security/krb5-120 1.20.2 MidnightBSD
MIT implementation of RFC 4120 network authentication service
- System
- MidnightBSD
- Repository
- mports
- Maintainer
- [email protected]
- License
- mit
- Categories
- security
Description
Kerberos V5 is an authentication system developed at MIT. Abridged from the User Guide: Under Kerberos, a client sends a request for a ticket to the Key Distribution Center (KDC). The KDC creates a ticket-granting ticket (TGT) for the client, encrypts it using the client's password as the key, and sends the encrypted TGT back to the client. The client then attempts to decrypt the TGT, using its password. If the client successfully decrypts the TGT, it keeps the decrypted TGT, which indicates proof of the client's identity. The TGT permits the client to obtain additional tickets, which give permission for specific services. Since Kerberos negotiates authenticated, and optionally encrypted, communications between two points anywhere on the internet, it provides a layer of security that is not dependent on which side of a firewall either client is on. The Kerberos V5 package is designed to be easy to use. Most of the commands are nearly identical to UNIX network programs you are already used to. Kerberos V5 is a single-sign-on system, which means that you have to type your password only once per session, and Kerberos does the authenticating and encrypting transparently.
Jacques Vidrine <[email protected]>
In the other systems
The newest version among them is 1.22.2, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| MidnightBSD | security/krb5-120 | 1.20.2 | no data | - | [email protected] | - |
| FreeBSD | security/krb5 by name | 1.22.2_4 newest | none known | - | [email protected] | - |
| DragonFly | security/krb5-120 | 1.20.2_4 | none known | - | [email protected] | - |
| HardenedBSD | security/krb5 by name | 1.22.2_3 newest | no data | - | [email protected] | - |
| GhostBSD | security/krb5 by name | 1.22.2_3 newest | no data | - | [email protected] | - |
| OPNsense | security/krb5 by name | 1.22.2_2 newest | no data | - | [email protected] | - |
Install
Binary package:
mport install krb5
From mports:
cd /usr/mports/security/krb5-120 && make install clean
To depend on this port in another port's Makefile:
RUN_DEPENDS= krb5>0:security/krb5-120
LIB_DEPENDS= libcom_err.so:security/krb5-120
Dependencies
No port depends on this one.
Configuration
Options name: security_krb5
| Option | Default | Description |
|---|---|---|
| DNS_FOR_REALM | off | Enable DNS lookups for Kerberos realm names |
| EXAMPLES | off | |
| KRB5_HTML | on | Install krb5 HTML documentation |
| KRB5_PDF | on | Install krb5 PDF documentation |
| LDAP | off | |
| LIBEDIT | off | |
| LMDB | off | OpenLDAP Lightning Memory-Mapped Database support |
| NLS | off | |
| READLINE | on |
- USES
- compiler:c++11-lang cpe gmake gettext-runtime gssapi:bootstrap,mit libtool:build localbase perl5 pkgconfig ssl
- Service scripts
kpropd- Conflicts with
- heimdal krb5 krb5-11*
Files
Manual pages 30
- .k5identity(5)
- .k5login(5)
- compile_et(1)
- k5identity(5)
- k5login(5)
- k5srvutil(1)
- kadm5.acl(5)
- kadmin(1)
- kadmin.local(8)
- kadmind(8)
- kdb5_ldap_util(8)
- kdb5_util(8)
- kdc.conf(5)
- kdestroy(1)
- kerberos(7)
- kinit(1)
- klist(1)
- kpasswd(1)
- kprop(8)
- kpropd(8)
- kproplog(8)
- krb5-config(1)
- krb5.conf(5)
- krb5kdc(8)
- ksu(1)
- kswitch(1)
- ktutil(1)
- kvno(1)
- sclient(1)
- sserver(8)
pkg-plist 177
- bin/compile_et
- bin/gss-client
- bin/k5srvutil
- bin/kadmin
- bin/kdestroy
- bin/kinit
- bin/klist
- bin/kpasswd
- bin/krb5-config
- @mode 04755
- @owner root
- @group wheel
- bin/ksu
- @mode
- @owner root
- @group wheel
- bin/kswitch
- bin/ktutil
- bin/kvno
- bin/sclient
- bin/sim_client
- bin/uuclient
- include/com_err.h
- include/gssapi.h
- include/gssapi/gssapi.h
- include/gssapi/gssapi_alloc.h
- include/gssapi/gssapi_ext.h
- include/gssapi/gssapi_generic.h
- include/gssapi/gssapi_krb5.h
- include/gssapi/mechglue.h
- include/gssrpc/auth.h
- include/gssrpc/auth_gss.h
- include/gssrpc/auth_gssapi.h
- include/gssrpc/auth_unix.h
- include/gssrpc/clnt.h
- include/gssrpc/netdb.h
- include/gssrpc/pmap_clnt.h
- include/gssrpc/pmap_prot.h
- include/gssrpc/pmap_rmt.h
- include/gssrpc/rename.h
- include/gssrpc/rpc.h
- include/gssrpc/rpc_msg.h
- include/gssrpc/svc.h
- include/gssrpc/svc_auth.h
- include/gssrpc/types.h
- include/gssrpc/xdr.h
- include/krad.h
- include/krb5.h
- include/krb5/ccselect_plugin.h
- include/krb5/clpreauth_plugin.h
- include/krb5/hostrealm_plugin.h
- include/krb5/kadm5_hook_plugin.h
- include/krb5/kdcpolicy_plugin.h
- include/krb5/kdcpreauth_plugin.h
- include/krb5/localauth_plugin.h
- include/krb5/krb5.h
- include/krb5/locate_plugin.h
- include/krb5/plugin.h
- include/krb5/pwqual_plugin.h
- include/kadm5/admin.h
- include/kadm5/chpass_util_strings.h
- include/krb5/kadm5_auth_plugin.h
- include/kadm5/kadm_err.h
- include/kdb.h
- include/krb5/certauth_plugin.h
- include/krb5/preauth_plugin.h
- include/profile.h
- include/verto-module.h
- include/verto.h
- lib/libcom_err.so
- lib/libcom_err.so.3
- lib/libcom_err.so.3.0
- lib/libgssapi_krb5.so
- lib/libgssapi_krb5.so.2
- lib/libgssapi_krb5.so.2.2
- lib/libgssrpc.so
- lib/libgssrpc.so.4
- lib/libgssrpc.so.4.2
- lib/libk5crypto.so
- lib/libk5crypto.so.3
- lib/libk5crypto.so.3.1
- lib/libkadm5clnt.so
- lib/libkadm5clnt_mit.so
- lib/libkadm5clnt_mit.so.12
- lib/libkadm5clnt_mit.so.12.0
- lib/libkadm5srv.so
- lib/libkadm5srv_mit.so
- lib/libkadm5srv_mit.so.12
- lib/libkadm5srv_mit.so.12.0
- lib/libkdb5.so
- lib/libkdb5.so.10
- lib/libkdb5.so.10.0
- lib/libkrb5.so
- lib/libkrb5.so.3
- lib/libkrb5.so.3.3
- lib/libkrb5support.so
- lib/libkrb5support.so.0
- lib/libkrb5support.so.0.1
- lib/krb5/plugins/kdb/db2.so
- lib/krb5/plugins/kdb/klmdb.so
The first 100 are listed.
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| krb5-1.20.2.tar.gz | 8.662259e+06 | 7d8d687d42aed350c2525cb69a4fc3aa791694da6761dccc1c42c2ee7796b5dd |
Master sites 1
- http://web.mit.edu/kerberos/dist/krb5/${PORTVERSION:C/^[0-9]*\.[0-9]*/&X/:C/X\.[0-9]*$//:C/X//}/