xref: /OK3568_Linux_fs/yocto/meta-openembedded/meta-oe/recipes-connectivity/krb5/krb5_1.17.2.bb (revision 4882a59341e53eb6f0b4789bf948001014eff981) 
1SUMMARY = "A network authentication protocol"
2DESCRIPTION = "Kerberos is a system for authenticating users and services on a network. \
3 Kerberos is a trusted third-party service.  That means that there is a \
4 third party (the Kerberos server) that is trusted by all the entities on \
5 the network (users and services, usually called "principals"). \
6 . \
7 This is the MIT reference implementation of Kerberos V5. \
8 . \
9 This package contains the Kerberos key server (KDC).  The KDC manages all \
10 authentication credentials for a Kerberos realm, holds the master keys \
11 for the realm, and responds to authentication requests.  This package \
12 should be installed on both master and slave KDCs."
13
14HOMEPAGE = "http://web.mit.edu/Kerberos/"
15SECTION = "console/network"
16LICENSE = "MIT"
17LIC_FILES_CHKSUM = "file://${S}/../NOTICE;md5=dd4d0ad4c5e98abb58aa0d312f276791"
18DEPENDS = "bison-native ncurses util-linux e2fsprogs e2fsprogs-native openssl"
19
20inherit autotools-brokensep binconfig perlnative systemd update-rc.d
21
22SHRT_VER = "${@oe.utils.trim_version("${PV}", 2)}"
23SRC_URI = "http://web.mit.edu/kerberos/dist/${BPN}/${SHRT_VER}/${BP}.tar.gz \
24           file://0001-aclocal-Add-parameter-to-disable-keyutils-detection.patch \
25           file://debian-suppress-usr-lib-in-krb5-config.patch;striplevel=2 \
26           file://crosscompile_nm.patch \
27           file://etc/init.d/krb5-kdc \
28           file://etc/init.d/krb5-admin-server \
29           file://etc/default/krb5-kdc \
30           file://etc/default/krb5-admin-server \
31           file://krb5-kdc.service \
32           file://krb5-admin-server.service \
33           file://CVE-2021-36222.patch;striplevel=2 \
34           file://CVE-2021-37750.patch;striplevel=2 \
35           file://CVE-2022-42898.patch;striplevel=2 \
36"
37SRC_URI[md5sum] = "aa4337fffa3b61f22dbd0167f708818f"
38SRC_URI[sha256sum] = "1a4bba94df92f6d39a197a10687653e8bfbc9a2076e129f6eb92766974f86134"
39
40CVE_PRODUCT = "kerberos"
41CVE_VERSION = "5-${PV}"
42
43S = "${WORKDIR}/${BP}/src"
44
45PACKAGECONFIG ??= "pkinit"
46PACKAGECONFIG[libedit] = "--with-libedit,--without-libedit,libedit"
47PACKAGECONFIG[openssl] = "--with-crypto-impl=openssl,,openssl"
48PACKAGECONFIG[keyutils] = "--enable-keyutils,--disable-keyutils,keyutils"
49PACKAGECONFIG[ldap] = "--with-ldap,--without-ldap,openldap"
50PACKAGECONFIG[readline] = "--with-readline,--without-readline,readline"
51PACKAGECONFIG[pkinit] = "--enable-pkinit, --disable-pkinit"
52
53EXTRA_OECONF += " --without-tcl --with-system-et --disable-rpath"
54CACHED_CONFIGUREVARS += "krb5_cv_attr_constructor_destructor=yes ac_cv_func_regcomp=yes \
55                  ac_cv_printf_positional=yes ac_cv_file__etc_environment=yes \
56                  ac_cv_file__etc_TIMEZONE=no"
57
58CFLAGS:append = " -fPIC -DDESTRUCTOR_ATTR_WORKS=1 -I${STAGING_INCDIR}/et"
59CFLAGS:append:riscv64 = " -D_REENTRANT -pthread"
60LDFLAGS:append = " -pthread"
61
62do_configure() {
63    gnu-configize --force
64    autoreconf
65    oe_runconf
66}
67
68do_install:append() {
69    rm -rf ${D}/${localstatedir}/run
70    rm -f ${D}${bindir}/sclient
71    rm -f ${D}${bindir}/sim_client
72    rm -f ${D}${bindir}/uuclient
73    rm -f ${D}${sbindir}/krb5-send-pr
74    rm -f ${D}${sbindir}/sim_server
75    rm -f ${D}${sbindir}/sserver
76    rm -f ${D}${sbindir}/uuserver
77
78    if ${@bb.utils.contains('DISTRO_FEATURES', 'sysvinit', 'true', 'false', d)}; then
79        mkdir -p ${D}/${sysconfdir}/init.d ${D}/${sysconfdir}/default
80        install -m 0755 ${WORKDIR}/etc/init.d/* ${D}/${sysconfdir}/init.d
81        install -m 0644 ${WORKDIR}/etc/default/* ${D}/${sysconfdir}/default
82
83        mkdir -p ${D}/${sysconfdir}/default/volatiles
84        echo "d root root 0755 ${localstatedir}/run/krb5kdc none" \
85              > ${D}${sysconfdir}/default/volatiles/87_krb5
86
87        echo "RUN_KADMIND=true" >> ${D}/${sysconfdir}/default/krb5-admin-server
88    fi
89    if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
90        install -d ${D}${sysconfdir}/tmpfiles.d
91        echo "d /run/krb5kdc - - - -" \
92              > ${D}${sysconfdir}/tmpfiles.d/krb5.conf
93
94        mkdir -p ${D}/${sysconfdir}/default
