security/sssd-devel: New port

Add new port sss-devel. This updates sssd to version 2.9.0. This is a development version to be used to get out all the kinks before replacing the current security/sssd port. Changes: https://sssd.io/release-notes/sssd-2.0.0.html https://sssd.io/release-notes/sssd-2.1.0.html https://sssd.io/release-notes/sssd-2.2.0.html https://sssd.io/release-notes/sssd-2.3.0.html https://sssd.io/release-notes/sssd-2.4.0.html https://sssd.io/release-notes/sssd-2.5.0.html https://sssd.io/release-notes/sssd-2.6.0.html https://sssd.io/release-notes/sssd-2.7.0.html https://sssd.io/release-notes/sssd-2.8.0.html https://sssd.io/release-notes/sssd-2.9.0.html
freebsd · Jul 3, 2023 · 8ed50ce · 8ed50ce
1 parent fc5a2b1
commit 8ed50ce
Show file tree

Hide file tree

Showing 68 changed files with 2,933 additions and 0 deletions.
diff --git a/security/Makefile b/security/Makefile
@@ -1262,6 +1262,7 @@
     SUBDIR += sslscan
     SUBDIR += sslsplit
     SUBDIR += sssd
+    SUBDIR += sssd-devel
     SUBDIR += ssss
     SUBDIR += sst
     SUBDIR += starttls

diff --git a/security/sssd-devel/Makefile b/security/sssd-devel/Makefile
@@ -0,0 +1,206 @@
+PORTNAME=	sssd
+PORTVERSION=	2.9.0
+CATEGORIES=	security
+PKGNAMESUFFIX=	-devel
+
+MAINTAINER=	jhixson@FreeBSD.org
+COMMENT=	System Security Services Daemon
+WWW=		https://sssd.io/
+
+LICENSE=	GPLv3+
+LICENSE_FILE=	${WRKSRC}/COPYING
+
+CONFLICTS_INSTALL?=	sssd*
+
+BUILD_DEPENDS=	bash:shells/bash \
+		docbook-xsl>=1:textproc/docbook-xsl \
+		krb5>=1.20:security/krb5 \
+		p11-kit:security/p11-kit \
+		samba-nsupdate:dns/samba-nsupdate \
+		xmlcatalog:textproc/libxml2 \
+		xmlcatmgr:textproc/xmlcatmgr \
+		xsltproc:textproc/libxslt
+
+LIB_DIRS+=	${LOCALBASE}/lib ${LOCALBASE}/lib/sasl2
+LIB_DEPENDS=	libcares.so:dns/c-ares \
+		libcom_err.so:security/krb5 \
+		libcurl.so:ftp/curl \
+		libdbus-1.so:devel/dbus \
+		libdhash.so:devel/ding-libs \
+		libfido2.so:security/libfido2 \
+		libgssapi_krb5.so:security/krb5 \
+		libinotify.so:devel/libinotify \
+		libjansson.so:devel/jansson \
+		libjose.so:net/jose \
+		libkrb5.so:security/krb5 \
+		libldb.so:databases/ldb22 \
+		libndr-krb5pac.so:net/samba416 \
+		libndr-nbt.so:net/samba416 \
+		libndr-standard.so:net/samba416 \
+		libndr.so:net/samba416 \
+		libnfs.so:net/libnfs \
+		libnss3.so:security/nss \
+		libp11-kit.so:security/p11-kit \
+		libpcre2-posix.so:devel/pcre2 \
+		libplds4.so:devel/nspr \
+		libpopt.so:devel/popt \
+		libsamba-util.so:net/samba416 \
+		libsasl2.so:security/cyrus-sasl2 \
+		libsmbclient.so:net/samba416 \
+		libtalloc.so:devel/talloc \
+		libtdb.so:databases/tdb \
+		libtevent.so:devel/tevent \
+		libunistring.so:devel/libunistring \
+		libuuid.so:misc/e2fsprogs-libuuid
+
+RUN_DEPENDS=	cyrus-sasl-gssapi>0:security/cyrus-sasl2-gssapi \
+		sudo>0:security/sudo
+
+.include <bsd.port.options.mk>
+.if ${OPSYS} == FreeBSD && ${OSVERSION} < 1300076
+IGNORE=SSSD is only supported on FreeBSD 13.1 and above
+.endif
+
+USES=	autoreconf cpe gettext gmake gssapi:bootstrap,flags,mit iconv ldap \
+	libtool pathfix pkgconfig python:3.9+ shebangfix ssl
+
+USE_LDCONFIG=	yes
+GNU_CONFIGURE=	yes
+
+INSTALL_TARGET=	install-strip
+CPE_VENDOR=	fedoraproject
+
+DEBUG_FLAGS=	-g
+STRIP=
+
+CONFIGURE_ARGS=	--disable-dependency-tracking \
+		--datadir=${DATADIR} \
+		--docdir=${DOCSDIR} \
+		--localstatedir=/var \
+		--disable-silent-rules \
+		--disable-nls \
+		--disable-cifs-idmap-plugin \
+		--disable-valgrind \
+		--disable-systemtap \
+		--enable-pammoddir=${PREFIX}/lib \
+		--enable-ldb-version-check \
+		--enable-pac-responder \
+		--with-db-path=/var/db/sss/db \
+		--with-os=freebsd \
+		--with-plugin-path=${LOCALBASE}/lib/sssd \
+		--with-pubconf-path=/var/db/sss/pubconf  \
+		--with-pid-path=/var/run \
+		--with-pipe-path=/var/run/sss/pipes \
+		--with-mcache-path=/var/db/sss/mc \
+		--with-environment-file=${LOCALBASE}/etc/sssd \
+		--with-init-dir=no \
+		--with-manpages \
+		--with-xml-catalog-path=${LOCALBASE}/share/xml/catalog \
+		--with-krb5-plugin-path=${LOCALBASE}/lib/krb5/plugins/libkrb5 \
+		--with-krb5authdata-plugin-path=${LOCALBASE}/lib/krb5/plugins/authdata \
+		--with-krb5-conf=/etc/krb5.conf \
+		--without-python2-bindings \
+		--with-winbind-plugin-path=${LOCALBASE}/lib/samba4/modules/idmap \
+		--without-selinux \
+		--with-gpo-cache-path=/var/db/sss/gpo_cache  \
+		--without-semanage \
+		--with-app-libs=${LOCALBASE}/lib/sssd/modules \
+		--with-sudo \
+		--with-sudo-lib-path=${LOCALBASE}/lib \
+		--without-autofs \
+		--with-files-provider \
+		--with-passkey \
+		--with-libsifp \
+		--without-libsifp \
+		--with-syslog=syslog \
+		--with-samba \
+		--without-nfsv4-idmapd-plugin \
+		--with-nfs-lib-path=${LOCALBASE}/lib \
+		--with-secrets-db-path=/var/lib/sss/secrets \
+		--with-kcm \
+		--with-oidc-child \
+		--with-ldb-lib-dir=${LOCALBASE}/lib/shared-modules/ldb \
+		--with-smb-idmap-interface-version=6 \
+		--without-libnl \
+		--with-nscd-conf=/etc/nscd.conf \
+		--with-python_prefix=${PREFIX} \
+		--with-unicode-lib=libunistring
+
+CFLAGS+=	-fstack-protector-all
+CFLAGS+=	-I${LOCALBASE}/include -I${LOCALBASE}/include/samba4
+
+LIBS+=	-L${LOCALBASE}/lib \
+	-L${LOCALBASE}/lib/samba4/private \
+	-L${LOCALBASE}/lib/sasl2  \
+	-linotify -lintl
+
+KRB5_HOME=	${LOCALBASE}
+KRB5_CONFIG=	${LOCALBASE}/bin/krb5-config
+KRB5_CFLAGS=	-I${LOCALBASE}/include
