notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
This referral link gives you 10% off a Fastmail.com account and gives me a discount on my Fastmail account.

Get notified when packages are built

A new feature has been added. FreshPorts already tracks package built by the FreeBSD project. This information is displayed on each port page. You can now get an email when FreshPorts notices a new package is available for something on one of your watch lists. However, you must opt into that. Click on Report Subscriptions on the right, and New Package Notification box, and click on Update.

Finally, under Watch Lists, click on ABI Package Subscriptions to select your ABI (e.g. FreeBSD:14:amd64) & package set (latest/quarterly) combination for a given watch list. This is what FreshPorts will look for.

Port details
krb5-116 MIT implementation of RFC 4120 network authentication service
1.16.4 security Deleted on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 1.16.4Version of this port present on the latest quarterly branch.
Deprecated DEPRECATED: EOL one year after the release of krb5 1.18
Expired This port expired on: 2021-02-12
Maintainer: cy@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2017-12-06 04:18:23
Last Update: 2021-02-14 13:02:25
SVN Revision: 565223
License: MIT
WWW:
http://web.mit.edu/kerberos/
Description:
Kerberos V5 is an authentication system developed at MIT. WWW: http://web.mit.edu/kerberos/ Abridged from the User Guide: Under Kerberos, a client sends a request for a ticket to the Key Distribution Center (KDC). The KDC creates a ticket-granting ticket (TGT) for the client, encrypts it using the client's password as the key, and sends the encrypted TGT back to the client. The client then attempts to decrypt the TGT, using its password. If the client successfully decrypts the TGT, it keeps the decrypted TGT, which indicates proof of the client's identity. The TGT permits the client to obtain additional tickets, which give permission for specific services. Since Kerberos negotiates authenticated, and optionally encrypted, communications between two points anywhere on the internet, it provides a layer of security that is not dependent on which side of a firewall either client is on. The Kerberos V5 package is designed to be easy to use. Most of the commands are nearly identical to UNIX network programs you are already used to. Kerberos V5 is a single-sign-on system, which means that you have to type your password only once per session, and Kerberos does the authenticating and encrypting transparently. Jacques Vidrine <n@nectar.com>
Homepage    cgit ¦ GitHub ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
pkg-plist: as obtained via: make generate-plist
Expand this list (179 items)
Collapse this list.
  1. @ldconfig
  2. /usr/local/share/licenses/krb5-116-1.16.4/catalog.mk
  3. /usr/local/share/licenses/krb5-116-1.16.4/LICENSE
  4. /usr/local/share/licenses/krb5-116-1.16.4/MIT
  5. bin/compile_et
  6. bin/gss-client
  7. bin/k5srvutil
  8. bin/kadmin
  9. bin/kdestroy
  10. bin/kinit
  11. bin/klist
  12. bin/kpasswd
  13. bin/krb5-config
  14. @mode 04755
  15. @owner root
  16. @group wheel
  17. bin/ksu
  18. @mode
  19. @owner root
  20. @group wheel
  21. bin/kswitch
  22. bin/ktutil
  23. bin/kvno
  24. bin/sclient
  25. bin/sim_client
  26. bin/uuclient
  27. include/com_err.h
  28. include/gssapi.h
  29. include/gssapi/gssapi.h
  30. include/gssapi/gssapi_ext.h
  31. include/gssapi/gssapi_generic.h
  32. include/gssapi/gssapi_krb5.h
  33. include/gssapi/mechglue.h
  34. include/gssrpc/auth.h
  35. include/gssrpc/auth_gss.h
  36. include/gssrpc/auth_gssapi.h
  37. include/gssrpc/auth_unix.h
  38. include/gssrpc/clnt.h
  39. include/gssrpc/netdb.h
  40. include/gssrpc/pmap_clnt.h
  41. include/gssrpc/pmap_prot.h
  42. include/gssrpc/pmap_rmt.h
  43. include/gssrpc/rename.h
  44. include/gssrpc/rpc.h
  45. include/gssrpc/rpc_msg.h
  46. include/gssrpc/svc.h
  47. include/gssrpc/svc_auth.h
  48. include/gssrpc/types.h
  49. include/gssrpc/xdr.h
  50. include/krad.h
  51. include/krb5.h
  52. include/krb5/ccselect_plugin.h
  53. include/krb5/clpreauth_plugin.h
  54. include/krb5/hostrealm_plugin.h
  55. include/krb5/kadm5_hook_plugin.h
  56. include/krb5/kdcpolicy_plugin.h
  57. include/krb5/kdcpreauth_plugin.h
  58. include/krb5/localauth_plugin.h
  59. include/krb5/krb5.h
  60. include/krb5/locate_plugin.h
  61. include/krb5/plugin.h
  62. include/krb5/pwqual_plugin.h
  63. include/kadm5/admin.h
  64. include/kadm5/chpass_util_strings.h
  65. include/krb5/kadm5_auth_plugin.h
  66. include/kadm5/kadm_err.h
  67. include/kdb.h
  68. include/krb5/certauth_plugin.h
  69. include/krb5/preauth_plugin.h
  70. include/profile.h
  71. include/verto-module.h
  72. include/verto.h
  73. lib/libcom_err.so
  74. lib/libcom_err.so.3
  75. lib/libcom_err.so.3.0
  76. lib/libgssapi_krb5.so
  77. lib/libgssapi_krb5.so.2
  78. lib/libgssapi_krb5.so.2.2
  79. lib/libgssrpc.so
  80. lib/libgssrpc.so.4
  81. lib/libgssrpc.so.4.2
  82. lib/libk5crypto.so
  83. lib/libk5crypto.so.3
  84. lib/libk5crypto.so.3.1
  85. lib/libkadm5clnt.so
  86. lib/libkadm5clnt_mit.so
  87. lib/libkadm5clnt_mit.so.11
  88. lib/libkadm5clnt_mit.so.11.0
  89. lib/libkadm5srv.so
  90. lib/libkadm5srv_mit.so
  91. lib/libkadm5srv_mit.so.11
  92. lib/libkadm5srv_mit.so.11.0
  93. lib/libkdb5.so
  94. lib/libkdb5.so.9
  95. lib/libkdb5.so.9.0
  96. lib/libkrb5.so
  97. lib/libkrb5.so.3
  98. lib/libkrb5.so.3.3
  99. lib/libkrb5support.so
  100. lib/libkrb5support.so.0
  101. lib/libkrb5support.so.0.1
  102. lib/krb5/plugins/kdb/db2.so
  103. lib/krb5/plugins/tls/k5tls.so
  104. @comment lib/krb5/plugins/kdb/kldap.so
  105. lib/krb5/plugins/preauth/otp.so
  106. lib/krb5/plugins/preauth/pkinit.so
  107. lib/krb5/plugins/preauth/test.so
  108. @comment lib/libkdb_ldap.so
  109. @comment lib/libkdb_ldap.so.1
  110. @comment lib/libkdb_ldap.so.1.0
  111. lib/libkrad.so
  112. lib/libkrad.so.0
  113. lib/libkrad.so.0.0
  114. lib/libverto.so
  115. lib/libverto.so.0
  116. lib/libverto.so.0.0
  117. libdata/pkgconfig/gssrpc.pc
  118. libdata/pkgconfig/kadm-client.pc
  119. libdata/pkgconfig/kadm-server.pc
  120. libdata/pkgconfig/kdb.pc
  121. libdata/pkgconfig/krb5-gssapi.pc
  122. libdata/pkgconfig/krb5.pc
  123. libdata/pkgconfig/mit-krb5-gssapi.pc
  124. libdata/pkgconfig/mit-krb5.pc
  125. man/man1/compile_et.1.gz
  126. man/man1/k5srvutil.1.gz
  127. man/man1/kadmin.1.gz
  128. man/man1/kdestroy.1.gz
  129. man/man1/kinit.1.gz
  130. man/man1/klist.1.gz
  131. man/man1/kpasswd.1.gz
  132. man/man1/krb5-config.1.gz
  133. man/man1/ksu.1.gz
  134. man/man1/kswitch.1.gz
  135. man/man1/ktutil.1.gz
  136. man/man1/kvno.1.gz
  137. man/man1/sclient.1.gz
  138. man/man3/com_err.3.gz
  139. man/man5/.k5identity.5.gz
  140. man/man5/.k5login.5.gz
  141. man/man5/k5identity.5.gz
  142. man/man5/k5login.5.gz
  143. man/man5/kadm5.acl.5.gz
  144. man/man5/kdc.conf.5.gz
  145. man/man5/krb5.conf.5.gz
  146. man/man7/kerberos.7.gz
  147. man/man8/kadmin.local.8.gz
  148. man/man8/kadmind.8.gz
  149. man/man8/kdb5_ldap_util.8.gz
  150. man/man8/kdb5_util.8.gz
  151. man/man8/kprop.8.gz
  152. man/man8/kpropd.8.gz
  153. man/man8/kproplog.8.gz
  154. man/man8/krb5kdc.8.gz
  155. man/man8/sserver.8.gz
  156. sbin/gss-server
  157. sbin/kadmin.local
  158. sbin/kadmind
  159. @comment sbin/kdb5_ldap_util
  160. sbin/kdc
  161. sbin/kdb5_util
  162. sbin/kprop
  163. sbin/kpropd
  164. sbin/kproplog
  165. sbin/krb5-send-pr
  166. sbin/krb5kdc
  167. sbin/sim_server
  168. sbin/sserver
  169. sbin/uuserver
  170. share/et/et_c.awk
  171. share/et/et_h.awk
  172. share/locale/de/LC_MESSAGES/mit-krb5.mo
  173. share/locale/en_US/LC_MESSAGES/mit-krb5.mo
  174. @comment share/krb5/kerberos.schema
  175. @comment share/krb5/kerberos.ldif
  176. @dir lib/krb5/plugins/authdata
  177. @dir lib/krb5/plugins/libkrb5
  178. @dir var/run/krb5kdc
  179. @dir var/krb5kdc
Collapse this list.
Dependency lines:
  • krb5-116>0:security/krb5-116
Conflicts:
CONFLICTS:
  • heimdal-[0-9]*
  • srp-[0-9]*
  • krb5-11[3457]-[0-9]*
  • krb5-1.[0-9]*
  • krb5-devel-*
CONFLICTS_BUILD:
  • boringssl-*
Conflicts Matches:
There are no Conflicts Matches for this port. This is usually an error.
No installation instructions:
This port has been deleted.
PKGNAME: krb5-116
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1576180881 SHA256 (krb5-1.16.4.tar.gz) = 55bc02efbc3be2d4c9af9033f6bf17c434eb2efc4fdb0d1f5a99208c64b85da6 SIZE (krb5-1.16.4.tar.gz) = 9652568

