On Thu, 5 Mar 2015, Erik Cederstrand wrote:

> Hello list,
>
> Currently, installing the Python gssapi module (sudo pip install 
> python-gssapi) fails (on FreeBSD 10.1, at least) because a lot of #defines 
> are missing from /usr/include/gssapi/gssapi.h (installed from 
> /usr/src/include/gssapi/gssapi.h) compared to 
> /usr/src/crypto/heimdal/lib/gssapi/gssapi/gssapi.h, e.g.:
>
> #define GSS_C_AF_INET6      24
>
> Is there any reason these #defines are not present? Adding the missing ones 
> let the python-gssapi installation complete.

No value has been assigned to the symbol GSS_C_AF_INET6 in a
standards-track IETF document, so one might argue that its absence is the
correct behavior, as unfortunate as that may be.

Apparently it has been in the Heimdal tree since 1999, though (!).  Since
FreeBSD is basically stuck with the Heimdal implementation for POLA
reasons, it would probably be okay to synchronize the installed version
with Heimdal's version.

My understanding was that python-gssapi was intended to support both
Heimdal and MIT implementations, so given that MIT (correctly) does not
provide a GSS_C_AF_INET6 symbol, I am somewhat surprised that
python-gssapi cannot cope with its absence.

-Ben Kaduk
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"

Reply via email to