The Cyrus SASL (Simple Authentication and Security Layer)
SASL is the Simple Authentication and Security Layer, a method
for adding authentication support to connection-based protocols.
To use SASL, a protocol includes a command for identifying and
authenticating a user to a server and for optionally negotiating
protection of subsequent protocol interactions. If its use is
negotiated, a security layer is inserted between the protocol
and the connection.
===> The following configuration options are available for cyrus-sasl-2.1.28_6:
ALWAYSTRUE=off: Alwaystrue password verifier (discouraged)
AUTHDAEMOND=on: Use of authdaemon
DOCS=on: Build and/or install documentation
KEEP_DB_OPEN=off: Keep handle to Berkeley DB open
LMDB0=on: Use LMDB 0.9 library
OBSOLETE_CRAM_ATTR=on: cmusaslsecretCRAM-MD5 auxprop property
OBSOLETE_DIGEST_ATTR=on: cmusaslsecretDIGEST-MD5 auxprop property
OPIE=off: Use OPIE with OTP
SASLDB_IN_VAR=off: sasldb in /var/db/sasl2
====> Options available for the group PLUGIN
ANONYMOUS=on: ANONYMOUS authentication
CRAM=on: CRAM-MD5 authentication
DIGEST=on: DIGEST-MD5 authentication
LOGIN=on: LOGIN authentication
NTLM=on: NTLM authentication
OTP=on: OTP authentication
PLAIN=on: PLAIN authentication
SCRAM=on: SCRAM authentication
====> SASLdb auxprop plugin: you can only select none or one of them
BDB1=on: Berkeley DB 1.85 support
BDB=off: Berkeley DB support
GDBM=off: GNU dbm library support
LMDB=off: OpenLDAP Lightning Memory-Mapped Database support
===> Use 'make config' to modify these settings
- Remove KERBEROS4 option which depends on a removed port
(security/krb4)
- Use dirrmtry on PREFIX/lib/sasl2 where configurations may stay
- Remove MD5 in distinfo
PR: ports/152261
Submitted by: sunpoet
Fix compilation with gcc44.
It seems there is this fix in cyrus-sasl-2.1.24rc1.
PR: 132573
Submitted by: Anonymous <swell.k__at__gmail.com>
Reviewed by: OISHI Masakuni <yamasa__at__bsdhouse.org>
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.
It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.
With help: marcus and kwm
Pointyhat-exp: a few times by pav
Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and
a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by: marcus
Approved by: portmgr
Change authdaemond_path from /dev/null to
/var/run/authdaemond/socket. Though, authdaemond_path could
be set by the sasl2 config file, it should be good to have
its default value for ports/security/courier-authlib.
PR: ports/95102, ports/122234
Submitted by: Artis Caune <Artis.Caune__at__latnet.lv>
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
supports them. This is determined by running ``configure --help'' in
do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
subdirectory detection.
PR: ports/111470
Approved by: portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by: pointyhat exp run
- Fix build on amd64 by using -fPIC
PR: ports/108697
Submitted by: Gardner Bell <gbell72@rogers.com>
Approved by: ume (maintainer timeout, since 2 February 2007)
Update to 2.1.21.
LDAPDB auxprop plugin was added since this version. Unfortunately,
we cannot simply enable it in ports tree to avoid dependency loop
with OpenLDAP port. So, I'll add separete port for it later.
backout use of USE_INC_LIBTOOL_VER. libtool13 is marked as
DEPRECATED. libtool15 is incompatible, and I couldn't find
how to build and install static libs by libtool15.
Suggensted by: Angelo Turetta <aturetta@commit.it>
Split the postgresql ports into a server and a client part.
All ports depending on postgresql shall use the USE_PGSQL=yes knob
defined in Mk/bsd.ports.mk. Bumping portrevisions where needed.
PR: 75344
Approved by: portmgr@ (kris), ade & sean (mentors)
Clean up SQLite and related ports.
o Move databases/sqlite to databases/sqlite2.
o Fix dependency on databases/sqlite.
o Update sqlite2 to 2.8.15.
o Bump PORTREVISION, accordingly.
Approved by: portmgr, maintainers of sqlite and related ports
Update to 2.1.20.
* Fixes to cram plugin to avoid attempting to canonify uninitialized data.
* NTLM portability fixes.
* Avoid potential attack using SASL_PATH when sasl is used in a setuid
environment.
* A trivial number of small bugfixes.
Add WITH_SQLITE option to support sql plugin with SQLite
using nork's patch.
His patch was already merged into cyrus-sasl2 and will be
included in next release.
Requested by: nork
Remove databases/postgresql-client because there can't be a -server, and having
it installed prevents databases/postgresql7 from being installed, leading to
some dependencies problems
Support Berkeley DB 4.2.
Since our db42 requires to include db.h to use. existing configure
script cannot detect our db42. AC_CHECK_LIB() simply test if a
function exists. :(
Requested by: Dmitry Sorokin <dmitry_sorokin@yahoo.ca>
Stop installing Sendmail.conf by cyrus-sasl2, and it is now installed
by cyrus-sasl2-saslauthd. Since if Sendmail.conf is not installed,
SASL2 uses auxprop by default, it is enough to install Sendmail.conf
by saslauthd port.
- made old distfile fetchable after an update.
- install missing document which was added during update to 2.1.14.
PR: ports/53932 (partly)
Submitted by: Oliver Eikemeier <eikemeier@fillmore-labs.com>
- Make saslauthd a separate port to avoid dependency loop between
cyrus-sasl2 and openldap.
- Stop using configuration menu. I believe it ease to maintain
consistency with other SASL related ports.
When sending mail localy on a system compiled woth SASL AUTH, the
sendmail mail submission program may log the following error on the
sasldb file:
error: safesasl(/usr/local/etc/sasldb) failed: Group readable file
Pine by default is using SMTP, and therfore SMTP AUTH if compiled
into sendmail. To disable SMTP AUTH we need to define DAEMON_OPTIONS
for the loopback interface.
PR: ports/51680
Submitted by: Scot W. Hetzel <hetzels@westbend.net>
Change the group of /var/state/saslauthd mail to be sync with
/usr/local/etc/sasldb2. The postfix should belongs to only
mail group.
Reported by: "Denis N. Peplin" <info@volginfo.ru>
- The pidfile of saslauthd was changed.
- The configure script should select correct version of Berkeley DB.
PR: ports/51041
Submitted by: Oliver Eikemeier <eikemeier@fillmore-labs.com>
- update to 2.1.13
- fixes for 5-CURRENT (changed behaviour of 'expr')
- enable NTLM module
- support for db4 and db4.1
- support for OpenLDAP 2.1
PR: ports/50962
Submitted by: Oliver Eikemeier <eikemeier@fillmore-labs.com>
