
  Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
  PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
  subdirectory detection.

PR:             ports/111470
Approved by:    portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by:      pointyhat exp run