From nobody@FreeBSD.org  Fri Jun 28 10:49:34 2013
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
	by hub.freebsd.org (Postfix) with ESMTP id 55DC6239
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 28 Jun 2013 10:49:34 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from oldred.freebsd.org (oldred.freebsd.org [8.8.178.121])
	by mx1.freebsd.org (Postfix) with ESMTP id 4874E1111
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 28 Jun 2013 10:49:34 +0000 (UTC)
Received: from oldred.freebsd.org ([127.0.1.6])
	by oldred.freebsd.org (8.14.5/8.14.7) with ESMTP id r5SAnX5E058760
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 28 Jun 2013 10:49:33 GMT
	(envelope-from nobody@oldred.freebsd.org)
Received: (from nobody@localhost)
	by oldred.freebsd.org (8.14.5/8.14.5/Submit) id r5SAnXpm058754;
	Fri, 28 Jun 2013 10:49:33 GMT
	(envelope-from nobody)
Message-Id: <201306281049.r5SAnXpm058754@oldred.freebsd.org>
Date: Fri, 28 Jun 2013 10:49:33 GMT
From: Eugene Zheganin <eugene@zhegan.in>
To: freebsd-gnats-submit@FreeBSD.org
Subject: www/squid3x ports: some helpers are not built/installed
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         180052
>Category:       ports
>Synopsis:       www/squid3x ports: some helpers are not built/installed
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    tmseck
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jun 28 10:50:00 UTC 2013
>Closed-Date:    
>Last-Modified:  Fri Dec 13 09:20:00 UTC 2013
>Originator:     Eugene Zheganin
>Release:        10.x-CURRENT
>Organization:
Vivat-Trade LLC
>Environment:
FreeBSD taiga 10.0-CURRENT FreeBSD 10.0-CURRENT #1 r247150M: Mon Mar  4 17:57:07 YEKT 2013     emz@taiga:/usr/obj/usr/src/sys/TAIGADBG  amd64
>Description:
Selecting both

[x] AUTH_KERB
[x] AUTH_LDAP

should add the "kerberos_ldap_group" helper to the "--enable-external-acl-helpers=" configure option, and the port should build/install this helper.

This "a reference implementation that supports SASL/GSSAPI authentication
to an ldap server. It is mainly intended to connect to Active Directory or Openldap based ldap servers." Thi is a very popular helper nowadays, it has a killer feature - it supports nested LDAP groups up to given nesting level, which is crucial in Windows/AD environment, where most of groups are usually nested".


>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->freebsd-ports-bugs 
Responsible-Changed-By: remko 
Responsible-Changed-When: Fri Jun 28 11:47:10 UTC 2013 
Responsible-Changed-Why:  
reassign to ports team 

http://www.freebsd.org/cgi/query-pr.cgi?pr=180052 
Responsible-Changed-From-To: freebsd-ports-bugs->tmseck 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Fri Jun 28 22:27:25 UTC 2013 
Responsible-Changed-Why:  
Over to maintainer. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=180052 

From: Pavel Timofeev <timp87@gmail.com>
To: bug-followup@FreeBSD.org, eugene@zhegan.in, tmseck@FreeBSD.org
Cc:  
Subject: Re: ports/180052: www/squid3x ports: some helpers are not built/installed
Date: Fri, 13 Dec 2013 13:02:40 +0400

 I was really surprised that kerberos_ldap_group has no ability to be
 installed. It's extremely useful!
 Is there any plans to include it in port's options?

From: Pavel Timofeev <timp87@gmail.com>
To: "bug-followup@FreeBSD.org" <bug-followup@freebsd.org>, eugene@zhegan.in, tmseck@freebsd.org
Cc:  
Subject: Re: ports/180052: www/squid3x ports: some helpers are not built/installed
Date: Fri, 13 Dec 2013 13:17:02 +0400

 Danm, first think, then write. =(
 Sorry for that noise!
 
 Eugene, see the Makefile (www/squid33):
 ...
 # the kerberos_ldap_group external helper depends on LDAP and SASL:
 .if ${PORT_OPTIONS:MAUTH_LDAP} && ${PORT_OPTIONS:MAUTH_SASL}
 external_acl+=  kerberos_ldap_group
 libexec+=       ext_kerberos_ldap_group_acl \
                 cert_tool
 ....
 
 So we have to choose also the AUTH_SASL option for kerberos_ldap_group
 installation.
 I just tried this way and kerberos_ldap_group appeared in
 /usr/local/libexec/squid/.
 IMO, this PR (ports/180052) can be closed. And ports/173490 too.
 
 Sorry!
 
 2013/12/13 Pavel Timofeev <timp87@gmail.com>:
 > I was really surprised that kerberos_ldap_group has no ability to be
 > installed. It's extremely useful!
 > Is there any plans to include it in port's options?
>Unformatted:
