freebsd-ports/security/pidentd/Makefile

# New ports collection makefile for:	pidentd
# Date created:		19 Oct 1994
# Whom:			torstenb
#
# $FreeBSD$
#

PORTNAME=	pidentd
PORTVERSION=	2.8.5
CATEGORIES=	security ipv6
MASTER_SITES=	ftp://ftp.lysator.liu.se/pub/ident/servers/ \
		ftp://ftp.fu-berlin.de/unix/security/ident/servers/

PATCH_SITES=	http://www.imasy.or.jp/~ume/ipv6/
PATCHFILES=	pidentd-2.8.5-ipv6-1.5.diff.gz
PATCH_DIST_STRIP=	-p2

MAINTAINER=	ports@FreeBSD.org
COMMENT=	An RFC1413 identification server

ALL_TARGET=	freebsd
MAKE_ENV=	REALPREFIX=${PREFIX}
MAN8=		identd.8 idecrypt.8

.include <bsd.port.pre.mk>

.if ${OSVERSION} >= 400014
ADD_GDEFS+=	-DINET6 -D__ss_family=ss_family -D__ss_len=ss_len
.endif

# Uncomment to activate the use of verifiable "cookies".  The idea is to be
# able to detect fake "logs" intended to get your innocent users in trouble.
# Naturally, since it uses libcrypto, you must have OpenSSL installed.
#WITH_DES=	yes

.if defined(WITH_DES)
.include "${PORTSDIR}/security/openssl/bsd.openssl.mk"
ADD_GDEFS+=	-DINCLUDE_CRYPT -DOPENSSL_DES_LIBDES_COMPATIBILITY \
		-I${OPENSSLINC} -I${OPENSSLINC}/openssl
ADD_GLIBS=	-L${OPENSSLLIB} -lcrypto
.endif
.if defined(WITH_DES) || ${OSVERSION} >= 400014
MAKE_ENV+=	ADD_GDEFS="${ADD_GDEFS}" ADD_GLIBS="${ADD_GLIBS}"
.endif

.include <bsd.port.post.mk>
Reviewed by: Submitted by: Obtained from: pidentd - a RFC 1413 identification server 1994-10-23 01:27:56 +00:00			`# New ports collection makefile for: pidentd`
			`# Date created: 19 Oct 1994`
			`# Whom: torstenb`
			`#`
$Id$ -> $FreeBSD$ 1999-08-31 01:53:22 +00:00			`# $FreeBSD$`
Reviewed by: Submitted by: Obtained from: pidentd - a RFC 1413 identification server 1994-10-23 01:27:56 +00:00			`#`

Update with the new PORTNAME/PORTVERSION variables 2000-04-09 18:34:06 +00:00			`PORTNAME= pidentd`
Style: ports/security 2001-02-05 16:00:18 +00:00			`PORTVERSION= 2.8.5`
Remove redundant/inappropriate CATEGORIES. People need to start reading the Porter's Handbook. :-) 2000-06-02 03:18:54 +00:00			`CATEGORIES= security ipv6`
Update of net Makefiles! Am I done? :) 1995-04-15 05:42:12 +00:00			`MASTER_SITES= ftp://ftp.lysator.liu.se/pub/ident/servers/ \`
			`ftp://ftp.fu-berlin.de/unix/security/ident/servers/`
Reviewed by: Submitted by: Obtained from: pidentd - a RFC 1413 identification server 1994-10-23 01:27:56 +00:00
Oops, local changes were added to the repository in the last commit. Unfortunately, since the newer version (3.0.11) has a lot of FreeBSD unfriendly code, we can't upgrade at this time. :-( Submitted by: jim 2000-06-02 22:06:20 +00:00			`PATCH_SITES= http://www.imasy.or.jp/~ume/ipv6/`
			`PATCHFILES= pidentd-2.8.5-ipv6-1.5.diff.gz`
			`PATCH_DIST_STRIP= -p2`
Support IPv6. Submitted by: Hajimu UMEMOTO <ume@mahoroba.org> Approved by: torstenb 2000-02-14 15:12:37 +00:00
Remove jseger and torstenb from maintainership of their ports, they have been inactive for too long Approved by: will 2001-09-17 17:40:31 +00:00			`MAINTAINER= ports@FreeBSD.org`
De-pkg-comment. 2003-02-20 19:00:52 +00:00			`COMMENT= An RFC1413 identification server`
- upgrade to 2.5.1 - add myself as MAINTAINER - compress manpage 1995-05-06 00:49:36 +00:00
Correct whitespace introduced during PORTNAME conversion and portlint 2000-04-21 08:19:33 +00:00			`ALL_TARGET= freebsd`
Update from 2.7b3 -> 2.7b4, the author included our patch. .. however, he also changed the top level Makefile to use $PREFIX for something completely different (and incompatable) to what we use it for. 1996-08-16 18:31:04 +00:00			`MAKE_ENV= REALPREFIX=${PREFIX}`
CAT_E_GORIES+= -> CAT_E_GORIES= (everybody's a critic :-)) Converted to new MAN[1-9] Converted to MASTER_SITES= ${MASTER_SITE_PERL_CPAN} where applicable 1996-11-17 07:58:10 +00:00			`MAN8= identd.8 idecrypt.8`
Update from 2.7b3 -> 2.7b4, the author included our patch. .. however, he also changed the top level Makefile to use $PREFIX for something completely different (and incompatable) to what we use it for. 1996-08-16 18:31:04 +00:00
Support IPv6. Submitted by: Hajimu UMEMOTO <ume@mahoroba.org> Approved by: torstenb 2000-02-14 15:12:37 +00:00			`.include <bsd.port.pre.mk>`