95        install -m 0644 ${WORKDIR}/etc/default/* ${D}/${sysconfdir}/default
96
97        install -d ${D}${systemd_system_unitdir}
98        install -m 0644 ${WORKDIR}/krb5-admin-server.service ${D}${systemd_system_unitdir}
99        install -m 0644 ${WORKDIR}/krb5-kdc.service ${D}${systemd_system_unitdir}
100    fi
101
102    sed -e 's@[^ ]*-ffile-prefix-map=[^ "]*@@g' \
103        -e 's@[^ ]*-fdebug-prefix-map=[^ "]*@@g' \
104        -e 's@[^ ]*-fmacro-prefix-map=[^ "]*@@g' \
105        -i ${D}${bindir}/krb5-config
106}
107
108PACKAGES =+ "${PN}-admin-server \
109             ${PN}-gss-samples \
110             ${PN}-k5tls \
111             ${PN}-kdc \
112             ${PN}-kdc-ldap \
113             ${PN}-kpropd \
114             ${PN}-otp \
115             ${PN}-pkinit \
116             ${PN}-spake \
117             ${PN}-user \
118             libgssapi-krb5 \
119             libgssrpc \
120             libk5crypto \
121             libkadm5clnt-mit \
122             libkadm5srv-mit \
123             libkdb5 \
124             libkrad \
125             libkrb5 \
126             libkrb5support \
127             libverto"
128
129FILES:${PN} = "${libdir}/krb5/plugins/preauth/test.so"
130FILES:${PN}-doc += "${datadir}/examples"
131FILES:${PN}-dbg += "${libdir}/krb5/plugins/*/.debug"
132
133FILES:${PN}-admin-server = "${sbindir}/kadmin.local \
134                            ${sbindir}/kadmind \
135                            ${sbindir}/kprop \
136                            ${sysconfdir}/default/krb5-admin-server \
137                            ${sysconfdir}/init.d/krb5-admin-server \
138                            ${systemd_system_unitdir}/krb5-admin-server.service"
139
140FILES:${PN}-gss-samples = "${bindir}/gss-client \
141                           ${sbindir}/gss-server"
142
143FILES:${PN}-k5tls = "${libdir}/krb5/plugins/tls/k5tls.so"
144
145FILES:${PN}-kdc = "${libdir}/krb5/plugins/kdb/db2.so \
146                   ${localstatedir}/krb5kdc \
147                   ${sbindir}/kdb5_util \
148                   ${sbindir}/kproplog \
149                   ${sbindir}/krb5kdc \
150                   ${sysconfdir}/default/krb5-kdc \
151                   ${sysconfdir}/default/volatiles/87_krb5 \
152                   ${sysconfdir}/init.d/krb5-kdc \
153                   ${sysconfdir}/tmpfiles.d/krb5.conf \
154                   ${systemd_system_unitdir}/krb5-kdc.service"
155
156FILES:${PN}-kdc-ldap = "${libdir}/krb5/libkdb_ldap${SOLIBS} \
157                        ${libdir}/krb5/plugins/kdb/kldap.so \
158                        ${sbindir}/kdb5_ldap_util"
159
160FILES:${PN}-kpropd = "${sbindir}/kpropd"
161FILES:${PN}-otp = "${libdir}/krb5/plugins/preauth/otp.so"
162FILES:${PN}-pkinit = "${libdir}/krb5/plugins/preauth/pkinit.so"
163FILES:${PN}-spake = "${libdir}/krb5/plugins/preauth/spake.so"
164FILES:${PN}-user = "${bindir}/k*"
165
166FILES:libgssapi-krb5 = "${libdir}/libgssapi_krb5${SOLIBS}"
167FILES:libgssrpc = "${libdir}/libgssrpc${SOLIBS}"
168FILES:libk5crypto = "${libdir}/libk5crypto${SOLIBS}"
169FILES:libkadm5clnt-mit = "${libdir}/libkadm5clnt_mit${SOLIBS}"
170FILES:libkadm5srv-mit = "${libdir}/libkadm5srv_mit${SOLIBS}"
171FILES:libkdb5 = "${libdir}/libkdb5${SOLIBS}"
172FILES:libkrad = "${libdir}/libkrad${SOLIBS}"
173FILES:libkrb5 = "${libdir}/libkrb5${SOLIBS} \
174                 ${libdir}/krb5/plugins/authdata \
175                 ${libdir}/krb5/plugins/libkrb5"
176FILES:libkrb5support = "${libdir}/libkrb5support${SOLIBS}"
177FILES:libverto = "${libdir}/libverto${SOLIBS}"
178
179RDEPENDS:${PN}-kadmin-server = "${PN}-kdc"
180RDEPENDS:${PN}-kpropd = "${PN}-kdc"
181
182INITSCRIPT_PACKAGES = "${PN}-admin-server ${PN}-kdc"
183INITSCRIPT_NAME:${PN}-admin-server = "krb5-admin-server"
184INITSCRIPT_NAME:${PN}-kdc = "krb5-kdc"
185
186SYSTEMD_PACKAGES = "${PN}-admin-server ${PN}-kdc"
187SYSTEMD_SERVICE:${PN}-admin-server = "krb5-admin-server.service"
188SYSTEMD_SERVICE:${PN}-kdc = "krb5-kdc.service"
189
190pkg_postinst:${PN}-kdc () {
191    if [ -z "$D" ]; then
192        if command -v systemd-tmpfiles >/dev/null; then
193            systemd-tmpfiles --create ${sysconfdir}/tmpfiles.d/krb5.conf
194        elif [ -e ${sysconfdir}/init.d/populate-volatile.sh ]; then
195            ${sysconfdir}/init.d/populate-volatile.sh update
196        fi
197    fi
198}
199
200BBCLASSEXTEND = "native nativesdk"
201