Packages (timestamps in pop-ups are UTC):
krb5-116
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest--1.16.4---1.16.4-
FreeBSD:13:quarterly--------
FreeBSD:14:latest--------
FreeBSD:14:quarterly--------
FreeBSD:15:latest--n/a-n/a---
FreeBSD:15:quarterly--n/a-n/a---
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. gmake : devel/gmake
  2. libtool : devel/libtool
  3. pkgconf>=1.3.0_1 : devel/pkgconf
  4. msgfmt : devel/gettext-tools
  5. perl5>=5.30.r1<5.31 : lang/perl5.30
Library dependencies:
  1. libintl.so : devel/gettext-runtime
  2. libreadline.so.8 : devel/readline
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for krb5-116-1.16.4: DNS_FOR_REALM=off: Enable DNS lookups for Kerberos realm names EXAMPLES=on: Build and/or install examples KRB5_HTML=on: Install krb5 HTML documentation KRB5_PDF=on: Install krb5 PDF documentation LDAP=off: LDAP protocol support NLS=on: Native Language Support ====> Command line editing for kadmin and ktutil: you can only select none or one of them READLINE=on: Command line editing via libreadline READLINE_PORT=off: Command line editing via devel/readline LIBEDIT=off: Command line editing via libedit ===> Use 'make config' to modify these settings
Options name:
N/A
USES:
cpe gmake localbase perl5 libtool:build gssapi:bootstrap,mit pkgconfig ssl gettext-runtime gettext readline
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. http://web.mit.edu/kerberos/dist/krb5/1.16/
Collapse this list.
Port Moves
  • port moved to security/krb5-118 on 2021-02-14
    REASON: Has expired: EOL one year after the release of krb5 1.18

Number of commits found: 25

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
1.16.4
14 Feb 2021 13:02:25
Revision:565223Original commit files touched by this commit
rene search for other commits by this committer
Remove expired ports:

2021-02-12 misc/cdcollect: Unmaintained and dead upstream (12+ years) depends on
 deprecated libraries as www/gtkhtml3.
2021-02-12 security/krb5-116: EOL one year after the release of krb5 1.18
1.16.4
19 Feb 2020 02:42:55
Revision:526479Original commit files touched by this commit
cy search for other commits by this committer
Welcome the new KRB5 1.18 (krb5-118)

In addition, deprecate krb5-116 to retire one year after the release
of krb5-118: Feb 12, 2021.

Major changes in 1.18 (2020-02-12)
==================================

Administrator experience:

* Remove support for single-DES encryption types.

* Change the replay cache format to be more efficient and robust.
  Replay cache filenames using the new format end with ".rcache2" by
  default.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
1.16.4
12 Dec 2019 20:55:12
Revision:519947Original commit files touched by this commit
cy search for other commits by this committer
Update 1.16.3 --> 1.16.4
1.16.3_2
03 May 2019 12:50:53
Revision:500725Original commit files touched by this commit
cy search for other commits by this committer
Fix build with libressl 2.9.1.

PR:		237621
Reported by:	many
MFH:		2019Q2
1.16.3_2
09 Apr 2019 14:04:50
Revision:498476Original commit files touched by this commit
sunpoet search for other commits by this committer
Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine
1.16.3_1
12 Mar 2019 04:18:32
Revision:495423Original commit files touched by this commit
cy search for other commits by this committer
Fix build with LibreSSL 2.9.

PR:		234064
Submitted by:	Charlie Li <ml+freebsd@vishwin.info>
1.16.3_1
15 Feb 2019 04:37:25
Revision:492968Original commit files touched by this commit
cy search for other commits by this committer
Provide a script from which to start krb5kdc through /etc/rc.d/kdc.
Simply add kdc_enable="YES" and kdc_program="/usr/local/sbin/kdc"
to /etc/rc.d. The script removes the Heimdal kdc --detach argument
prior to invoking krb5kdc.

The other approach that was considered was to replace getopt() in
kdc/main.c with getopt_long() however this approach was considered too
intrusive.
1.16.3
13 Jan 2019 15:57:20
Revision:490150Original commit files touched by this commit
cy search for other commits by this committer
pkgconfig is used at build time, not runtime.

MFH:		2019Q1 (krb5-devel will need to have all its previous
		commits brought up to level in 2019Q1 first)
1.16.3
08 Jan 2019 20:29:34
Revision:489737Original commit files touched by this commit
cy search for other commits by this committer
Welcome the new KRB5 1.17 (krb5-117).

Major changes in 1.17 (2019-01-08)
==================================

Administrator experience:

* A new Kerberos database module using the Lightning Memory-Mapped
  Database library (LMDB) has been added.  The LMDB KDB module should
  be more performant and more robust than the DB2 module, and may
  become the default module for new databases in a future release.

* "kdb5_util dump" will no longer dump policy entries when specific
  principal names are requested.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
1.16.3
08 Jan 2019 20:02:54
Revision:489735Original commit files touched by this commit
cy search for other commits by this committer
Correct CONFLICTS.

MFH:		2019Q1
1.16.3
08 Jan 2019 01:41:04
Revision:489636Original commit files touched by this commit
cy search for other commits by this committer
Update 1.16.2 --> 1.16.3

Major changes in 1.16.3 (2019-01-07)
====================================

This is a bug fix release.

* Fix a regression in the MEMORY credential cache type which could
  cause client programs to crash.

* MEMORY credential caches will not be listed in the global
  collection, with the exception of the default credential cache if it
  is of type MEMORY.

* Remove an incorrect assertion in the KDC which could be used to
  cause a crash [CVE-2018-20217].

MFH:		2019Q1
1.16.2
02 Nov 2018 15:51:37
Revision:483818Original commit files touched by this commit
cy search for other commits by this committer
krb5-116: update 1.16.1 --> 1.16.2
1.16.1_5
02 Jul 2018 05:57:38
Revision:473706Original commit files touched by this commit
cy search for other commits by this committer
While working the ports fallout due to making Hemidal in base
private it was discovered that com_err.3, though distributed in
the tarball, was not installed. Install it.
1.16.1_4
02 Jul 2018 05:57:27
Revision:473705Original commit files touched by this commit
cy search for other commits by this committer
Sort man pages.
1.16.1_4
19 Jun 2018 13:38:35
Revision:472784Original commit files touched by this commit
cy search for other commits by this committer
Revert r472760 and instead use upstream git commit
beeb2828945a41d86488e391ce440bacee0ec committed to the krb5
development branch Saturday, June 16. The upstream commit
message follows:

  Author: Thomas Sondergaard <tsondergaard@vitalimages.com>
  Date:   Sat Jun 16 18:14:50 2018 +0200

     Eliminate use of the 'register' keyword

     'register' is a reserved and unused keyword in C++17 so having it
     present in the public headers presents a a compatibility issue. Also
     in C the 'register' keyword is mostly obsolete, so remove all uses of
     it.

     [ghudson@mit.edu: adjusted style of some of the affected lines]
1.16.1_3
19 Jun 2018 06:51:56
Revision:472760Original commit files touched by this commit
cy search for other commits by this committer
While working on the ports fallout due to the private Heimdal in base
project, a port (www/squid-devel) was discovered to be grumpy due to
numerous errors such as below:

/usr/local/include/krb5/krb5.h:3566:19: error: 'register' storage class
specifier is deprecated and incompatible with C++17
[-Werror,-Wdeprecated-register]
                  register char **name);
                  ^~~~~~~~~

The "register" keyword is meaningless and can cause grief among ports
that build against any of the krb5 ports.
1.16.1_2
13 Jun 2018 05:55:52
Revision:472287Original commit files touched by this commit
cy search for other commits by this committer
MIT krb5 fails to build with boringssl installed due to a missing
typedef for PKCS7 in the boringssl pkcs7.h.
1.16.1_2
13 Jun 2018 05:44:58
Revision:472286Original commit files touched by this commit
cy search for other commits by this committer
Fix build with libressl and bearssl.

PR:		228970
1.16.1_1
12 Jun 2018 03:42:18
Revision:472227Original commit files touched by this commit
cy search for other commits by this committer
Fix logic from patch supplied in PR 217027, committed in
r433966 and r433967.

PR:		228900
1.16.1
04 May 2018 06:18:44
Revision:469006Original commit files touched by this commit
cy search for other commits by this committer
Update 1.16 --> 1.16.1

Major changes in 1.16.1 (2018-05-03)
====================================

This is a bug fix release.

* Fix flaws in LDAP DN checking, including a null dereference KDC
  crash which could be triggered by kadmin clients with administrative
  privileges [CVE-2018-5729, CVE-2018-5730].

* Fix a KDC PKINIT memory leak.

* Fix a small KDC memory leak on transited or authdata errors when
  processing TGS requests.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
1.16_1
29 Mar 2018 14:53:24
Revision:465899Original commit files touched by this commit
mat search for other commits by this committer
Mark some ports broken with openssl-devel.

Sponsored by:	Absolight
1.16_1
02 Feb 2018 06:50:25
Revision:460669Original commit files touched by this commit
cy search for other commits by this committer
Fix build when NLS option is unchecked.

Reported by:	Geraud CONTINSOUZAS <geraud.continsouzas@skazy.nc>
1.16
11 Jan 2018 16:24:53
Revision:458754Original commit files touched by this commit
danfe search for other commits by this committer
Remove superfluous linefeeds.
1.16
10 Jan 2018 15:08:51
Revision:458646Original commit files touched by this commit
danfe search for other commits by this committer
Do not abuse INSTALL_MAN when installing documentation, examples, and
other miscellaneous files which are not actually manual pages.
1.16
06 Dec 2017 04:18:14
Revision:455634Original commit files touched by this commit
cy search for other commits by this committer
Welcome the new security/krb5-116 port. This port follows MIT's
KRB5 1.16 releases.

Major changes in 1.16 (2017-12-05)
==================================

Administrator experience:

* The KDC can match PKINIT client certificates against the
  "pkinit_cert_match" string attribute on the client principal entry,
  using the same syntax as the existing "pkinit_cert_match" profile
  option.

* The ktutil addent command supports the "-k 0" option to ignore the
  key version, and the "-s" option to use a non-default salt string.
(Only the first 15 lines of the commit message are shown above View all of this commit message)

Number of commits found: 25