NetBSD Problem Report #44597

From www@NetBSD.org  Fri Feb 18 15:27:50 2011
Return-Path: <www@NetBSD.org>
Received: from mail.netbsd.org (mail.netbsd.org [204.152.190.11])
	by www.NetBSD.org (Postfix) with ESMTP id 5BE8963B100
	for <gnats-bugs@gnats.NetBSD.org>; Fri, 18 Feb 2011 15:27:50 +0000 (UTC)
Message-Id: <20110218152749.86FF863B11D@www.NetBSD.org>
Date: Fri, 18 Feb 2011 15:27:49 +0000 (UTC)
From: joern.clausen@uni-bielefeld.de
Reply-To: joern.clausen@uni-bielefeld.de
To: gnats-bugs@NetBSD.org
Subject: add native Kerberos support on Solaris
X-Send-Pr-Version: www-1.0

>Number:         44597
>Category:       pkg
>Synopsis:       add native Kerberos support on Solaris
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    solaris-pkg-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Fri Feb 18 15:30:00 +0000 2011
>Closed-Date:    
>Last-Modified:  Tue Aug 30 15:20:02 +0000 2011
>Originator:     Jörn Clausen
>Release:        
>Organization:
University of Bielefeld
>Environment:
Solaris 10
>Description:
Using the native Kerberos implementation on Solaris is not possible.
>How-To-Repeat:

>Fix:
Header files for native Kerberos on Solaris 10 are found in

/usr/include/kerberosv5/

Adding a check in security/mit-krb5/builtin.mk for

BUILTIN_FIND_FILES.H_MIT_KRB5=         /usr/include/kerberosv5/krb5.h

seems sufficient, so that setting

KRB5_DEFAULT =               mit-krb5
PREFER_NATIVE =              mit-krb5

lets pkgsrc use the native implementation. Tested (in the sense that security/p5-GSSAPI builds against it) on MACHINE_PLATFORM=SunOS-5.10-i386.

>Release-Note:

>Audit-Trail:
[20110327 shattered] edited Environment: field

Responsible-Changed-From-To: pkg-manager->solaris-pkg-people
Responsible-Changed-By: wiz@NetBSD.org
Responsible-Changed-When: Sun, 20 Feb 2011 14:17:07 +0000
Responsible-Changed-Why:
Solaris pkgsrc problem.


From: Tim Zingelman <zingelman@gmail.com>
To: gnats-bugs@netbsd.org
Cc: wiz@netbsd.org, solaris-pkg-people@netbsd.org, pkg-manager@netbsd.org, 
	pkgsrc-bugs@netbsd.org, gnats-admin@netbsd.org, 
	joern.clausen@uni-bielefeld.de
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Fri, 1 Apr 2011 17:10:47 -0500

 Does this patch work for you?

 --- builtin.mk  22 Mar 2011 23:31:04 -0000      1.6
 +++ builtin.mk  1 Apr 2011 22:09:06 -0000
 @@ -8,6 +8,8 @@
  .if empty(MACHINE_PLATFORM:MDarwin-9.*-*) && \
      empty(MACHINE_PLATFORM:MDarwin-10.*-*)
  BUILTIN_FIND_FILES.H_MIT_KRB5=         /usr/include/krb5.h
 +.elif empty(MACHINE_PLATFORM:MSunOS-*-*)
 +BUILTIN_FIND_FILES.H_MIT_KRB5=         /usr/include/kerberosv5/krb5.h
  .else
  BUILTIN_FIND_FILES.H_MIT_KRB5=         /usr/include/krb5/krb5.h
  .endif

State-Changed-From-To: open->feedback
State-Changed-By: tez@NetBSD.org
State-Changed-When: Fri, 01 Apr 2011 22:20:43 +0000
State-Changed-Why:
patch proposed


From: =?ISO-8859-1?Q?J=F6rn_Clausen?= <joern.clausen@uni-bielefeld.de>
To: gnats-bugs@NetBSD.org
Cc: Tim Zingelman <zingelman@gmail.com>, solaris-pkg-people@NetBSD.org,
 gnats-admin@NetBSD.org, pkgsrc-bugs@NetBSD.org
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Fri, 08 Apr 2011 13:56:03 +0200

 The patch did not work, security/mit-krb5 was built and used, instead of 
 the native libraries.

 The use of negative checks ("if empty") makes it hard to add more 
 architectures. This should be easier to maintain:

 --- builtin.mk  2011/04/05 07:28:09     1.1
 +++ builtin.mk  2011/04/08 11:55:05
 @@ -5,11 +5,13 @@
   .include "../../mk/bsd.fast.prefs.mk"

   BUILTIN_FIND_FILES_VAR:=               H_MIT_KRB5 SH_KRB5_CONFIG
 -.if empty(MACHINE_PLATFORM:MDarwin-9.*-*) && \
 -    empty(MACHINE_PLATFORM:MDarwin-10.*-*)
 -BUILTIN_FIND_FILES.H_MIT_KRB5=         /usr/include/krb5.h
 +.if !(empty(MACHINE_PLATFORM:MDarwin-9.*-*) && \
 +    empty(MACHINE_PLATFORM:MDarwin-10.*-*))
 +BUILTIN_FIND_FILES.H_MIT_KRB5=          /usr/include/krb5/krb5.h
 +.elif !empty(MACHINE_PLATFORM:MSunOS-*-*)
 +BUILTIN_FIND_FILES.H_MIT_KRB5=          /usr/include/kerberosv5/krb5.h
   .else
 -BUILTIN_FIND_FILES.H_MIT_KRB5=         /usr/include/krb5/krb5.h
 +BUILTIN_FIND_FILES.H_MIT_KRB5=          /usr/include/krb5.h
   .endif
   BUILTIN_FIND_GREP.H_MIT_KRB5=          Massachusetts Institute of 
 Technology
   BUILTIN_FIND_FILES.SH_KRB5_CONFIG=     /usr/bin/krb5-config


 -- 
   Jörn Clausen                             joern.clausen@uni-bielefeld.de
   Hochschulrechenzentrum                 http://www.uni-bielefeld.de/hrz/
   Universität Bielefeld

From: "Tim Zingelman" <tez@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc: 
Subject: PR/44597 CVS commit: pkgsrc/security/mit-krb5
Date: Fri, 8 Apr 2011 17:30:35 +0000

 Module Name:	pkgsrc
 Committed By:	tez
 Date:		Fri Apr  8 17:30:35 UTC 2011

 Modified Files:
 	pkgsrc/security/mit-krb5: builtin.mk

 Log Message:
 Add builtin support for SunOS per PR#44597


 To generate a diff of this commit:
 cvs rdiff -u -r1.6 -r1.7 pkgsrc/security/mit-krb5/builtin.mk

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.

From: "Matthias Scheler" <tron@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc: 
Subject: PR/44597 CVS commit: [pkgsrc-2011Q1] pkgsrc/security/mit-krb5
Date: Sat, 16 Apr 2011 09:43:47 +0000

 Module Name:	pkgsrc
 Committed By:	tron
 Date:		Sat Apr 16 09:43:47 UTC 2011

 Modified Files:
 	pkgsrc/security/mit-krb5 [pkgsrc-2011Q1]: Makefile buildlink3.mk
 	    builtin.mk distinfo
 Added Files:
 	pkgsrc/security/mit-krb5/patches [pkgsrc-2011Q1]: patch-ck

 Log Message:
 Pullup ticket #3415 - requested by tez
 security/mit-krb5: security patch

 Revisions pulled up:
 - security/mit-krb5/Makefile                                    1.52-1.53
 - security/mit-krb5/buildlink3.mk                               1.11
 - security/mit-krb5/builtin.mk                                  1.7
 - security/mit-krb5/distinfo                                    1.28-1.29
 - security/mit-krb5/patches/patch-ck                            1.1

 ---
    Module Name:    pkgsrc
    Committed By:   tez
    Date:           Fri Apr  8 17:30:35 UTC 2011

    Modified Files:
            pkgsrc/security/mit-krb5: builtin.mk

    Log Message:
    Add builtin support for SunOS per PR#44597

 ---
    Module Name:    pkgsrc
    Committed By:   tez
    Date:           Sat Apr  9 00:16:18 UTC 2011

    Modified Files:
            pkgsrc/security/mit-krb5: Makefile buildlink3.mk distinfo
    Added Files:
            pkgsrc/security/mit-krb5/patches: patch-ck

    Log Message:
    correct openssl dependency (it needs >=0.9.8)
    correct BUILDLINK_API_DEPENDS.mit-krb5
    fix building where libtool chokes on "--version-info : " (at least OS X)

 ---
    Module Name:    pkgsrc
    Committed By:   tez
    Date:           Thu Apr 14 19:37:26 UTC 2011

    Modified Files:
            pkgsrc/security/mit-krb5: Makefile distinfo

    Log Message:
    fix MITKRB5-SA-2011-004 (CVE-2011-0285) DOS in kadmind


 To generate a diff of this commit:
 cvs rdiff -u -r1.51 -r1.51.2.1 pkgsrc/security/mit-krb5/Makefile
 cvs rdiff -u -r1.10 -r1.10.2.1 pkgsrc/security/mit-krb5/buildlink3.mk
 cvs rdiff -u -r1.6 -r1.6.2.1 pkgsrc/security/mit-krb5/builtin.mk
 cvs rdiff -u -r1.27 -r1.27.2.1 pkgsrc/security/mit-krb5/distinfo
 cvs rdiff -u -r0 -r1.1.2.2 pkgsrc/security/mit-krb5/patches/patch-ck

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.

State-Changed-From-To: feedback->closed
State-Changed-By: dholland@NetBSD.org
State-Changed-When: Sat, 30 Apr 2011 23:44:01 +0000
State-Changed-Why:
Fixed (right?)


From: =?ISO-8859-1?Q?J=F6rn_Clausen?= <joern.clausen@uni-bielefeld.de>
To: gnats-bugs@NetBSD.org
Cc: dholland@NetBSD.org, solaris-pkg-people@NetBSD.org, pkgsrc-bugs@NetBSD.org,
 gnats-admin@NetBSD.org
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Mon, 02 May 2011 08:57:05 +0200

 > Fixed (right?)

 Sorry, no. And I don't understand why. In security/p5-GSSAPI (which 
 depends on security/mit-krb5), I get

 $ bmake show-var VARNAME=BUILTIN_FIND_FILES.H_MIT_KRB5
 /usr/include/kerberosv5/krb5.h

 Good!

 $ bmake show-var VARNAME=IS_BUILTIN.mit-krb5
 yes

 Also good! But still:

 $ bmake
 [...]
 => Full dependency mit-krb5>=1.8: NOT found
 => Verifying package-install for ../../security/mit-krb5

 and mit-krb5 is built.

 -- 
   Jörn Clausen                             joern.clausen@uni-bielefeld.de
   Hochschulrechenzentrum                 http://www.uni-bielefeld.de/hrz/
   Universität Bielefeld

State-Changed-From-To: closed->open
State-Changed-By: dholland@NetBSD.org
State-Changed-When: Mon, 02 May 2011 07:30:09 +0000
State-Changed-Why:
overoptimistic. sigh


From: "OBATA Akio" <obache@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Mon, 02 May 2011 16:41:22 +0900

 On Mon, 02 May 2011 16:00:07 +0900, Jörn Clausen <joern.clausen@uni-bielefeld.de> wrote:

 >  => Full dependency mit-krb5>=1.8: NOT found
 >  => Verifying package-install for ../../security/mit-krb5
 > and mit-krb5 is built.

 Could you check BUILTIN_VERSION.mkt-krb5 ?
 Probably, it is little than 1.8.

 I don't know about API compatibility breakage on mit-krb5-1.8,
 but now BUILDLINK_API_DEPENDS.mit-krb5=mit-krb5>=1.8 in
 security/mit-krb5/buildlink3.mk.

 -- 
 OBATA Akio / obache@NetBSD.org

From: =?ISO-8859-1?Q?J=F6rn_Clausen?= <joern.clausen@uni-bielefeld.de>
To: gnats-bugs@NetBSD.org
Cc: OBATA Akio <obache@NetBSD.org>, solaris-pkg-people@NetBSD.org,
 gnats-admin@NetBSD.org, pkgsrc-bugs@NetBSD.org
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Mon, 02 May 2011 10:00:11 +0200

 >   Could you check BUILTIN_VERSION.mkt-krb5 ?
 >   Probably, it is little than 1.8.

 $ /usr/bin/krb5-config --version
 Solaris Kerberos (based on MIT Kerberos 5 release 1.4.0)

 That's it. I'll check with our Solaris admins, if patches from Oracle 
 with a new version are due any time soon.

 -- 
   Jörn Clausen                             joern.clausen@uni-bielefeld.de
   Hochschulrechenzentrum                 http://www.uni-bielefeld.de/hrz/
   Universität Bielefeld

From: "OBATA Akio" <obache@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Mon, 02 May 2011 17:18:28 +0900

 Maybe, BUILDLINK_API_DEPENDS.mit-krb5 should not be bumped,
 BUILDLINK_ABI_DEPENDS.mit-krb5 instead.
 (Yes, it is unclear when API_DEPENDS should be bumped).

From: Tim Zingelman <zingelman@gmail.com>
To: gnats-bugs@netbsd.org
Cc: solaris-pkg-people@netbsd.org, gnats-admin@netbsd.org, 
	pkgsrc-bugs@netbsd.org, joern.clausen@uni-bielefeld.de
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Mon, 2 May 2011 10:55:47 -0500

 On Mon, May 2, 2011 at 3:20 AM, OBATA Akio <obache@netbsd.org> wrote:
 > The following reply was made to PR pkg/44597; it has been noted by GNATS.
 >
 > From: "OBATA Akio" <obache@netbsd.org>
 > To: gnats-bugs@netbsd.org
 > Cc:
 > Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
 > Date: Mon, 02 May 2011 17:18:28 +0900
 >
 > =A0Maybe, BUILDLINK_API_DEPENDS.mit-krb5 should not be bumped,
 > =A0BUILDLINK_ABI_DEPENDS.mit-krb5 instead.
 > =A0(Yes, it is unclear when API_DEPENDS should be bumped).

 Are the settings for these handled differently when builtin is involved?

 I tried to follow the guidance here
 http://www.netbsd.org/docs/pkgsrc/buildlink.html and this lead me to
 bump BUILDLINK_API_DEPENDS but not BUILDLINK_ABI_DEPENDS when I
 updated the package.  It almost seems that builtin case should have a
 different set of values?

  - Tim

From: "OBATA Akio" <obache@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Tue, 03 May 2011 20:44:34 +0900

 On Tue, 03 May 2011 01:00:07 +0900, Tim Zingelman <zingelman@gmail.com> wrote:

 >  Are the settings for these handled differently when builtin is involved?

 Yes.
 Usually, users want to use builtin one as far as possible, so keeping API_DEPENDS is preferred.
 On the other hand, users don't want mixed use of builtin one and pkgsrc one, so default API_DEPENDS
 should be bumped to most suitable one.

 -- 
 OBATA Akio / obache@NetBSD.org

From: Tim Zingelman <zingelman@gmail.com>
To: gnats-bugs@netbsd.org
Cc: solaris-pkg-people@netbsd.org, gnats-admin@netbsd.org, 
	pkgsrc-bugs@netbsd.org, joern.clausen@uni-bielefeld.de
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Tue, 3 May 2011 09:19:09 -0500

 Is it reasonable to set different values for BUILDLINK_API_DEPENDS and
 BUILDLINK_ABI_DEPENDS in the buildlink file depending upon the setting
 of:
 KRB5_DEFAULT =               mit-krb5
 and/or
 PREFER_NATIVE =              mit-krb5
 ??

 Also, if we reduce BUILDLINK_API_DEPENDS in the buildlink file we'll
 need to explicitly set a higher value in mit-krb5-apps, as they need
 pkgsrc mit-krb5 to build... or maybe that package needs to have the
 same builtin as mit-krb5, not sure if any OS includes mit-krb5 base
 but not the apps??

   - Tim

From: "OBATA Akio" <obache@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Wed, 04 May 2011 10:43:16 +0900

 If only security/mit-rkb5-appl require mit-krb5>=1.8.0,
 how about just put BUILDLINK_API_DEPENDS.mit-krb5>=1.8.0 on
 security/mit-krb-appl/Makefile?

 -- 
 OBATA Akio / obache@NetBSD.org

From: =?ISO-8859-1?Q?J=F6rn_Clausen?= <joern.clausen@uni-bielefeld.de>
To: gnats-bugs@NetBSD.org
Cc: OBATA Akio <obache@NetBSD.org>, solaris-pkg-people@NetBSD.org,
 gnats-admin@NetBSD.org, pkgsrc-bugs@NetBSD.org
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Wed, 01 Jun 2011 13:29:10 +0200

 >   If only security/mit-rkb5-appl require mit-krb5>=1.8.0,
 >   how about just put BUILDLINK_API_DEPENDS.mit-krb5>=1.8.0 on
 >   security/mit-krb-appl/Makefile?

 Isn't this how BUILDLINK_*_DEPENDS should work in the first place? The 
 consumer defines, which version is necessary, not the provider?

 I just tweaked security/mit-krb5/buildlink3.mk to be happy with 1.4.0, 
 and security/p5-GSSAPI compiles (though I haven't tested it yet).

 In addition I had to do this change in security/mit-krb5

 --- builtin.mk  2011/04/27 09:08:46     1.1
 +++ builtin.mk  2011/05/31 07:22:30
 @@ -39,7 +39,7 @@
       !empty(IS_BUILTIN.mit-krb5:M[yY][eE][sS])
   .  if empty(SH_KRB5_CONFIG:M__nonexistent__)
   BUILTIN_VERSION.mit-krb5!=     ${SH_KRB5_CONFIG} --version | \
 -                               ${SED} -e 's/.*release //' -e 's/-.*//'
 +                               ${SED} -e 's/.*release \([0-9\.]*\).*/\1/'
   .  endif
   BUILTIN_VERSION.mit-krb5?=     1.4.0
   BUILTIN_PKG.mit-krb5=          mit-krb5-${BUILTIN_VERSION.mit-krb5}


 as /usr/bin/krb5-config --version returns

 Solaris Kerberos (based on MIT Kerberos 5 release 1.4.0)

 and the original regex kept the closing parenthesis. I don't know if 
 there are versions of Kerberos that have other characters in the version 
 string, so this might not be portable.

 -- 
   Jörn Clausen                             joern.clausen@uni-bielefeld.de
   Hochschulrechenzentrum                 http://www.uni-bielefeld.de/hrz/
   Universität Bielefeld

From: Tim Zingelman <tez@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Mon, 29 Aug 2011 18:05:44 -0500

 Sorry for the delay in getting to look at this... I had hoped someone
 else might comment on my questioning of the direction to proceed...

 I think the following difference (against HEAD) may do what you would
 like.  Note that your patch to the RE in builtin.mk is needed and not
 yet committed.

 Index: buildlink3.mk
 ===================================================================
 RCS file: /usr/cvs/pkgsrc/security/mit-krb5/buildlink3.mk,v
 retrieving revision 1.12
 diff -u -r1.12 buildlink3.mk
 --- buildlink3.mk       8 Jul 2011 09:59:28 -0000       1.12
 +++ buildlink3.mk       29 Aug 2011 23:03:34 -0000
 @@ -5,9 +5,16 @@
  .if !defined(MIT_KRB5_BUILDLINK3_MK)
  MIT_KRB5_BUILDLINK3_MK:=

 +.include "builtin.mk"
 +
 +.if !empty(PREFER.mit-krb5:Mnative)
 +BUILDLINK_API_DEPENDS.mit-krb5+=       mit-krb5>=1.4
 +BUILDLINK_ABI_DEPENDS.mit-krb5+=       mit-krb5>=1.4
 +.else
  BUILDLINK_API_DEPENDS.mit-krb5+=       mit-krb5>=1.8
  BUILDLINK_ABI_DEPENDS.mit-krb5+=       mit-krb5>=1.8
  BUILDLINK_PKGSRCDIR.mit-krb5?=         ../../security/mit-krb5
 +.endif # PREFER.mit-krb5=native
  .endif # MIT_KRB5_BUILDLINK3_MK

  BUILDLINK_TREE+=       -mit-krb5
 Index: builtin.mk
 ===================================================================
 RCS file: /usr/cvs/pkgsrc/security/mit-krb5/builtin.mk,v
 retrieving revision 1.7
 diff -u -r1.7 builtin.mk
 --- builtin.mk  8 Apr 2011 17:30:35 -0000       1.7
 +++ builtin.mk  29 Aug 2011 22:57:58 -0000
 @@ -39,7 +39,7 @@
      !empty(IS_BUILTIN.mit-krb5:M[yY][eE][sS])
  .  if empty(SH_KRB5_CONFIG:M__nonexistent__)
  BUILTIN_VERSION.mit-krb5!=     ${SH_KRB5_CONFIG} --version | \
 -                               ${SED} -e 's/.*release //' -e 's/-.*//'
 +                               ${SED} -e 's/.*release \([0-9\.]*\).*/\1/'
  .  endif
  BUILTIN_VERSION.mit-krb5?=     1.4.0
  BUILTIN_PKG.mit-krb5=          mit-krb5-${BUILTIN_VERSION.mit-krb5}

 Also if this works, we'll need to add:
 BUILDLINK_API_DEPENDS.mit-krb5+=mit-krb5>=1.8 to
 security/mit-krb5-appl/Makefile

From: Thomas Klausner <wiz@NetBSD.org>
To: NetBSD bugtracking <gnats-bugs@NetBSD.org>
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Tue, 30 Aug 2011 08:40:16 +0200

 On Mon, Aug 29, 2011 at 11:10:05PM +0000, Tim Zingelman wrote:
 >  Index: buildlink3.mk
 >  ===================================================================
 >  RCS file: /usr/cvs/pkgsrc/security/mit-krb5/buildlink3.mk,v
 >  retrieving revision 1.12
 >  diff -u -r1.12 buildlink3.mk
 >  --- buildlink3.mk       8 Jul 2011 09:59:28 -0000       1.12
 >  +++ buildlink3.mk       29 Aug 2011 23:03:34 -0000
 >  @@ -5,9 +5,16 @@
 >   .if !defined(MIT_KRB5_BUILDLINK3_MK)
 >   MIT_KRB5_BUILDLINK3_MK:=
 >  
 >  +.include "builtin.mk"
 >  +
 >  +.if !empty(PREFER.mit-krb5:Mnative)
 >  +BUILDLINK_API_DEPENDS.mit-krb5+=       mit-krb5>=1.4
 >  +BUILDLINK_ABI_DEPENDS.mit-krb5+=       mit-krb5>=1.4
 >  +.else
 >   BUILDLINK_API_DEPENDS.mit-krb5+=       mit-krb5>=1.8
 >   BUILDLINK_ABI_DEPENDS.mit-krb5+=       mit-krb5>=1.8
 >   BUILDLINK_PKGSRCDIR.mit-krb5?=         ../../security/mit-krb5
 >  +.endif # PREFER.mit-krb5=native
 >   .endif # MIT_KRB5_BUILDLINK3_MK

 Is there a reason to not just downgrade the patterns to 1.4
 unconditionally (and adding the 1.8 dependency for the apps package)?
  Thomas

From: Tim Zingelman <tez@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Tue, 30 Aug 2011 08:14:35 -0500

 > =A0Is there a reason to not just downgrade the patterns to 1.4
 > =A0unconditionally (and adding the 1.8 dependency for the apps package)?

 Other than the fact that mit-krb5 (non-native) IS 1.8?
 (which was both an API & ABI bump from the previous pkgsrc version as
 far as I understand the definition of those variables)

 Why is it that those variables are used both to say what version is
 provided by a package AND for what version is required by a dependent
 package?  That just seems broken to me... or am I missing something in
 the concept?

 Are these variables better explained/defined someplace other than
 http://www.netbsd.org/docs/pkgsrc/buildlink.html ?

 Thanks,

  - Tim

From: Thomas Klausner <wiz@NetBSD.org>
To: NetBSD bugtracking <gnats-bugs@NetBSD.org>
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Tue, 30 Aug 2011 16:56:47 +0200

 On Tue, Aug 30, 2011 at 01:15:06PM +0000, Tim Zingelman wrote:
 >  Other than the fact that mit-krb5 (non-native) IS 1.8?

 That alone is never a reason :)

 >  (which was both an API & ABI bump from the previous pkgsrc version as
 >  far as I understand the definition of those variables)

 We bump ABI if a package compiled against that version won't compile
 against an older version. One example is a shlib major bump.
 Then packages built against it are linked against libfoo.2 while the
 old version would only provide libfoo.1 and the old package wouldn't
 fulfill the new dependency.

 Users can override this by setting ABI_DEPENDS to "no" but then they
 are on their own. (You might want to do this if e.g. glib2 is bumped
 and you don't have time to reinstall all packages, but just want to
 update one of the packages using it.)

 We almost never bump API.
 One reason would be if all packages using it NEED the newer version.
 I can't think of the other reasons right now, but I think there were
 more.

 In packages using a package which need a particular version (e.g.
 because of added functions), you would override API.

 >  Why is it that those variables are used both to say what version is
 >  provided by a package

 The version provided by the package is the PKGVERSION.


 >  Are these variables better explained/defined someplace other than
 >  http://www.netbsd.org/docs/pkgsrc/buildlink.html ?

 Not sure. Feel free to add the explanation, or I might come around to
 it :)
  Thomas

From: Thomas Klausner <wiz@NetBSD.org>
To: NetBSD bugtracking <gnats-bugs@NetBSD.org>
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Tue, 30 Aug 2011 16:58:32 +0200

 On Tue, Aug 30, 2011 at 01:15:06PM +0000, Tim Zingelman wrote:
 >  Are these variables better explained/defined someplace other than
 >  http://www.netbsd.org/docs/pkgsrc/buildlink.html ?

 Reading this more carefully, 14.2.2 is outdated and predates ABI :(
  Thomas

From: Thomas Klausner <wiz@NetBSD.org>
To: NetBSD bugtracking <gnats-bugs@NetBSD.org>
Cc: 
Subject: Re: pkg/44597 (add native Kerberos support on Solaris)
Date: Tue, 30 Aug 2011 17:19:40 +0200

 On Tue, Aug 30, 2011 at 03:00:15PM +0000, Thomas Klausner wrote:
 >  Reading this more carefully, 14.2.2 is outdated and predates ABI :(

 I've updated the section, please let me know if it is clear enough
 now.

 Thanks,
  Thomas

>Unformatted:

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD: gnats_config.sh,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2007 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.