From stijn@pcwin002.win.tue.nl  Thu Mar 27 07:29:35 2003
Return-Path: <stijn@pcwin002.win.tue.nl>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5E2A137B404
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 27 Mar 2003 07:29:35 -0800 (PST)
Received: from pcwin002.win.tue.nl (pcwin002.win.tue.nl [131.155.71.72])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6D1E343FBF
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 27 Mar 2003 07:29:34 -0800 (PST)
	(envelope-from stijn@pcwin002.win.tue.nl)
Received: from pcwin002.win.tue.nl (orb_rules@localhost [127.0.0.1])
	by pcwin002.win.tue.nl (8.12.8/8.12.8) with ESMTP id h2RFTISZ029747
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 27 Mar 2003 16:29:18 +0100 (CET)
	(envelope-from stijn@pcwin002.win.tue.nl)
Received: (from stijn@localhost)
	by pcwin002.win.tue.nl (8.12.8/8.12.8/Submit) id h2RFTIx1029746;
	Thu, 27 Mar 2003 16:29:18 +0100 (CET)
Message-Id: <200303271529.h2RFTIx1029746@pcwin002.win.tue.nl>
Date: Thu, 27 Mar 2003 16:29:18 +0100 (CET)
From: Stijn Hoop <stijn@win.tue.nl>
Reply-To: Stijn Hoop <stijn@win.tue.nl>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: make release fails with NO_OPENSSH and ! NOKERBEROS
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         50349
>Category:       docs
>Synopsis:       make release fails with NO_OPENSSH and ! NOKERBEROS
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-doc
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Mar 27 07:30:09 PST 2003
>Closed-Date:    Fri Oct 03 14:48:56 PDT 2003
>Last-Modified:  Fri Oct 03 14:48:56 PDT 2003
>Originator:     Stijn Hoop
>Release:        FreeBSD 4.8-RC i386
>Organization:
>Environment:

System: FreeBSD 4.8-RC #0: Tue Mar 4 10:10:51 CET 2003

>Description:

make release will fail during the release.3 step if the world built in the
chroot area was built with NO_OPENSSH / NO_OPENSSL flags, and the
NOKERBEROS flag was not passed to make release. This flag is not documented
in release(7). The attached patch documents it.

As I don't know what other flags affect failure, I just documented the
fact that there is a flag to avoid building the kerberos bits. Maybe
someone more in the know can add something to text to indicate kerberos's
dependancy on either OpenSSH or OpenSSL.

>How-To-Repeat:

# grep NO_OPEN /release/etc/make.conf
NO_OPENSSH=	yes
NO_OPENSSL=	yes
# cd /usr/src/release && make release CHROOTDIR=/release \
	RELEASETAG=RELENG_4 BUILDNAME=RELENG_4-MYRELEASE CVSROOT=${CVSROOT}

And wait for an error about a missing openssl/des.h header.

>Fix:

--- release.7.orig	Thu Mar 27 16:03:14 2003
+++ release.7	Thu Mar 27 16:02:48 2003
@@ -257,6 +257,11 @@
 distribution will still be created with the minimal documentation set
 provided in
 .Pa src/share/doc .
+.It Va NOKERBEROS
+If set to
+.Dq Li YES
+then the Kerberos IV and Kerberos 5 (Heimdal) components will be
+omitted from the release.
 .It Va NOPORTS
 If set to
 .Dq Li YES
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: ru 
State-Changed-When: Fri Oct 3 14:47:38 PDT 2003 
State-Changed-Why:  
Sorry, but we don't currently support building releases 
without the crypto dists. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=50349 
>Unformatted:
