etc/gss: Add MIT GSS glue

The MIT GSS uses different library names. And MIT KRB5 supports more
OIDs than our ancient Heimdal does.

The intention is to remove etc/gss when Heimdal is finally retired and
rename etc/gss-krb5 to etc/gss.

Sponsored by:		The FreeBSD Foundation
Differential revision:	https://reviews.freebsd.org/D50812
This commit is contained in:
Cy Schubert 2025-06-10 19:45:02 -07:00
parent a5a550c64f
commit 1b735665f4
4 changed files with 26 additions and 0 deletions

View file

@ -15,6 +15,12 @@ SUBDIR+=termcap
SUBDIR+=sendmail
.endif
.if ${MK_MITKRB5} != "no"
SUBDIR+=gss-krb5
.else
SUBDIR+=gss
.endif
# NB: keep these sorted by MK_* knobs
ETCMAIL=aliases
@ -53,7 +59,11 @@ distribution:
@echo "set DESTDIR before running \"make ${.TARGET}\""
@false
.endif
.if ${MK_MITKRB5} != "no"
${_+_}cd ${.CURDIR}/gss-krb5; ${MAKE} install
.else
${_+_}cd ${.CURDIR}/gss; ${MAKE} install
.endif
${_+_}cd ${.CURDIR}/mtree; ${MAKE} install
${_+_}cd ${SRCTOP}/share/termcap; ${MAKE} etc-termcap
${_+_}cd ${SRCTOP}/usr.sbin/rmt; ${MAKE} etc-rmt

5
etc/gss-krb5/Makefile Normal file
View file

@ -0,0 +1,5 @@
FILES= mech qop
NO_OBJ=
FILESDIR= /etc/gss
.include <bsd.prog.mk>

10
etc/gss-krb5/mech Normal file
View file

@ -0,0 +1,10 @@
#
# Name OID Library name Kernel module
kerberosv5 1.2.840.113554.1.2.2 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
kerberosv5 1.2.840.113554.1.2.3 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
kerberosv5 1.3.6.1.5.5.2 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
kerberosv5 1.2.840.48018.1.2.2.1 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
kerberosv5 1.2.840.48018.1.2.2.2 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
kerberosv5 1.2.840.48018.1.2.2.4 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
kerberosv5 1.2.840.48018.1.2.2.5 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
kerberosv5 1.3.5.1.5.2 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5

1
etc/gss-krb5/qop Normal file
View file

@ -0,0 +1 @@
GSS_KRB5_CONF_C_QOP_DES3_KD 0x0200 kerberosv5