mod_auth_kerb 5.3 www =6

An Apache module for authenticating users with Kerberos v5
Maintained by: apache@FreeBSD.org
Port Added: 19 Oct 2001 15:40:18

---

---

mod_auth_kerb is an Apache module for authenticating Web clients in a
Kerberos v5 realm. Authentication may be performed via the Kerberos
principal/password; it may also be done securely using SPNEGO (HTTP
Negotiate auth protocol) to perform a GSSAPI/Kerberos authentication
from the user's browser and Kerberos credentials directly to the server
Kerberos credentials 'HTTP/host@REALM'. Because the Kerberos password is
transmitted in plain text in the former mode, when using mod_auth_kerb
for naive HTTP Basic (password-based) authentication, this module
MUST be used in conjunction with an encryption-capable Web server
(e.g. Apache) to keep that exchange private. There is no documentation
provided; see the Web site for more details.

WWW: http://modauthkerb.sourceforge.net/

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

Required To Build: www/apache13, devel/gmake
Required To Run: www/apache13

---

To install the port: cd /usr/ports/www/mod_auth_kerb/ && make install clean
To add the package: pkg_add -r mod_auth_kerb

---

Configuration Options

     No options to configure

---

Master Sites:

http://heanet.dl.sourceforge.net/sourceforge/modauthkerb/

http://nchc.dl.sourceforge.net/sourceforge/modauthkerb/

http://kent.dl.sourceforge.net/sourceforge/modauthkerb/

http://easynews.dl.sourceforge.net/sourceforge/modauthkerb/

http://ufpr.dl.sourceforge.net/sourceforge/modauthkerb/

http://umn.dl.sourceforge.net/sourceforge/modauthkerb/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

- This time, really add the patch
- Fix build on >= 7.0

Spotted by:             erwin

- Unbreak on >= 7.0

PR:             ports/119794
Submitted by:   KAMIYA Satosi <mimoriso@gmail.com>

- drop confusing OPTIONS
- support build with heimdal from ports
PR:             97385

- Security update to 5.3
- Fix remotely exploitable vulnerability
Security: CVE-2006-5989
PR:             113059
Submitted by:   Christian Ullrich

- Update to 5.1

PR:             ports/104842
Submitted by:   Ryan T. Dean <rtdean@cytherianage.net>
Approved by:    maintainer timeout (apache; 3 months)

BROKEN on 7.0: Does not compile

- Convert to new USE_APACHE
- Add SHA256

* Allow for compilation to optionally use the MIT Kerberos 5 port like
  now, but default to the base system's Heimdal.
* Use existing API to tell Heimdal's libkrb5 where the keytab is, rather
  than exporting an environment variable (which is what must be done for
  MIT's, apparently) -- this unbreak's specification of the keytab
  location in httpd.conf.
* Rewrite the description to be far more accurate: no mention was made
  of this module  doing real SPNEGO/GSSAPI/Kerberos (as opposed to
  "Kerberos password gateway") authentication.
* Bump PORTREVISION.

Approved by:    MAINTAINER
PR:             ports/86963

- Update to 5.0r6

Submitted by:   wollman
PR:             ports/83111

- Assign maintainership to freshly created apache@ mailing list

SIZEify.

- Fix build on -CURRENT

PR:             62721
Submitted by:   Sergey Matveychuk <sem@ciam.ru>

Resign as maintainer of this port.  I do not have the time to work on
it right now.

BROKEN on 5.x: Does not compile

Use the new Apache bits from bsd.port.mk.

Submitted by:   dinoex

Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.

Fix typo in default keytab name; bump PORTREVISION.
This has now been verified to work.

Name the module structure what Apache expects it to be called by default.

Update WWW to point to sourceforge.net.

mod_auth_kerb distribution has moved to sourceforge.
Update to version 4.11.
(NB: I haven't yet checked this for proper function; this just unbreaks
the compile.)

Fix dynamic linkage.  Also provide for the case where ${KRB5_HOME} !=
${LOCALBASE}.

New port www/mod_auth_kerb: authenticate Web clients against Kerberos v5.    

2 vulnerabilities affecting 3 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities