summaryrefslogtreecommitdiff
path: root/www-apache/mod_auth_kerb
diff options
context:
space:
mode:
authorroot <root@alpha.trunkmasters.com>2026-06-04 05:35:26 -0500
committerroot <root@alpha.trunkmasters.com>2026-06-04 05:35:26 -0500
commitf716a9fe6455d39eef01e718aae68dae61c19704 (patch)
tree0c52bbae1c242fbc296bd650fcd1167685f81492 /www-apache/mod_auth_kerb
parent3f9cf298e89cd5037b982abba06091224ee76daf (diff)
downloadbaldeagleos-repo-f716a9fe6455d39eef01e718aae68dae61c19704.tar.gz
baldeagleos-repo-f716a9fe6455d39eef01e718aae68dae61c19704.tar.xz
baldeagleos-repo-f716a9fe6455d39eef01e718aae68dae61c19704.zip
Adding metadata
Diffstat (limited to 'www-apache/mod_auth_kerb')
-rw-r--r--www-apache/mod_auth_kerb/Manifest2
-rw-r--r--www-apache/mod_auth_kerb/files/11_mod_auth_kerb.conf14
-rw-r--r--www-apache/mod_auth_kerb/files/mod_auth_kerb-5.4-api-change-krb5.patch73
-rw-r--r--www-apache/mod_auth_kerb/files/mod_auth_kerb-5.4-krb5pwd-double-free.patch22
-rw-r--r--www-apache/mod_auth_kerb/files/mod_auth_kerb.conf1
-rw-r--r--www-apache/mod_auth_kerb/metadata.xml8
-rw-r--r--www-apache/mod_auth_kerb/mod_auth_kerb-5.4-r5.ebuild66
7 files changed, 0 insertions, 186 deletions
diff --git a/www-apache/mod_auth_kerb/Manifest b/www-apache/mod_auth_kerb/Manifest
deleted file mode 100644
index 0d9857404b50..000000000000
--- a/www-apache/mod_auth_kerb/Manifest
+++ /dev/null
@@ -1,2 +0,0 @@
-DIST mod_auth_kerb-5.4-gentoo-patchset.tar.bz2 8717 BLAKE2B 759ad350bb6c07226c86fa51e22f17023378928abed3fd80ff280bac54a472a8d918cba680b3c75ce93805a7f803bbd370a6bb1b73665f5a8d5fb7cdc6353d1c SHA512 3909c2677b30790cc17c0d8843feaa00d9acd14a012672443a887c0e88473d6b1572ba045e1491bcab53cbacff193c11cfe15e63ef1046cfcdf1f4ab60e0ac57
-DIST mod_auth_kerb-5.4.tar.gz 93033 BLAKE2B 2f5c2c26f0f9fa5919f879680e0b8f29087edd001c166655f8130e8d7efd527b0bb9bbb79fe3e508c14622ecefaa693a96dc7dd16a3298da8ae0ad4b69b48ca6 SHA512 93fdf0e43af1c24e8c8204d09240b708747068ef99dd8d21b45cb4d132d31e6d582d49ea5e23b905f55cb0d4a20b1ecb58de1bcbfdad1d016e536fc622b63214
diff --git a/www-apache/mod_auth_kerb/files/11_mod_auth_kerb.conf b/www-apache/mod_auth_kerb/files/11_mod_auth_kerb.conf
deleted file mode 100644
index e567274c7707..000000000000
--- a/www-apache/mod_auth_kerb/files/11_mod_auth_kerb.conf
+++ /dev/null
@@ -1,14 +0,0 @@
-<IfDefine AUTH_KERB>
-LoadModule auth_kerb_module modules/mod_auth_kerb.so
-
-<Directory "/var/www/private">
- AuthType Kerberos
- AuthName "Kerberos Login"
- # See the INSTALL file about howto create the keytab
- Krb5Keytab conf/apache.keytab
- KrbAuthRealms EXAMPLE.COM
- Require valid-user
-</Directory>
-</IfDefine>
-
-# vim: ts=4 filetype=apache
diff --git a/www-apache/mod_auth_kerb/files/mod_auth_kerb-5.4-api-change-krb5.patch b/www-apache/mod_auth_kerb/files/mod_auth_kerb-5.4-api-change-krb5.patch
deleted file mode 100644
index fb402de44a8d..000000000000
--- a/www-apache/mod_auth_kerb/files/mod_auth_kerb-5.4-api-change-krb5.patch
+++ /dev/null
@@ -1,73 +0,0 @@
-https://sources.debian.org/data/main/liba/libapache-mod-auth-kerb/5.4-2.5/debian/patches/0011-Always-use-NONE-replay-cache-type.patch
-https://bugs.gentoo.org/830208
-
-From: Sam Hartman <hartmans@debian.org>
-Date: Mon, 23 Nov 2020 09:30:22 -0500
-Subject: Always use NONE replay cache type
-
-It's 2020. Any MIT Kerberos in the wild supports the none replay
-cache type. The previous code used an internal function to detect
-that replay cache type; that function is no longer available.
-Instead, assume it is present.
-
-An alternative would be to enable the default replay cache. It was
-originally disabled because of problems between Microsoft
-authenticators and 2004-era MIT Kerberos 1.3. That's probably a good
-idea. It probably closes off security attacks, although analyzing the
-impact of replays in cases where neither channel binding nor
-per-message services are used is difficult. I believe that a replay
-cache is not strictly necessary in the common configuration where
-mod-auth-kerb is used over a TLS-protected connection where the client
-properly verifies the TLS certificate presented by the server prior to
-sending a GSS token.
-
-I have elected not to enable replay cache to affect a minimal change.
---- a/src/mod_auth_kerb.c
-+++ b/src/mod_auth_kerb.c
-@@ -2061,28 +2061,6 @@
- return ret;
- }
-
--static int
--have_rcache_type(const char *type)
--{
-- krb5_error_code ret;
-- krb5_context context;
-- krb5_rcache id = NULL;
-- int found;
--
-- ret = krb5_init_context(&context);
-- if (ret)
-- return 0;
--
-- ret = krb5_rc_resolve_full(context, &id, "none:");
-- found = (ret == 0);
--
-- if (ret == 0)
-- krb5_rc_destroy(context, id);
-- krb5_free_context(context);
--
-- return found;
--}
--
- /***************************************************************************
- Module Setup/Configuration
- ***************************************************************************/
-@@ -2143,7 +2121,7 @@
- #ifndef HEIMDAL
- /* Suppress the MIT replay cache. Requires MIT Kerberos 1.4.0 or later.
- 1.3.x are covered by the hack overiding the replay calls */
-- if (getenv("KRB5RCACHETYPE") == NULL && have_rcache_type("none"))
-+ if (getenv("KRB5RCACHETYPE") == NULL)
- putenv(strdup("KRB5RCACHETYPE=none"));
- #endif
- }
-@@ -2185,7 +2163,7 @@
- #ifndef HEIMDAL
- /* Suppress the MIT replay cache. Requires MIT Kerberos 1.4.0 or later.
- 1.3.x are covered by the hack overiding the replay calls */
-- if (getenv("KRB5RCACHETYPE") == NULL && have_rcache_type("none"))
-+ if (getenv("KRB5RCACHETYPE") == NULL)
- putenv(strdup("KRB5RCACHETYPE=none"));
- #endif
- #ifdef STANDARD20_MODULE_STUFF
diff --git a/www-apache/mod_auth_kerb/files/mod_auth_kerb-5.4-krb5pwd-double-free.patch b/www-apache/mod_auth_kerb/files/mod_auth_kerb-5.4-krb5pwd-double-free.patch
deleted file mode 100644
index aa8ced49c103..000000000000
--- a/www-apache/mod_auth_kerb/files/mod_auth_kerb-5.4-krb5pwd-double-free.patch
+++ /dev/null
@@ -1,22 +0,0 @@
-https://sources.debian.org/src/libapache-mod-auth-kerb/5.4-2.5/debian/patches/mod_auth_kerb-krb5_kt_close.patch/
-https://bugs.gentoo.org/673066
-
-Description: fix use after free in authenticate_user_krb5pwd()
-Origin: https://sourceforge.net/p/modauthkerb/bugs/61/attachment/mod_auth_kerb-krb5_kt_close.patch
-Bug: https://sourceforge.net/p/modauthkerb/bugs/61/
-Bug-Debian: https://bugs.debian.org/934043
-Author: Johan Ymerson (https://sourceforge.net/u/ymerson/)
---- a/src/mod_auth_kerb.c
