Changeset 606b1a5 for postlfs


Ignore:
Timestamp:
12/08/2010 03:07:37 AM (13 years ago)
Author:
Randy McMurchy <randy@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
3531524
Parents:
7fcffad
Message:

Updated to Heimdal-1.4

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@8734 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:
1 edited

Legend:

Unmodified
Added
Removed

  • postlfs/security/heimdal.xml

    r7fcffad r606b1a5  
    77  <!ENTITY heimdal-download-http "http://www.h5l.org/dist/src/heimdal-&heimdal-version;.tar.gz">
    88  <!ENTITY heimdal-download-ftp  "ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-&heimdal-version;.tar.gz">
    9   <!ENTITY heimdal-md5sum        "4ce17deae040a3519e542f48fd901f21">
    10   <!ENTITY heimdal-size          "5.6 MB">
    11   <!ENTITY heimdal-buildsize     "200 MB">
    12   <!ENTITY heimdal-time          "4.0 SBU (additional 2.5 SBU to run the test suite)">
     9  <!ENTITY heimdal-md5sum        "31d08bbf47a77827fe97ef3f52b4c9c4">
     10  <!ENTITY heimdal-size          "6.0 MB">
     11  <!ENTITY heimdal-buildsize     "205 MB">
     12  <!ENTITY heimdal-time          "3.9 SBU (additional 2.3 SBU to run the test suite)">
    1313]>
    1414
    … …  
    2929  <sect2 role="package">
    3030    <title>Introduction to Heimdal</title>
    31 
    32     <warning>
    33       <para>If you are using an LFS-&lfs-version; based system, building
    34       <application>Heimdal</application> will overwrite <filename
    35       class='libraryfile'>/usr/lib/libcom_err.so</filename> and install an
    36       additional <filename class='libraryfile'>libcom_err</filename> library in
    37       <filename class='directory'>/usr/lib</filename>. This will directly
    38       conflict with the <filename class='libraryfile'>/lib/libcom_err</filename>
    39       library installed by the <application>E2fsprogs</application> package in LFS.
    40       Both upstream maintainers have taken steps to eliminate this condition.
    41       However, the combination that currently exists causes this problem.</para>
    42 
    43       <para>There is a fix for the problem, but it will require you to recompile
    44       the LFS-&lfs-version; <application>E2fsprogs</application> package to a
    45       newer version than the &lfs-e2fsprogs-version; version used in that book.
    46       Any version equal to or greater than the one used in the
    47       <ulink url="&lfs-dev;">LFS-Development</ulink> book will do. After
    48       recompiling <application>E2fsprogs</application>, you are now ready to
    49       install <application>Heimdal</application>.</para>
    50     </warning>
    5131
    5232    <para><application>Heimdal</application> is a free implementation
    … …  
    6444    all the files and commands to rename each of them.</para>
    6545
    66     <!-- FIXME -->
    67     <para>If you intend to link this application to <xref linkend="openssl"/>
    68     you will need to use the heimdal-1.4 series.</para>
     46    <para>&lfssvn_checked;20101029&lfssvn_checked2;</para>
    6947
    7048    <bridgehead renderas="sect3">Package Information</bridgehead>
    … …  
    9472      <listitem>
    9573        <para>Required Patch: <ulink
    96         url="&patch-root;/heimdal-&heimdal-version;-blfs_docs-1.patch"/></para>
     74        url="&patch-root;/heimdal-&heimdal-version;-otp_fixes-1.patch"/></para>
    9775      </listitem>
    9876      <!-- <listitem>
    … …  
    10583
    10684    <bridgehead renderas="sect4">Required to Build the Server-Side Tools</bridgehead>
    107     <para role="required">
    108     <xref linkend="db"/> (recommended) or GDBM (GDBM is installed in LFS)</para>
    109     <!-- <xref linkend="db"/> is recommended (installed in LFS)
    110     or <xref linkend="gdbm"/></para> -->
     85    <para role="required"><xref linkend="db"/></para>
    11186
    11287    <bridgehead renderas="sect4">Recommended</bridgehead>
    … …  
    11489
    11590    <bridgehead renderas="sect4">Optional</bridgehead>
    116     <para role="optional"><xref linkend="linux-pam"/>,
    117     <xref linkend="openldap"/>,
    118     <xref linkend="x-window-system"/>, and
    119     <ulink url="http://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/">libcap2</ulink></para>
     91    <para role="optional"><xref linkend="openldap"/>,
     92    <xref linkend="sqlite"/>,
     93    <xref linkend="x-window-system"/>,
     94    <ulink url="http://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/">libcap2</ulink>, and
     95    <ulink url="http://people.redhat.com/sgrubb/libcap-ng/">libcap-ng</ulink> (with this
     96    <ulink url="&patch-root;/libcap-ng-0.6.4-2.6.36_kernel_fix-1.patch">patch</ulink>
     97    if the Linux kernel version is &gt;=2.6.36)</para>
    12098
    12199    <note>
    … …  
    143121    commands:</para>
    144122
    145 <screen><userinput>patch -Np1 -i ../heimdal-&heimdal-version;-blfs_docs-1.patch &amp;&amp;
    146 sed -i.bak 's/struct krb5_cccol_cursor/&amp;_data/' \
    147     lib/krb5/{krb5.h,cache.c}
     123<screen><userinput>patch -Np1 -i ../heimdal-&heimdal-version;-otp_fixes-1.patch &amp;&amp;
     124sed -i 's|/var/heimdal|/var/lib/heimdal|' \
     125       `grep -lr "/var/heimdal" doc kadmin kdc lib` &amp;&amp;
    148126
    149127./configure --prefix=/usr \
    … …  
    155133            --with-readline=/usr \
    156134            --enable-kcm &amp;&amp;
    157 make</userinput></screen>
     135make &amp;&amp;
     136
     137install -v -m755 -d doc/html                                    &amp;&amp;
     138make -C doc html                                                &amp;&amp;
     139mv -v doc/heimdal.html doc/html/heimdal                         &amp;&amp;
     140mv -v doc/hx509.html   doc/html/hx509                           &amp;&amp;
     141makeinfo --html --no-split -o doc/heimdal.html doc/heimdal.texi &amp;&amp;
     142makeinfo --html --no-split -o doc/hx509.html   doc/hx509.texi   &amp;&amp;
     143makeinfo --plaintext       -o doc/heimdal.txt  doc/heimdal.texi &amp;&amp;
     144makeinfo --plaintext       -o doc/hx509.txt    doc/hx509.texi</userinput></screen>
    158145
    159146    <para>If you have <xref linkend="tetex"/> installed and wish to create
    160     alternate forms of the documentation, change into the
     147    PDF and Postscript forms of the documentation, change into the
    161148    <filename class='directory'>doc</filename> directory and issue any or all
    162     of the following commands (the <command>makeinfo</command> commands do not
    163     require a <application>teTex</application> installation:</para>
    164 
    165 <screen><userinput>pushd doc                                        &amp;&amp;
    166 
    167 make html                                        &amp;&amp;
    168 
    169 texi2pdf                            heimdal.texi &amp;&amp;
    170 texi2dvi                            heimdal.texi &amp;&amp;
    171 dvips                -o heimdal.ps  heimdal.dvi  &amp;&amp;
    172 makeinfo --plaintext -o heimdal.txt heimdal.texi &amp;&amp;
    173 
    174 texi2pdf                            hx509.texi   &amp;&amp;
    175 texi2dvi                            hx509.texi   &amp;&amp;
    176 dvips                -o hx509.ps    hx509.dvi    &amp;&amp;
    177 makeinfo --plaintext -o hx509.txt   hx509.texi   &amp;&amp;
    178 
     149    of the following commands:</para>
     150
     151<screen><userinput>pushd doc                        &amp;&amp;
     152texi2pdf            heimdal.texi &amp;&amp;
     153texi2dvi            heimdal.texi &amp;&amp;
     154dvips -o heimdal.ps heimdal.dvi  &amp;&amp;
     155texi2pdf            hx509.texi   &amp;&amp;
     156texi2dvi            hx509.texi   &amp;&amp;
     157dvips -o hx509.ps   hx509.dvi    &amp;&amp;
    179158popd</userinput></screen>
    180159
    181160    <para>To test the results, issue: <command>make -k check</command>. The
    182     <command>check-ipropd</command> test is known to fail but all others should
     161    <command>check-iprop</command> test is known to fail but all others should
    183162    pass.</para>
    184163
    185164    <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
    186165
    187 <!-- <screen role="root"><?dbfo keep-together="auto"?><userinput>mv -v /usr/include/ss/ss.h   /usr/include/ss/ss.h.e2fsprogs &amp;&amp;
    188 mv -v /usr/lib/libss.a       /usr/lib/libss.a.e2fsprogs &amp;&amp;
    189 mv -v /usr/lib/libss.so      /usr/lib/libss.so.e2fsprogs &amp;&amp;
    190 mv -v /usr/bin/mk_cmds       /usr/bin/mk_cmds.e2fsprogs &amp;&amp;
    191 -->
    192 
    193166<screen role="root"><userinput>make install &amp;&amp;
    194167
    195 install -v -m755 -d /usr/share/doc/heimdal-&heimdal-version; &amp;&amp;
    196 install -v -m644    doc/{init-creds,layman.asc} \
    197                     /usr/share/doc/heimdal-&heimdal-version; &amp;&amp;
    198 
    199 ln -sfv         mech.5 /usr/share/man/man5/qop.5  &amp;&amp;
    200 ln -sfv ../man5/mech.5 /usr/share/man/cat5/qop.5  &amp;&amp;
    201 ln -sfv ../man5/mech.5 /usr/share/man/cat5        &amp;&amp;
     168install -v -m755 -d /usr/share/doc/heimdal-&heimdal-version;        &amp;&amp;
     169install -v -m644    doc/{heimdal,hx509}.{html,txt} \
     170                    doc/{init-creds,layman.asc}    \
     171                    /usr/share/doc/heimdal-&heimdal-version;        &amp;&amp;
     172cp      -v -R       doc/html \
     173                    destdir/usr/share/doc/heimdal-&heimdal-version; &amp;&amp;
    202174
    203175mv -v /bin/login          /bin/login.SHADOW &amp;&amp;
    … …  
    207179
    208180for LINK in   \
    209     lib{otp,kafs,krb5,hx509,asn1,roken,crypto,heimsqlite,wind}; do
     181    lib{otp,kafs,krb5,hx509,sqlite3,asn1,roken,crypto,wind}; do
    210182        mv -v     /usr/lib/${LINK}.so.* /lib &amp;&amp;
    211183        ln -v -sf ../../lib/$(readlink  /usr/lib/${LINK}.so) \
    … …  
    221193ldconfig</userinput></screen>
    222194
    223 <!-- mv -v /usr/include/ss/ss.h            /usr/include/ss/ss.h.heimdal &amp;&amp;
    224 mv -v /usr/include/ss/ss.h.e2fsprogs  /usr/include/ss/ss.h &amp;&amp;
    225 mv -v /usr/lib/libss.a                /usr/lib/libss.a.heimdal &amp;&amp;
    226 mv -v /usr/lib/libss.a.e2fsprogs      /usr/lib/libss.a &amp;&amp;
    227 mv -v /usr/lib/libss.so               /usr/lib/libss.so.heimdal &amp;&amp;
    228 mv -v /usr/lib/libss.so.e2fsprogs     /usr/lib/libss.so &amp;&amp;
    229 mv -v /usr/lib/libss.la               /usr/lib/libss.la.heimdal &amp;&amp;
    230 mv -v /usr/bin/mk_cmds                /usr/bin/mk_cmds.heimdal &amp;&amp;
    231 mv -v /usr/bin/mk_cmds.e2fsprogs      /usr/bin/mk_cmds &amp;&amp; -->
    232 
    233     <para>If you built any of the alternate forms of documentation, install it
     195    <para>If you built any of the additional forms of documentation, install it
    234196    using the following commands as the
    235197    <systemitem class="username">root</systemitem> user:</para>
    236198
    237 <screen role="root"><userinput>install -v -m644 doc/{heimdal,hx509}.{dvi,ps,pdf,html,txt} \
     199<screen role="root"><userinput>install -v -m644 doc/{heimdal,hx509}.{dvi,ps,pdf} \
    238200                 /usr/share/doc/heimdal-&heimdal-version;</userinput></screen>
    239201
    … …  
    246208    -e 's|/var/heimdal|/var/lib/heimdal|' \
    247209        lib/kadm5/check-cracklib.pl \
    248     > /bin/krb5-check-cracklib.pl &amp;&amp;
     210     > /bin/krb5-check-cracklib.pl &amp;&amp;
    249211
    250212chmod -v 755 /bin/krb5-check-cracklib.pl</userinput></screen>
    … …  
    255217    <title>Command Explanations</title>
    256218
    257     <!-- <para><command>mv -v /usr/include/...</command>,
    258     <command>mv -v /usr/lib/libss.* ...</command> and
    259     <command>mv -v /usr/bin/mk_cmds ...</command>: The
    260     <application>Heimdal</application> installation will overwrite an
    261     interface header, static library, library symbolic link and a
    262     shell script from the
    263     <application>E2fsprogs</application> package. These commands rename the
    264     original files before the installation, and then restore them (after
    265     renaming the new <application>Heimdal</application> files) after the
    266     installation.</para> -->
    267 
    268     <para><command>sed -i.bak ... lib/krb5/{krb5.h,cache.c}</command>: This
    269     command is an upstream fix for a multiple declaration.</para>
     219    <para><command>sed -i ... `grep -lr "/var/heimdal"
     220    doc kadmin kdc lib`</command>: This command is used to change the
     221    hard-coded references in the documentation files from
     222    <filename class='directory'>/var/heimdal</filename> to the FHS compliant
     223    <filename class='directory'>/var/lib/heimdal</filename> directory
     224    name.</para>
    270225
    271226    <para><parameter>--libexecdir=/usr/sbin</parameter>: This switch causes
    … …  
    302257    the Kerberos Credentials Manager.</para>
    303258
