BSD Ports

security/krb5-120 1.20.2 MidnightBSD

MIT implementation of RFC 4120 network authentication service

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
License
mit
Categories
security

Description

Kerberos V5 is an authentication system developed at MIT. Abridged from the User Guide: Under Kerberos, a client sends a request for a ticket to the Key Distribution Center (KDC). The KDC creates a ticket-granting ticket (TGT) for the client, encrypts it using the client's password as the key, and sends the encrypted TGT back to the client. The client then attempts to decrypt the TGT, using its password. If the client successfully decrypts the TGT, it keeps the decrypted TGT, which indicates proof of the client's identity. The TGT permits the client to obtain additional tickets, which give permission for specific services. Since Kerberos negotiates authenticated, and optionally encrypted, communications between two points anywhere on the internet, it provides a layer of security that is not dependent on which side of a firewall either client is on. The Kerberos V5 package is designed to be easy to use. Most of the commands are nearly identical to UNIX network programs you are already used to. Kerberos V5 is a single-sign-on system, which means that you have to type your password only once per session, and Kerberos does the authenticating and encrypting transparently.

Jacques Vidrine <[email protected]>

In the other systems

The newest version among them is 1.22.2, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
MidnightBSDsecurity/krb5-1201.20.2no data-[email protected]-
FreeBSDsecurity/krb5 by name1.22.2_4 newestnone known-[email protected]-
DragonFlysecurity/krb5-1201.20.2_4none known-[email protected]-
HardenedBSDsecurity/krb5 by name1.22.2_3 newestno data-[email protected]-
GhostBSDsecurity/krb5 by name1.22.2_3 newestno data-[email protected]-
OPNsensesecurity/krb5 by name1.22.2_2 newestno data-[email protected]-

Install

Binary package:

mport install krb5

From mports:

cd /usr/mports/security/krb5-120 && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	krb5>0:security/krb5-120
LIB_DEPENDS=	libcom_err.so:security/krb5-120

Dependencies

No port depends on this one.

Configuration

Options name: security_krb5

OptionDefaultDescription
DNS_FOR_REALMoffEnable DNS lookups for Kerberos realm names
EXAMPLESoff
KRB5_HTMLonInstall krb5 HTML documentation
KRB5_PDFonInstall krb5 PDF documentation
LDAPoff
LIBEDIToff
LMDBoffOpenLDAP Lightning Memory-Mapped Database support
NLSoff
READLINEon
USES
compiler:c++11-lang cpe gmake gettext-runtime gssapi:bootstrap,mit libtool:build localbase perl5 pkgconfig ssl
Service scripts
kpropd
Conflicts with
heimdal krb5 krb5-11*

Files

Manual pages 30
  • .k5identity(5)
  • .k5login(5)
  • compile_et(1)
  • k5identity(5)
  • k5login(5)
  • k5srvutil(1)
  • kadm5.acl(5)
  • kadmin(1)
  • kadmin.local(8)
  • kadmind(8)
  • kdb5_ldap_util(8)
  • kdb5_util(8)
  • kdc.conf(5)
  • kdestroy(1)
  • kerberos(7)
  • kinit(1)
  • klist(1)
  • kpasswd(1)
  • kprop(8)
  • kpropd(8)
  • kproplog(8)
  • krb5-config(1)
  • krb5.conf(5)
  • krb5kdc(8)
  • ksu(1)
  • kswitch(1)
  • ktutil(1)
  • kvno(1)
  • sclient(1)
  • sserver(8)
pkg-plist 177
  • bin/compile_et
  • bin/gss-client
  • bin/k5srvutil
  • bin/kadmin
  • bin/kdestroy
  • bin/kinit
  • bin/klist
  • bin/kpasswd
  • bin/krb5-config
  • @mode 04755
  • @owner root
  • @group wheel
  • bin/ksu
  • @mode
  • @owner root
  • @group wheel
  • bin/kswitch
  • bin/ktutil
  • bin/kvno
  • bin/sclient
  • bin/sim_client
  • bin/uuclient
  • include/com_err.h
  • include/gssapi.h
  • include/gssapi/gssapi.h
  • include/gssapi/gssapi_alloc.h
  • include/gssapi/gssapi_ext.h
  • include/gssapi/gssapi_generic.h
  • include/gssapi/gssapi_krb5.h
  • include/gssapi/mechglue.h
  • include/gssrpc/auth.h
  • include/gssrpc/auth_gss.h
  • include/gssrpc/auth_gssapi.h
  • include/gssrpc/auth_unix.h
  • include/gssrpc/clnt.h
  • include/gssrpc/netdb.h
  • include/gssrpc/pmap_clnt.h
  • include/gssrpc/pmap_prot.h
  • include/gssrpc/pmap_rmt.h
  • include/gssrpc/rename.h
  • include/gssrpc/rpc.h
  • include/gssrpc/rpc_msg.h
  • include/gssrpc/svc.h
  • include/gssrpc/svc_auth.h
  • include/gssrpc/types.h
  • include/gssrpc/xdr.h
  • include/krad.h
  • include/krb5.h
  • include/krb5/ccselect_plugin.h
  • include/krb5/clpreauth_plugin.h
  • include/krb5/hostrealm_plugin.h
  • include/krb5/kadm5_hook_plugin.h
  • include/krb5/kdcpolicy_plugin.h
  • include/krb5/kdcpreauth_plugin.h
  • include/krb5/localauth_plugin.h
  • include/krb5/krb5.h
  • include/krb5/locate_plugin.h
  • include/krb5/plugin.h
  • include/krb5/pwqual_plugin.h
  • include/kadm5/admin.h
  • include/kadm5/chpass_util_strings.h
  • include/krb5/kadm5_auth_plugin.h
  • include/kadm5/kadm_err.h
  • include/kdb.h
  • include/krb5/certauth_plugin.h
  • include/krb5/preauth_plugin.h
  • include/profile.h
  • include/verto-module.h
  • include/verto.h
  • lib/libcom_err.so
  • lib/libcom_err.so.3
  • lib/libcom_err.so.3.0
  • lib/libgssapi_krb5.so
  • lib/libgssapi_krb5.so.2
  • lib/libgssapi_krb5.so.2.2
  • lib/libgssrpc.so
  • lib/libgssrpc.so.4
  • lib/libgssrpc.so.4.2
  • lib/libk5crypto.so
  • lib/libk5crypto.so.3
  • lib/libk5crypto.so.3.1
  • lib/libkadm5clnt.so
  • lib/libkadm5clnt_mit.so
  • lib/libkadm5clnt_mit.so.12
  • lib/libkadm5clnt_mit.so.12.0
  • lib/libkadm5srv.so
  • lib/libkadm5srv_mit.so
  • lib/libkadm5srv_mit.so.12
  • lib/libkadm5srv_mit.so.12.0
  • lib/libkdb5.so
  • lib/libkdb5.so.10
  • lib/libkdb5.so.10.0
  • lib/libkrb5.so
  • lib/libkrb5.so.3
  • lib/libkrb5.so.3.3
  • lib/libkrb5support.so
  • lib/libkrb5support.so.0
  • lib/libkrb5support.so.0.1
  • lib/krb5/plugins/kdb/db2.so
  • lib/krb5/plugins/kdb/klmdb.so

The first 100 are listed.

distinfo 1
FileSizeSHA256
krb5-1.20.2.tar.gz8.662259e+067d8d687d42aed350c2525cb69a4fc3aa791694da6761dccc1c42c2ee7796b5dd
Master sites 1
  • http://web.mit.edu/kerberos/dist/krb5/${PORTVERSION:C/^[0-9]*\.[0-9]*/&X/:C/X\.[0-9]*$//:C/X//}/