Kerberos5 depends on gnupg but not gnupg2
Hello all, As I was reviewing and auditing my MacPorts dependency chain, I realized that the kerberos5 port depends on gnupg. However, gnupg seems to be a bit ancient and I would think deprecated by gnupg2. Would that be my imagination or is there a good reason to continue having kerberos5 depending on gnupg? Or is there a successor in MacPorts to kerberos5 which I may be unaware of? Much thanks, T.M.
Le 07-07-22 à 04:43, Tabitha McNerney a écrit :
Hello all,
As I was reviewing and auditing my MacPorts dependency chain, I realized that the kerberos5 port depends on gnupg. However, gnupg seems to be a bit ancient and I would think deprecated by gnupg2. Would that be my imagination or is there a good reason to continue having kerberos5 depending on gnupg? Or is there a successor in MacPorts to kerberos5 which I may be unaware of?
This port is 2 years-old. I created it only because kerberos was not available on Darwin OS but have not been using Darwin OS since darwin 8. feel free to modify it as you like. yves
On 7/22/07, Yves de Champlain <yves@macports.org> wrote:
Le 07-07-22 à 04:43, Tabitha McNerney a écrit :
Hello all,
As I was reviewing and auditing my MacPorts dependency chain, I realized that the kerberos5 port depends on gnupg. However, gnupg seems to be a bit ancient and I would think deprecated by gnupg2. Would that be my imagination or is there a good reason to continue having kerberos5 depending on gnupg? Or is there a successor in MacPorts to kerberos5 which I may be unaware of?
This port is 2 years-old.
I created it only because kerberos was not available on Darwin OS but have not been using Darwin OS since darwin 8.
feel free to modify it as you like.
Yves, great, I'll see if I can get the Portfile to use gnupg2 instead of gnupg. Is the kerberos5 MacPort not really used much by anyone now? I see that Apple now includes a Kerberos Key Distribution Center (KDC) in Mac OS X Server (I think starting with 10.3 - Panther) which might suffice for most people, although some of the MacPorts can be built with the "kerberos" variant which then indeed depends on the kerberos5 MacPort having been installed. I see there is also an implementation of Kerberos which is available in MacPorts as the heimdal port. Do most in the MacPorts community now have a preference for the heimdal port over the kerberos5 port? Thanks, T.M. yves
On Jul 22, 2007, at 3:56 PM, Tabitha McNerney wrote:
Yves, great, I'll see if I can get the Portfile to use gnupg2 instead of gnupg. Is the kerberos5 MacPort not really used much by anyone now? I see that Apple now includes a Kerberos Key Distribution Center (KDC) in Mac OS X Server (I think starting with 10.3 - Panther) which might suffice for most people, although some of the MacPorts can be built with the "kerberos" variant which then indeed depends on the kerberos5 MacPort having been installed. I see there is also an implementation of Kerberos which is available in MacPorts as the heimdal port. Do most in the MacPorts community now have a preference for the heimdal port over the kerberos5 port?
I've a preference for the Heimdal implementation. Compare Heimdal: http://www.securityfocus.com/cgi-bin/index.cgi? o=0&l=30&c=12&op=display_list&vendor=Heimdal&version=&title=&CVE= vs MIT Kerberos: http://www.securityfocus.com/cgi-bin/index.cgi? o=0&l=30&c=12&op=display_list&vendor=MIT&version=&title=Kerberos% 205&CVE= http://www.securityfocus.com/cgi-bin/index.cgi? o=0&l=30&c=12&op=display_list&vendor=MIT&version=&title=Kerberos% 204&CVE= As for gnupg vs gnupg2, both branches are still maintained; gnupg 1.x is -- for now -- probably a safer and more conservative choice. -landonf
participants (3)
-
Landon Fuller
-
Tabitha McNerney
-
Yves de Champlain