summary refs log tree commit diff
path: root/gnu/packages/kerberos.scm
AgeCommit message (Collapse)Author
2023-06-04gnu: heimdal: Drop obsolete and insecure user tools.Felix Lechner
According to messages from the Heimdal maintainers Brian May and Nico Williams, no one should be using their version of 'su' anymore. It was deleted from the development branch five years ago [1] and is only being shipped because the 7.8.0 is based on an older, stable branch. [1] https://github.com/heimdal/heimdal/commit/8a77f45aff366b1cd8c70c43ce63eb16a0c9839c Following the directions from the maintainers, this commit drops all executables built from the ./appl folder via deletion of that SUBDIR from the top-level Makefile.am. Unfortunately, the heimdal-discuss mailing list does not appear to have a public archive. The relevant SMTP Message-Id was: <MDAEMON-F202305111940.AA401569md5001000003030@sequoia-grove.ad.secure-endpoints.com> * gnu/packages/kerberos.scm (heimdal): Drop obsolete and insecure user tools. Signed-off-by: Josselin Poiret <dev@jpoiret.xyz>
2023-06-04gnu: heimdal: Run autoreconf.Felix Lechner
* gnu/packages/kerberos.scm (heimdal): Run autoreconf. Signed-off-by: Josselin Poiret <dev@jpoiret.xyz>
2023-04-14Merge branch 'master' into core-updates.Maxim Cournoyer
Conflicts: gnu/local.mk gnu/packages/build-tools.scm gnu/packages/certs.scm gnu/packages/check.scm gnu/packages/compression.scm gnu/packages/cups.scm gnu/packages/fontutils.scm gnu/packages/gnuzilla.scm gnu/packages/guile.scm gnu/packages/ibus.scm gnu/packages/image-processing.scm gnu/packages/linux.scm gnu/packages/music.scm gnu/packages/nss.scm gnu/packages/pdf.scm gnu/packages/python-xyz.scm gnu/packages/qt.scm gnu/packages/ruby.scm gnu/packages/shells.scm gnu/packages/tex.scm gnu/packages/video.scm gnu/packages/vulkan.scm gnu/packages/web.scm gnu/packages/webkit.scm gnu/packages/wm.scm
2023-04-11gnu: heimdal: Enable OpenLDAP support.Felix Lechner
* gnu/packages/kerberos.scm (heimdal) [native-inputs]: Add bison, flex and pkg-config. [inputs]: Remove mit-krb5. Add libcap-ng and openldap. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
2023-04-11gnu: heimdal: Apply patch to fix CVE-2022-45142.Felix Lechner
Several recent Heimdal releases are affected by the serious vulnerability CVE-2022-45142, which NIST scored as "7.5 HIGH". [1] At the time of writing, the upstream developers had not yet cut any releases post-7.8.0, which is why the patch is being applied here. The patch was extracted from Helmut Grohne's public vulnerability disclosure. [2] [1] https://nvd.nist.gov/vuln/detail/CVE-2022-45142 [2] https://www.openwall.com/lists/oss-security/2023/02/08/1 * gnu/packages/patches/heimdal-CVE-2022-45142.patch: New patch. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/kerberos.scm (heimdal)[source]: Apply it. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
2023-04-11gnu: heimdal: Update to 7.8.0 [fixes CVE-2022-44640].Felix Lechner
* gnu/packages/kerberos.scm (heimdal): Update to 7.8.0. [source]: Adjust date in snippet. [native-inputs]: Add python. Remove perl. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
2022-08-11Merge branch 'staging' into core-updatesMarius Bakke
2022-08-07gnu: shishi: Use G-expressions.Efraim Flashner
* gnu/packages/kerberos.scm (shishi)[arguments]: Convert to list of G-Expressions.
2022-08-07gnu: shishi: Build with newer linux-pam.Efraim Flashner
* gnu/packages/kerberos.scm (shishi)[inputs]: Replace linux-pam-1.2 with linux-pam. * gnu/packages/linux.scm (linux-pam-1.2): Remove variable.
2022-08-07gnu: shishi: Update to 1.0.3.Efraim Flashner
* gnu/packages/kerberos.scm (shishi): Update to 1.0.3. [source]: Remove patch. [arguments]: Remove configure flag overriding libgcrypt detection. * gnu/packages/patches/shishi-fix-libgcrypt-detection.patch: Remove file. * gnu/local.mk (dist_patch_DATA): Remove it.
2022-06-26gnu: mit-krb5: Remove label usage.Marius Bakke
* gnu/packages/kerberos.scm (mit-krb5)[arguments]: Use SEARCH-INPUT-FILE.
2022-06-26gnu: mit-krb5: Update to 1.20.Marius Bakke
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.20.
2022-01-10gnu: heimdal: Unify phases, addressing TODO.Maxim Cournoyer
* gnu/packages/kerberos.scm (heimdal)[phases]: Unconditionally use the %current-target-system branch.
2021-12-13gnu: Simplify package inputs.Ludovic Courtès
This commit was obtained by running: ./pre-inst-env guix style without any additional argument.
2021-11-11gnu: heimdal: Fix build.Maxim Cournoyer
* gnu/packages/kerberos.scm (heimdal): Remove trailing #t. [inputs]: Add mit-krb5. Add bash-minimal inconditionally. [native-inputs]: Add perl inconditionally.
2021-11-11gnu: mit-krb5: Absorb 1.19.2 graft.Maxim Cournoyer
* gnu/packages/kerberos.scm (mit-krb5)[replacement]: Remove. [source]: Update to 1.19.2. (mit-krb5-1.19.2): Delete variable.
2021-09-20gnu: heimdal: Use libcom_err from input when cross-compiling.Maxime Devos
* gnu/packages/kerberos.scm (heimdal)[arguments]<#:phases>{pre-configure}: Consider ${krb_cv_com_err} to be 'yes' when cross-compiling.
2021-09-20gnu: heimdal: Find tools when cross-compiling.Maxime Devos
* gnu/packages/kerberos.scm (heimdal)[arguments]<#:configure-flags>: Set --with-cross-tools. (heimdal)[arguments]<#:phases>{pre-configure}: Override ac_cv_PROG_COMPILE_ET.
2021-09-20gnu: heimdal: Use the cross-compiled bash in "su".Maxime Devos
* gnu/packages/kerberos.scm (heimdal)[arguments]<#:phases>{pre-configure}: Replace _PATH_BSHELL with the cross-compiled bin/sh when cross-compiling.
2021-09-20gnu: heimdal: Refer to cross-compiled bash.Maxime Devos
* gnu/packages/kerberos.scm (heimdal)[arguments]<#:phases>{pre-configure}: Let "appl/afsutil/pagsh.c" refer to the cross-compiled bash instead of the native bash when cross-compiling.
2021-09-20gnu: heimdal: Fix linking error when cross-compiling.Maxime Devos
* gnu/packages/kerberos.scm (heimdal)[arguments]<#:configure-flags>: Set ac_cv_func_getpwnam_r_posix=yes when cross-compiling.
2021-09-20gnu: heimdal: Fix inputs when cross-compiling.Maxime Devos
* gnu/packages/kerberos.scm (heimdal)[inputs]: Add "bash-minimal" when cross-compiling. (heimdal)[native-inputs]: Add 'perl' when cross-compiling.
2021-08-12gnu: mit-krb5: Replace with 1.19.2 [fixes CVE-2021-36222].Marius Bakke
This is an adaptation of fdd2f57359, for the 1.19 branch of mit-krb5. * gnu/packages/kerberos.scm (mit-krb5)[replacement]: New field. (mit-krb5-1.19.2): New variable.
2021-05-09gnu: mit-krb5: Update to 1.19.1.Marius Bakke
* gnu/packages/patches/mit-krb5-hurd.patch: Adjust for 1.19.1. * gnu/packages/patches/mit-krb5-qualify-short-hostnames.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Adjust accordingly. * gnu/packages/kerberos.scm (mit-krb5): Update to 1.19.1. [source](patches): Remove obsolete patch. [arguments]: Remove trailing #t's and one obsolete subtitution.
2020-10-08gnu: mit-krb5: Enable TLS support.Maxim Cournoyer
Also enable more tests. * gnu/packages/kerberos.scm (mit-krb5)[native-inputs]: Add tcl. [inputs]: Add openssl.
2020-05-17gnu: heimdal: Update to 7.7.0.Maxim Cournoyer
And fix the test suite failures as a side effect. * gnu/packages/kerberos.scm (heimdal): Update to 7.7.0.
2020-03-26gnu: mit-krb5: Supprt for the Hurd.Jan Nieuwenhuizen
* gnu/packages/patches/mit-krb5-hurd.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/kerberos.scm (mit-krb5): Use it.
2020-03-14gnu: mit-krb5: Fix segfault in gsasl test suite.Marius Bakke
* gnu/packages/patches/mit-krb5-qualify-short-hostnames.patch: New file. * gnu/local.mk (dist_patch_DATA): Adjust accordingly. * gnu/packages/kerberos.scm (mit-krb5)[source](patches): New field.
2020-03-10Merge branch 'master' into core-updatesMarius Bakke
2020-03-09gnu: mit-krb5: Use HTTPS home page.Tobias Geerinckx-Rice
* gnu/packages/kerberos.scm (mit-krb5)[home-page]: Use HTTPS.
2020-02-15gnu: mit-krb5: Update to 1.18.Marius Bakke
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.18.
2020-01-17gnu: mit-krb5: Set localstatedir to /var.Ricardo Wurmus
* gnu/packages/kerberos.scm (mit-krb5)[arguments]: Set localstatedir.
2020-01-08gnu: mit-krb5: Update to 1.17.1.Marius Bakke
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.17.1.
2019-09-24gnu: mit-krb5: Fix cross-compilation.Mathieu Othacehe
* gnu/packages/kerberos.scm (mit-krb5)[arguments]: Disable tests when cross-compiling. Add cross-compilation specific configure-flags and make-flags. Search for perl in native-inputs or inputs.
2019-04-20gnu: shishi: Make shishi keys and database administrator-modifiable.Danny Milosavljevic
Fixes <https://bugs.gnu.org/30109>. * gnu/packages/kerberos.scm (shishi)[arguments]<#:configure-flags>: Add --with-key-dir, --with-db-dir. <#:phases>[disable-automatic-key-generation]: New phase.
2019-02-07gnu: mit-krb5: Update to 1.17.Marius Bakke
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.17.
2019-01-16gnu: Move dbm databases to new module.Ricardo Wurmus
* gnu/packages/databases.scm (gdbm, bdb, bdb-5.3): Move from here... * gnu/packages/dbm.scm: ...to this new module. * gnu/local.mk (GNU_SYSTEM_MODULES): Add it. * gnu/packages/audio.scm, gnu/packages/avahi.scm, gnu/packages/backup.scm, gnu/packages/cobol.scm, gnu/packages/cyrus-sasl.scm, gnu/packages/databases.scm, gnu/packages/finance.scm, gnu/packages/game-development.scm, gnu/packages/gnome.scm, gnu/packages/guile.scm, gnu/packages/ibus.scm, gnu/packages/kerberos.scm, gnu/packages/linux.scm, gnu/packages/mail.scm, gnu/packages/man.scm, gnu/packages/nvi.scm, gnu/packages/openldap.scm, gnu/packages/package-management.scm, gnu/packages/php.scm, gnu/packages/pulseaudio.scm, gnu/packages/python.scm, gnu/packages/rdf.scm, gnu/packages/ruby.scm, gnu/packages/sawfish.scm: Update module references.
2019-01-16gnu: Move sqlite to separate module.Ricardo Wurmus
* gnu/packages/databases.scm (sqlite, sqlite-3.26.0, sqlite-with-fts5, sqlite-with-column-metadata): Move variables from here... * gnu/packages/sqlite.scm: ...to this new module. * gnu/local.mk (GNU_SYSTEM_MODULES): Add it. * gnu/packages/apl.scm, gnu/packages/bittorrent.scm, gnu/packages/calendar.scm, gnu/packages/code.scm, gnu/packages/crypto.scm, gnu/packages/databases.scm, gnu/packages/dc.scm, gnu/packages/disk.scm, gnu/packages/ebook.scm, gnu/packages/education.scm, gnu/packages/emacs.scm, gnu/packages/emulators.scm, gnu/packages/file-systems.scm, gnu/packages/freedesktop.scm, gnu/packages/ftp.scm, gnu/packages/games.scm, gnu/packages/geo.scm, gnu/packages/gnome.scm, gnu/packages/gnunet.scm, gnu/packages/gnupg.scm, gnu/packages/gnuzilla.scm, gnu/packages/gps.scm, gnu/packages/guile.scm, gnu/packages/ibus.scm, gnu/packages/kerberos.scm, gnu/packages/kodi.scm, gnu/packages/lisp.scm, gnu/packages/mail.scm, gnu/packages/messaging.scm, gnu/packages/mpd.scm, gnu/packages/music.scm, gnu/packages/networking.scm, gnu/packages/nfs.scm, gnu/packages/ocaml.scm, gnu/packages/package-management.scm, gnu/packages/pdf.scm, gnu/packages/photo.scm, gnu/packages/php.scm, gnu/packages/python.scm, gnu/packages/qt.scm, gnu/packages/ruby.scm, gnu/packages/scheme.scm, gnu/packages/sync.scm, gnu/packages/syndication.scm, gnu/packages/version-control.scm, gnu/packages/video.scm, gnu/packages/web-browsers.scm, gnu/packages/webkit.scm: Adjust module references.
2018-07-30gnu: shishi: Don't build static library.Marius Bakke
* gnu/packages/kerberos.scm (shishi)[arguments]: Add "--disable-static" to #:configure-flags.
2018-06-29Merge branch 'master' into core-updatesRicardo Wurmus
2018-06-12gnu: mit-krb5: Update to 1.16.1.Tobias Geerinckx-Rice
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.16.1.
2018-06-10gnu: heimdal: Update to 7.5.0.Alex Vong
* gnu/packages/kerberos.scm (heimdal): Update to 7.5.0. [source]: Update source uri. Remove patches. [arguments]: Adjust #:configure-flags and build phases accordingly. [inputs]: Add sqlite. [native-inputs]: Add texinfo and unzip. * gnu/packages/patches/heimdal-CVE-2017-6594.patch, gnu/packages/patches/heimdal-CVE-2017-11103.patch: Remove files. * gnu/local.mk (dist_patch_DATA): Remove them. Co-authored-by: 宋文武 <iyzsong@member.fsf.org>
2018-03-16gnu: All snippets report errors using exceptions, else return #t.Mark H Weaver
* gnu/packages/admin.scm, gnu/packages/algebra.scm, gnu/packages/audio.scm, gnu/packages/backup.scm, gnu/packages/base.scm, gnu/packages/bioinformatics.scm, gnu/packages/cdrom.scm, gnu/packages/chez.scm, gnu/packages/code.scm, gnu/packages/compression.scm, gnu/packages/cross-base.scm, gnu/packages/crypto.scm, gnu/packages/cups.scm, gnu/packages/databases.scm, gnu/packages/dns.scm, gnu/packages/emacs.scm, gnu/packages/emulators.scm, gnu/packages/engineering.scm, gnu/packages/enlightenment.scm, gnu/packages/fpga.scm, gnu/packages/freedesktop.scm, gnu/packages/ftp.scm, gnu/packages/games.scm, gnu/packages/gcc.scm, gnu/packages/geo.scm, gnu/packages/ghostscript.scm, gnu/packages/gl.scm, gnu/packages/glib.scm, gnu/packages/gnome.scm, gnu/packages/gnuzilla.scm, gnu/packages/graphics.scm, gnu/packages/gtk.scm, gnu/packages/guile.scm, gnu/packages/irc.scm, gnu/packages/java.scm, gnu/packages/kerberos.scm, gnu/packages/linux.scm, gnu/packages/lisp.scm, gnu/packages/lxde.scm, gnu/packages/machine-learning.scm, gnu/packages/mail.scm, gnu/packages/maths.scm, gnu/packages/messaging.scm, gnu/packages/monitoring.scm, gnu/packages/mp3.scm, gnu/packages/music.scm, gnu/packages/netpbm.scm, gnu/packages/networking.scm, gnu/packages/node.scm, gnu/packages/nvi.scm, gnu/packages/ocaml.scm, gnu/packages/pdf.scm, gnu/packages/perl.scm, gnu/packages/php.scm, gnu/packages/plotutils.scm, gnu/packages/pretty-print.scm, gnu/packages/profiling.scm, gnu/packages/pulseaudio.scm, gnu/packages/python-crypto.scm, gnu/packages/python.scm, gnu/packages/qt.scm, gnu/packages/robotics.scm, gnu/packages/sawfish.scm, gnu/packages/scanner.scm, gnu/packages/scheme.scm, gnu/packages/scribus.scm, gnu/packages/sdl.scm, gnu/packages/serialization.scm, gnu/packages/shells.scm, gnu/packages/slang.scm, gnu/packages/smalltalk.scm, gnu/packages/ssh.scm, gnu/packages/sync.scm, gnu/packages/syncthing.scm, gnu/packages/tbb.scm, gnu/packages/terminals.scm, gnu/packages/texinfo.scm, gnu/packages/text-editors.scm, gnu/packages/textutils.scm, gnu/packages/tls.scm, gnu/packages/unrtf.scm, gnu/packages/version-control.scm, gnu/packages/video.scm, gnu/packages/vpn.scm, gnu/packages/web.scm, gnu/packages/wm.scm, gnu/packages/wxwidgets.scm, gnu/packages/xdisorg.scm, gnu/packages/xorg.scm: In all snippets, report errors using exceptions, or else return #t.
2017-12-13gnu: mit-krb5: Update to 1.16.Marius Bakke
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.16. [source](uri): Add kerberos.org mirror. Use HTTPS on web.mit.edu.
2017-10-22gnu: mit-krb5: Remove graft for 1.15.2.Marius Bakke
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.15.2. [replacement]: Remove field. (mit-krb5-1.15.2): Remove variable.
2017-10-09gnu: mit-krb5: Replace with 1.15.2 [fixes CVE-2017-{11368,11462}].Leo Famulari
* gnu/packages/kerberos.scm (mit-krb5)[replacement]: New field. (mit-krb5-1.15.2): New variable.
2017-07-23Merge branch 'master' into core-updatesLeo Famulari
2017-07-20gnu: heimdal: Fix CVE-2017-{6594,11103}.Alex Vong
* gnu/packages/patches/heimdal-CVE-2017-6594.patch, gnu/packages/patches/heimdal-CVE-2017-11103.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/kerberos.scm (heimdal)[source]: Use them.
2017-07-14gnu: mit-krb5: Add ‘cpe-name’.Tobias Geerinckx-Rice
* gnu/packages/kerberos.scm (mit-krb5)[properties]: New field.
2017-06-30gnu: shishi: Build with latest libgcrypt.Leo Famulari
* gnu/packages/patches/shishi-fix-libgcrypt-detection.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/kerberos.scm (shishi)[source]: Use it. [inputs]: Use libgcrypt instead of libgcrypt-1.5. [arguments]: Set 'ac_cv_libgcrypt=yes' in #:configure-flags. * gnu/packages/gnupg.scm (libgcrypt-1.5): Remove variable.