svn commit: r45306 - head/en_US.ISO8859-1/books/porters-handbook

Author: bjk
Date: Wed Jul 16 02:47:17 2014
New Revision: 45306
URL: http://svnweb.freebsd.org/changeset/doc/45306

Log:
  Attempt to dispel rumors that GSSAPI and Kerberos are interchangable.
  
  The Generic Security Services Application Programming Interface is an
  abstract interface for creating security contexts between two peers to
  allow for secure passing of messages and other operations, which allows
  for the use of many different underlying security mechanisms.  Kerberos
  5 is a common such security mechanism, but is far from the only mechanism
  in use.  Many krb5 implementations provide a GSSAPI library that provides
  the krb5 mechanism(s); in some cases, those libraries can also support
  user-provided GSSAPI mechanisms as well.  The only implementations of the
  GSSAPI which are currently supported by the USES=gssapi support in the
  Ports Collection are such libraries provided by krb5 implementations.
  
  Approved by:	hrs (mentor)

Modified:
  head/en_US.ISO8859-1/books/porters-handbook/uses.xml

Modified: head/en_US.ISO8859-1/books/porters-handbook/uses.xml
==============================================================================
--- head/en_US.ISO8859-1/books/porters-handbook/uses.xml	Tue Jul 15 23:10:35 2014	(r45305)
+++ head/en_US.ISO8859-1/books/porters-handbook/uses.xml	Wed Jul 16 02:47:17 2014	(r45306)
@@ -275,10 +275,12 @@
     <literal>flags</literal>, <literal>bootstrap</literal></entry>
 
   <entry>
-    <para>Handle dependency on <application>Kerberos</application>
-      ports.  By default, or set to <literal>base</literal>,
-      <application>Kerberos</application> from the base system is
-      used.  Set to <literal>heimdal</literal> to use <package
+    <para>Handle dependencies needed by consumers of the
+      <acronym>GSS-API</acronym>.  Only libraries that provide the
+      <application>Kerberos</application> mechanism are available.
+      By default, or set to <literal>base</literal>,
+      the <acronym>GSS-API</acronym> library from the base system is used.
+      Can also be set to <literal>heimdal</literal> to use <package
 	role="port">security/heimdal</package>, or
       <literal>mit</literal> to use <package
 	role="port">security/krb5</package>.</para>
@@ -287,7 +289,8 @@
       installation is not in <varname>LOCALBASE</varname>, set
       <varname>HEIMDAL_HOME</varname> (for <literal>heimdal</literal>)
       or <varname>KRB5_HOME</varname> (for <literal>krb5</literal>) to
-      the base <application>Kerberos</application> directory.</para>
+      the location of the <application>Kerberos</application>
+      installation.</para>
 
     <para>These variables are exported for the ports to use:</para>
 
@@ -301,7 +304,7 @@
       <listitem><para><varname>GSSAPI_CONFIGURE_ARGS</varname></para></listitem>
     </itemizedlist>
 
-    <para>The <literal>flags</literal> option can be set with
+    <para>The <literal>flags</literal> option can be given alongside
       <literal>base</literal>, <literal>heimdal</literal>, or
       <literal>mit</literal> to automatically add
       <varname>GSSAPICPPFLAGS</varname>,
@@ -312,7 +315,7 @@
       <literal>base,flags</literal>.</para>
 
     <para>The <literal>bootstrap</literal> option is a special prefix
-      only for use with <package role="port">security/krb5</package>
+      only for use by <package role="port">security/krb5</package>
       and <package role="port">security/heimdal</package>.  For
       example, use <literal>bootstrap,mit</literal>.</para>
 
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/svn-doc-all
To unsubscribe, send any mail to "[email protected]"