-+++ b/src/mod_auth_kerb.c
-@@ -799,11 +799,9 @@
- "failed to verify krb5 credentials: %s",
- krb5_get_err_text(context, ret));
- krb5_kt_end_seq_get(context, keytab, &cursor);
-- krb5_kt_close(context, keytab);
- goto end;
- }
- krb5_kt_end_seq_get(context, keytab, &cursor);
-- krb5_kt_close(context, keytab);
- }
- else {
- if ((ret = verify_krb5_init_creds(r, context, &creds, server, keytab))) {
diff --git a/www-apache/mod_auth_kerb/files/mod_auth_kerb.conf b/www-apache/mod_auth_kerb/files/mod_auth_kerb.conf
deleted file mode 100644
index b38a0f361e4d..000000000000
--- a/www-apache/mod_auth_kerb/files/mod_auth_kerb.conf
+++ /dev/null
@@ -1 +0,0 @@
-d /run/httpd/krbcache 700 apache apache
diff --git a/www-apache/mod_auth_kerb/metadata.xml b/www-apache/mod_auth_kerb/metadata.xml
deleted file mode 100644
index e7a50cff416d..000000000000
--- a/www-apache/mod_auth_kerb/metadata.xml
+++ /dev/null
@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
-<pkgmetadata>
- <!-- maintainer-needed -->
- <upstream>
- <remote-id type="sourceforge">modauthkerb</remote-id>
- </upstream>
-</pkgmetadata>
diff --git a/www-apache/mod_auth_kerb/mod_auth_kerb-5.4-r5.ebuild b/www-apache/mod_auth_kerb/mod_auth_kerb-5.4-r5.ebuild
deleted file mode 100644
index 0c1f5271ba76..000000000000
--- a/www-apache/mod_auth_kerb/mod_auth_kerb-5.4-r5.ebuild
+++ /dev/null
@@ -1,66 +0,0 @@
-# Copyright 1999-2024 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-
-inherit apache-module depend.apache tmpfiles
-
-DESCRIPTION="An Apache authentication module using Kerberos"
-HOMEPAGE="http://modauthkerb.sourceforge.net/"
-SRC_URI="https://downloads.sourceforge.net/project/modauthkerb/${PN}/${P}/${P}.tar.gz
- https://dev.gentoo.org/~mgorny/dist/${P}-gentoo-patchset.tar.bz2"
-
-LICENSE="BSD openafs-krb5-a HPND"
-SLOT="0"
-KEYWORDS="amd64 x86"
-
-DEPEND="virtual/krb5"
-RDEPEND="${DEPEND}"
-
-APACHE2_MOD_CONF="11_${PN}"
-APACHE2_MOD_DEFINE="AUTH_KERB"
-
-DOCFILES="INSTALL README"
-
-need_apache2
-
-PATCHES=(
- "${WORKDIR}/${P}-gentoo-patchset"/${P}-rcopshack.patch
- "${WORKDIR}/${P}-gentoo-patchset"/${P}-fixes.patch
- "${WORKDIR}/${P}-gentoo-patchset"/${P}-s4u2proxy.patch
- "${WORKDIR}/${P}-gentoo-patchset"/${P}-httpd24.patch
- "${WORKDIR}/${P}-gentoo-patchset"/${P}-delegation.patch
- "${WORKDIR}/${P}-gentoo-patchset"/${P}-cachedir.patch
- "${WORKDIR}/${P}-gentoo-patchset"/${P}-longuser.patch
- "${WORKDIR}/${P}-gentoo-patchset"/${P}-handle-continue.patch
- "${WORKDIR}/${P}-gentoo-patchset"/${P}-heimdal.patch
-
- # bug #830208
- "${FILESDIR}"/${P}-api-change-krb5.patch
- # bug #673066
- "${FILESDIR}"/${P}-krb5pwd-double-free.patch
-)
-
-# Work around Bug #616612
-pkg_setup() {
- _init_apache2
- _init_apache2_late
-}
-
-src_configure() {
- CFLAGS="" APXS="${APXS}" econf --with-krb5=/usr --without-krb4
-}
-
-src_compile() {
- emake
-}
-
-src_install() {
- apache-module_src_install
-
- dotmpfiles "${FILESDIR}"/${PN}.conf
-}
-
-pkg_postinst() {
- tmpfiles_process ${PN}.conf
-}