			`.if ${OSVERSION} >= 400014`
			`ADD_GDEFS+= -DINET6 -D__ss_family=ss_family -D__ss_len=ss_len`
			`.endif`

Add a compile option so that identd will send encrypted cookies out rather than usernames. This makes it much more difficult for somebody to "frame" one of your users. ie: instead of people getting: connect from peter@spinner.DIALix.COM in their syslogs, they will get this instead: connect from [W+rNvCy5FuPV4xEj8thdXIlfD9qNIbzB]@spinner.DIALix.COM The remote site will have to send it to you to decode it. When you are given one of these cookies, you can know for sure it is not faked, and you don't have to trust the word of the remote sysadmin when arranging your local lame hacker-type user to meet with an unfortunate incident :-). This feature is documented in the man pages. Also, fix an apparent bug in the code that deals with this, but it might be a feature of the version of libdes we have on FreeBSD. Requested by: markm (a fair while ago) 1996-11-05 18:23:42 +00:00			`# Uncomment to activate the use of verifiable "cookies". The idea is to be`
			`# able to detect fake "logs" intended to get your innocent users in trouble.`
Allow to use the OpenSSL-port. Submitted by: Marius Strobl <marius@alchemy.franken.de> 2003-05-21 15:29:51 +00:00			`# Naturally, since it uses libcrypto, you must have OpenSSL installed.`
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports 2000-04-17 00:19:02 +00:00			`#WITH_DES= yes`
Add a compile option so that identd will send encrypted cookies out rather than usernames. This makes it much more difficult for somebody to "frame" one of your users. ie: instead of people getting: connect from peter@spinner.DIALix.COM in their syslogs, they will get this instead: connect from [W+rNvCy5FuPV4xEj8thdXIlfD9qNIbzB]@spinner.DIALix.COM The remote site will have to send it to you to decode it. When you are given one of these cookies, you can know for sure it is not faked, and you don't have to trust the word of the remote sysadmin when arranging your local lame hacker-type user to meet with an unfortunate incident :-). This feature is documented in the man pages. Also, fix an apparent bug in the code that deals with this, but it might be a feature of the version of libdes we have on FreeBSD. Requested by: markm (a fair while ago) 1996-11-05 18:23:42 +00:00
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports 2000-04-17 00:19:02 +00:00			`.if defined(WITH_DES)`
Allow to use the OpenSSL-port. Submitted by: Marius Strobl <marius@alchemy.franken.de> 2003-05-21 15:29:51 +00:00			`.include "${PORTSDIR}/security/openssl/bsd.openssl.mk"`
Use libcrypto, not libdes. 2003-05-07 12:30:08 +00:00			`ADD_GDEFS+= -DINCLUDE_CRYPT -DOPENSSL_DES_LIBDES_COMPATIBILITY \`
Allow to use the OpenSSL-port. Submitted by: Marius Strobl <marius@alchemy.franken.de> 2003-05-21 15:29:51 +00:00			`-I${OPENSSLINC} -I${OPENSSLINC}/openssl`
			`ADD_GLIBS= -L${OPENSSLLIB} -lcrypto`
Support IPv6. Submitted by: Hajimu UMEMOTO <ume@mahoroba.org> Approved by: torstenb 2000-02-14 15:12:37 +00:00			`.endif`
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports 2000-04-17 00:19:02 +00:00			`.if defined(WITH_DES) \|\| ${OSVERSION} >= 400014`
Add a compile option so that identd will send encrypted cookies out rather than usernames. This makes it much more difficult for somebody to "frame" one of your users. ie: instead of people getting: connect from peter@spinner.DIALix.COM in their syslogs, they will get this instead: connect from [W+rNvCy5FuPV4xEj8thdXIlfD9qNIbzB]@spinner.DIALix.COM The remote site will have to send it to you to decode it. When you are given one of these cookies, you can know for sure it is not faked, and you don't have to trust the word of the remote sysadmin when arranging your local lame hacker-type user to meet with an unfortunate incident :-). This feature is documented in the man pages. Also, fix an apparent bug in the code that deals with this, but it might be a feature of the version of libdes we have on FreeBSD. Requested by: markm (a fair while ago) 1996-11-05 18:23:42 +00:00			`MAKE_ENV+= ADD_GDEFS="${ADD_GDEFS}" ADD_GLIBS="${ADD_GLIBS}"`
			`.endif`

Support IPv6. Submitted by: Hajimu UMEMOTO <ume@mahoroba.org> Approved by: torstenb 2000-02-14 15:12:37 +00:00			`.include <bsd.port.post.mk>`