Ticket #23422 (closed defect: fixed)
openssh uses kerberos5 if it is installed but doesn't declare a dependency
| Reported by: | ryandesign@… | Owned by: | jwa@… |
|---|---|---|---|
| Priority: | Normal | Milestone: | |
| Component: | ports | Version: | 1.8.2 |
| Keywords: | Cc: | macintosh@…, hofione@…, matthewianmorgan@…, mullikine@…, ishanarora@…, pf15@…, mparchet@…, nonstop.server@… | |
| Port: | openssh |
Description
openssh fails to build when kerberos5 is installed, but builds fine when kerberos5 is not installed. This was reported on the mailing list and I can confirm it.
openssh should not be attempting to use kerberos5 without declaring a dependency on it.
Attachments
Change History
comment:1 Changed 2 years ago by jmr@…
- Summary changed from openssh fails to build when kerberos5 is installed to openssh uses kerberos5 if it is installed but doesn't declare a dependency
It doesn't fail to build now anyway.
comment:3 Changed 17 months ago by ryandesign@…
- Cc hofione@…, matthewianmorgan@…, mullikine@…, ishanarora@…, pf15@…, mparchet@… added
comment:4 Changed 15 months ago by macintosh@…
A temporary fix is ...
- port -f uninstall kerberos5
- port install openssh
- port install kerberos5
comment:5 Changed 15 months ago by ryandesign@…
If you're going to want kerberos5 again afterward, a simpler workaround is to just deactivate kerberos5 instead of completely uninstalling it.
sudo port -f deactivate kerberos5 sudo port clean openssh sudo port install openssh sudo port activate kerberos5
comment:6 Changed 15 months ago by macintosh@…
OK - I had decided to mess around with the openssh portfile due to one on my customisation projects and found this :
depends_run port:xauth <----- xauth dependency but not kerberoth5
# Specified -fno-builtin because GCC 3.3 has log() as a builtin
# (from math.h) while OpenSSH has its own log() function
# -- from fink.
configure.cppflags-append "-fno-builtin"
configure.args --with-ssl-dir=${prefix} --sysconfdir=${prefix}/etc/ssh \
--with-privsep-path=${prefix}/var/empty --with-md5-passwords \
--with-pid-dir=${prefix}/var/run --with-tcp-wrappers \
--with-pam --disable-suid-ssh --with-random=/dev/urandom \
--mandir=${prefix}/share/man --with-zlib=${prefix} \
--with-kerberos5=/usr --with-xauth=${prefix}/bin/xauth \ <------ UPPPS
--with-libedit
So, openssh is dependent on kerberos5 - it just tries to get it from the one Apple has supplied.
It seems like we are mixing and matching here :
- xauth is from macports
- kerberos5 is from Apple
I do think that's against policy ??? ;)
However, I made some changes to the openssh portfile, and it now compiles correctly.
Changed 15 months ago by macintosh@…
- Attachment patch-Portfile.diff added
pathc to add macports kerberos5 dependency