Name	libkadm5clnt_mit.so.12
Description	The shared libraries used by Kerberos 5
Version	1.21.3-r0
Package Base	krb5
Homepage	https://web.mit.edu/kerberos/www/
Maintainers	['Natanael Copa <ncopa@alpinelinux.org>']
Contributors	[]
Distro-repo	https://gitlab.alpinelinux.org/alpine/aports/-/tree/3.22-stable/main/krb5
Sources	[]
Dependencies	[]
Optional-Dependencies	[]
Build-Dependencies	[]
Provides	['so:libgssapi_krb5.so.2=2.2', 'so:libgssrpc.so.4=4.2', 'so:libk5crypto.so.3=3.1', 'so:libkadm5clnt_mit.so.12=12.0', 'so:libkadm5srv_mit.so.12=12.0', 'so:libkdb5.so.10=10.0', 'so:libkrad.so.0=0.0', 'so:libkrb5.so.3=3.3', 'so:libkrb5support.so.0=0.1']
Builddate	30-06-2024 21:34:00
Architecture	x86_64
Distro-Version	v3.22
Licenses	['MIT']
Hash	Q1CNK0vbrB93lZGAxqH2Ze0ORWpGM=

# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=krb5
pkgver=1.21.3
pkgrel=0
pkgdesc="The Kerberos network authentication system"
url="https://web.mit.edu/kerberos/www/"
arch="all"
license="MIT"
depends="krb5-conf"
depends_dev="e2fsprogs-dev libverto-dev"
makedepends="$depends_dev openldap-dev openssl-dev>3
	keyutils-dev bison flex perl"
options="suid !check" # https://gitlab.alpinelinux.org/alpine/aports/-/issues/13155
subpackages="$pkgname-dev $pkgname-doc $pkgname-server
	$pkgname-server-openrc:server_openrc $pkgname-server-ldap:ldap
	$pkgname-pkinit $pkgname-libs"

_maj_min=$pkgver
case $pkgver in
	*.*.*) _maj_min=${pkgver%.*} ;;
esac

source="https://web.mit.edu/kerberos/dist/krb5/$_maj_min/krb5-$pkgver.tar.gz

	krb5kadmind.initd
	krb5kdc.initd
	krb5kpropd.initd
	"
builddir="$srcdir/$pkgname-$pkgver/src"

# secfixes:
#   1.20.3-r0:
#     - CVE-2024-37370
#     - CVE-2024-37371
#   1.20.1-r0:
#     - CVE-2022-42898
#   1.19.3-r0:
#     - CVE-2021-37750
#   1.18.4-r0:
#     - CVE-2021-36222
#   1.18.3-r0:
#     - CVE-2020-28196
#   1.15.4-r0:
#     - CVE-2018-20217
#   1.15.3-r0:
#     - CVE-2017-15088
#     - CVE-2018-5709
#     - CVE-2018-5710

build() {
	./configure \
		CPPFLAGS="$CPPFLAGS -fPIC -I/usr/include/et" \
		WARN_CFLAGS= \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--localstatedir=/var/lib \
		--enable-shared \
		--disable-nls \
		--disable-static \
		--disable-rpath \
		--with-system-et \
		--with-system-ss \
		--with-system-verto \
		--without-tcl \
		--with-ldap
	make
}

check() {
	make check-unix
}

package() {
	make install DESTDIR="$pkgdir"
	mkdir -p "$pkgdir"/usr/share/doc/$pkgname
	mv "$pkgdir"/usr/share/examples "$pkgdir"/usr/share/doc/$pkgname/
}

server() {
	pkgdesc="The KDC and related programs for Kerberos 5"
	depends="libverto-libev"
	mkdir -p "$subpkgdir"/usr/share \
		"$subpkgdir"/usr/bin
	install -d "$subpkgdir"/var/lib/krb5kdc
	mv "$pkgdir"/usr/sbin "$subpkgdir"/usr/

	# used for testing server
	amove usr/bin/sclient
}

server_openrc() {
	pkgdesc="The KDC and related programs for Kerberos 5 (OpenRC init scripts)"
	install_if="$pkgname-server=$pkgver-r$pkgrel openrc"

	for i in $source; do
		case $i in
		*.initd) install -Dm755 "$srcdir"/$i \
			"$subpkgdir"/etc/init.d/${i%.initd};;
		esac
	done
}

ldap() {
	pkgdesc="The LDAP storage plugin for the Kerberos 5 KDC"
	install -Dm644 \
		-t "$subpkgdir"/usr/share/kerberos \
		"$builddir"/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif \
		"$builddir"/plugins/kdb/ldap/libkdb_ldap/kerberos.openldap.ldif
	amove usr/lib/krb5/plugins/kdb/kldap.so
	amove usr/lib/libkdb_ldap*
}

pkinit() {
	pkgdesc="The PKINIT module for Kerberos 5"
	mkdir -p "$subpkgdir"/usr/lib/krb5/plugins/preauth
	amove usr/lib/krb5/plugins/preauth/pkinit.so
}

libs() {
	pkgdesc="The shared libraries used by Kerberos 5"
	depends="krb5-conf"
	amove usr/lib
}

sha512sums="
87bc06607f4d95ff604169cea22180703a42d667af05f66f1569b8bd592670c42820b335e5c279e8b4f066d1e7da20f1948a1e4def7c5d295c170cbfc7f49c71  krb5-1.21.3.tar.gz
43b9885b7eb8d0d60920def688de482f2b1701288f9acb1bb21dc76b2395428ff304961959eb04ba5eafd0412bae35668d6d2c8223424b9337bc051eadf51682  krb5kadmind.initd
ede15f15bbbc9d0227235067abe15245bb9713aea260d397379c63275ce74aea0db6c91c15d599e40c6e89612d76f3a0f8fdd21cbafa3f30d426d4310d3e2cec  krb5kdc.initd
45be0d421efd41e9dd056125a750c90856586e990317456b68170d733b03cba9ecd18ab87603b20e49575e7839fb4a6d628255533f2631f9e8ddb7f3cc493a90  krb5kpropd.initd
"