21:11 Cy Schubert (cy) 

security/heimdal-devel: move man pages

    893ef4b

05:54 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    aadc3fa

20:08 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    08b73fc

21:45 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    3cab9b4

06:13 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    ed48993

18:36 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    c98fb85

02:56 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    3e0fac6

20:43 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    635960e

00:07 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    1a57c60

10:53 Muhammad Moinur Rahman (bofh) 

Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233

    6e1233b

21:12 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    0c2c6da

16:56 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    2139a1b

15:20 Cy Schubert (cy) 

security/heimdal-devel: Convert to new USES=llvm

Replace BUILD_DEPENDS with the new USES=llvm infrastructure.

    f08be34

19:23 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    c62372f

23:31 Cy Schubert (cy) 

Partially revert "security/heimdal*: Remove LLVM_DEFAULT build prerequisite"

The suggested workaround will only work when autoreconf is not run.
The devel port still needs LLVM_DEFAULT while the non-devel port does
not

PR:	267814
Fixes:	22a683a337ef
MFH:	2022Q4

This partially reverts commit 22a683a337efe7169b61de8c9ec63e2c0d561891.

    286254e2

17:22 Cy Schubert (cy) 

security/heimdal*: Handle other types of garbage data

In addition to garbage realm data, also handle garbage dbname, acl_file,
stash_file, and invalid bitmask garbage data.

PR:             267912
Reported by:    Robert Morris <rtm@lcs.mit.edu>
MFH:		2022Q4

    8cafd5b

17:22 Cy Schubert (cy) 

security/heimdal*: Remove LLVM_DEFAULT build prerequisite

Adjust ./configure to set the correct CLANG_FORMAT value when
clang-format is not found (when none of the llvm ports are installed).

PR:		267814
Submitted by:	Tatsuki Makino <tatsuki_makino@hotmail.com>
MFH:		2022Q4

    22a683a

17:22 Cy Schubert (cy) 

security/heimdal*: The version string must always contain a terminating NUL

Should the sender send a string without a terminating NUL, ensure that
the NUL terminates the string regardless.

And while at it only process the version string when bytes are returned.

PR:		267884
Reported by:	Robert Morris <rtm@lcs.mit.edu>
MFH:		2022Q4

    d831a2f

17:22 Cy Schubert (cy) 

security/heimdal*: Fix NULL dereference when mangled realm message

Fix a NULL dereference in _kadm5_s_init_context() when the client
sends a mangled realm message.

PR:             267912
Reported by:    Robert Morris <rtm@lcs.mit.edu>
MFH:      	2022Q4

    678bdaf

18:14 Cy Schubert (cy) 

security/heimdal*: Remove lockfile dependency

Though heimdal ./configure checks for a lockfile dependency, it does
not use it. Let's remove the dependency.

PR:		267814
Reported by:	Tatsuki Makino <tatsuki_makino@hotmail.com>
MFH:		2022Q4

    b40d9ed

18:27 Cy Schubert (cy) 

security/heimdal-devel: Update to the latest Heimdal github commit

    4932959

18:27 Cy Schubert (cy) 

security/heimdal-devel: Add MICROHTTPD option

Add MICROHTTPD option to support httpd access to the KDC. This option is
not enabled by default since this adds another vector of compromise.

    e47e66f

18:27 Cy Schubert (cy) 

security/heimdal-devel: Fix configure and package

Remove libmicrohttpd support. If installed it will automatically detect
and build the necessary binaries to support a microhttpd KDC server.
It is felt that a KDC with httpd support is another vector of concern.

Fixes:		4e44a84dcc9a

    e87043c

02:33 Cy Schubert (cy) 

ecurity/heimdal-devel: update to the latest Heimdal github commit

    194b952

00:01 Cy Schubert (cy) 

security/heimdal-devel: New port tracking Heimdal develpment

This new heimdal port tracks the Heimdal development branch. The
last security advisory showed us we might want to track its development.

    4e44a84