    304     <para><command>ln -sfv .../mech.5 /usr/share/man/...</command>: These
    305     commands are used to fix some broken symbolic links.</para>
     259    <para><option>--with-sqlite3=/usr</option>: This parameter must be
     260    used so that the <command>configure</command> script properly locates the
     261    installed <application>Sqlite3</application> package.</para>
     262
     263    <para><option>--with-openldap=/usr</option> and
     264    <option>--enable-hdb-openldap-module</option>: These parameters must be
     265    used so that the <command>configure</command> script properly locates the
     266    installed <application>OpenLDAP</application> package in order to build the
     267    module allowing an LDAP backend database.</para>
    306268
    307269    <para><command>mv ... ...SHADOW</command>, <command>mv ... /bin</command>
    … …  
    453415<screen role="root"><userinput>ext host/<replaceable>&lt;hostname.example.com&gt;</replaceable></userinput></screen>
    454416
    455         <para>This should have created two files in
    456         <filename class="directory">/etc/heimdal</filename>:
    457         <filename>krb5.keytab</filename> (Kerberos 5) and
    458         <filename>srvtab</filename> (Kerberos 4). Both files should have 600
    459         (root rw only) permissions. Keeping the keytab files from public access
     417        <para>This should have created a file in
     418        <filename class="directory">/etc/heimdal</filename> named
     419        <filename>krb5.keytab</filename>. This file should have 600
     420        (root rw only) permissions. Keeping the keytab file from public access
    460421        is crucial to the overall security of the Kerberos installation.</para>
    461422
    … …  
    516477        <application>Perl</application> module. Download it from the CPAN
    517478        site. The URL at the time of this writing is <ulink
    518         url="http://cpan.org/authors/id/D/DA/DANIEL/Crypt-Cracklib-1.2.tar.gz"/>.
     479        url="http://www.cpan.org/authors/id/D/DA/DANIEL/Crypt-Cracklib-1.5.tar.gz"/>.
    519480        After unpacking the tarball and changing into the newly created
    520481        directory, issue the following command to add the BLFS
    … …  
    526487        <para>Then use the standard <command>perl Makefile.PL</command>;
    527488        <command>make</command>; <command>make test</command>;
    528         <command>make install</command> commands. Note that one test fails
    529         due to an unknown reason.</para>
     489        <command>make install</command> commands.</para>
    530490
    531491        <para id="heimdal-init">Install the
    … …  
    597557        telnet, telnetd, tenletxr, verify_krb5_conf and xnlock</seg>
    598558
    599         <seg>hdb_ldap.{so,a}, libasn1.{so,a}, libeditline.{so,a},
     559        <seg>hdb_ldap.{so,a}, libasn1.{so,a},
    600560        libgssapi.{so,a}, libhdb.{so,a}, libheimntlm.{so,a}, libhx509.{so,a},
    601561        libkadm5clnt.{so,a}, libkadm5srv.{so,a}, libkafs.{so,a},
    602562        libkdc.{so,a}, libkrb5.{so,a}, libotp.{so,a}, libroken.{so,a},
    603         libsl.{so,a}, libss-krb5.{so,a} and windc.{so,a}</seg>
     563        libsl.{so,a}, libss-krb5.{so,a} and wind.{so,a}</seg>
    604564
    605565        <seg>/etc/heimdal, /usr/include/gssapi, /usr/include/kadm5,
    606         /usr/include/krb5, /usr/include/roken, /usr/include/ss,
     566        /usr/include/krb5, /usr/include/roken,
    607567        /usr/share/doc/heimdal-&heimdal-version; and /var/lib/heimdal</seg>
    608568      </seglistitem>
    … …  
    10831043          <indexterm zone="heimdal libasn1">
    10841044            <primary sortas="c-libasn1">libasn1.{so,a}</primary>
    1085           </indexterm>
    1086         </listitem>
    1087       </varlistentry>
    1088 
    1089       <varlistentry id="libeditline">
    1090         <term><filename class='libraryfile'>libeditline.a</filename></term>
    1091         <listitem>
    1092           <para>is a command-line editing library with history.</para>
    1093           <indexterm zone="heimdal libeditline">
    1094             <primary sortas="c-libeditline">libeditline.a</primary>
    10951045          </indexterm>
    10961046        </listitem>
Note: See TracChangeset for help on using the changeset viewer.