+KRB5_LIBS=	-L${LOCALBASE}/lib -lkrb5
+
+LDFLAGS+=       -lgssapi
+LDFLAGS_SL+=    -lgssapi
+
+LDFLAGS+=       -L${LOCALBASE}/lib
+INCLUDES+=      -I${LOCALBASE}/include
+CONFIGURE_ENV+= INCLUDES="${INCLUDES}" \
+		LDFLAGS_SL="${LDFLAGS_SL}"
+MAKE_ENV=       MAKELEVEL=0
+
+PLIST_SUB=	PYTHON_VER=${PYTHON_VER}
+MAKE_ENV+=      LINGUAS="bg de eu es fr hu id it ja nb nl pl pt ru sv tg tr uk zh_CN zh_TW"
+SUB_FILES=	pkg-message
+
+BINARY_ALIAS=	python3=python${PYTHON_VER}
+SHEBANG_FILES=	sbus_generate.sh.in \
+		src/tools/analyzer/sss_analyze \
+		src/tools/sss_obfuscate \
+		src/config/SSSDConfigTest.py \
+		src/tests/python-test.py \
+		src/tests/pysss-test.py \
+		src/tests/cwrap/cwrap_test_setup.sh \
+		src/tests/whitespace_test \
+		src/tests/pyhbac-test.py \
+		src/tests/multihost/data/memcachesize.py \
+		src/tests/double_semicolon_test \
+		src/tests/pysss_murmur-test.py \
+		scripts/release.sh \
+		contrib/git/pre-push \
+		contrib/ci/rpm-spec-builddeps \
+		contrib/ci/clean \
+		contrib/ci/valgrind-condense \
+		contrib/ci/run-multihost \
+		contrib/ci/run \
+		contrib/ci/get-matrix.py \
+		contrib/vagrant/bootstrap.sh \
+		contrib/fedora/make_srpm.sh
+
+USE_RC_SUBR=	${PORTNAME}
+
+USE_GITHUB=yes
+GH_ACCOUNT=sssd
+
+post-patch:
+	@${REINPLACE_CMD} -e 's|/usr/bin/|${PREFIX}/bin/|g' \
+		-e 's|/var/lib/sss/pubconf/|/var/db/sss/pubconf/|g' \
+		${WRKSRC}/src/man/sss_ssh_knownhostsproxy.1.xml \
+		${WRKSRC}/src/man/po/*.po || true
+	@${REINPLACE_CMD} -e 's|/etc/sssd/|${ETCDIR}/|g' \
+		-e 's|/etc/openldap/|${LOCALBASE}/etc/openldap/|g' \
+		${WRKSRC}/src/man/*xml || true
+	@${CP} ${FILESDIR}/sss_bsd_errno.h ${WRKSRC}/src/util/sss_bsd_errno.h
+	@${CP} ${FILESDIR}/bsdnss.c ${WRKSRC}/src/sss_client/bsdnss.c
+
+post-install:
+	${INSTALL_DATA} ${WRKSRC}/src/examples/sssd-example.conf \
+		${STAGEDIR}${ETCDIR}/sssd.conf.sample
+	${MKDIR} ${STAGEDIR}${PREFIX}/share/dbus-1/system.d
+	${INSTALL_DATA} ${WRKSRC}/src/responder/ifp/org.freedesktop.sssd.infopipe.conf \
+		${STAGEDIR}${PREFIX}/share/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf
+	${MKDIR} ${STAGEDIR}${PREFIX}/share/dbus-1/system-services
+	${INSTALL_DATA} ${WRKSRC}/src/responder/ifp/org.freedesktop.sssd.infopipe.service \
+		${STAGEDIR}${PREFIX}/share/dbus-1/system-services/org.freedesktop.sssd.infopipe.service
+	${LN} -sf libnss_sss.so.2 ${STAGEDIR}${PREFIX}/lib/nss_sss.so.1
+
+.include <bsd.port.mk>
diff --git a/security/sssd-devel/distinfo b/security/sssd-devel/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1684527117
+SHA256 (sssd-sssd-2.9.0_GH0.tar.gz) = 6dcf9b0d76ffde6031cb5f836574072c1a1ca31e7b1d5a4da8c0c4b636f1340a
+SIZE (sssd-sssd-2.9.0_GH0.tar.gz) = 6631690