diff --git a/security/openssh/config.hlp b/security/openssh/config.hlp new file mode 100644 index 000000000..fa20d793f --- /dev/null +++ b/security/openssh/config.hlp @@ -0,0 +1,28 @@ +# --- SDE-COPYRIGHT-NOTE-BEGIN --- +# This copyright note is auto-generated by ./scripts/Create-CopyPatch. +# +# Filename: package/.../openssh/config.hlp +# Copyright (C) 2009 The OpenSDE Project +# +# More information can be found in the files COPYING and README. +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; version 2 of the License. A copy of the +# GNU General Public License can be found in the file COPYING. +# --- SDE-COPYRIGHT-NOTE-END --- + +MENU_PKG_OPENSSH + Here you will find config options for the openssh packages. + +SDECFG_PKG_OPENSSH_LPK + Enable OpenSSH LDAP Public Key support. + + The OpenSSH LDAP Public Key patch provides an easy way of centralizing + strong user authentication by using an LDAP server for retrieving public + keys instead of ~/.ssh/authorized_keys. + + Please note that this feature is not included in openssh source code and + requires a contributed patch from a third party. + + See http://code.google.com/p/openssh-lpk/ for more information. diff --git a/security/openssh/config.in b/security/openssh/config.in new file mode 100644 index 000000000..b92eb45e5 --- /dev/null +++ b/security/openssh/config.in @@ -0,0 +1,24 @@ +# --- SDE-COPYRIGHT-NOTE-BEGIN --- +# This copyright note is auto-generated by ./scripts/Create-CopyPatch. +# +# Filename: package/.../openssh/config.in +# Copyright (C) 2009 The OpenSDE Project +# +# More information can be found in the files COPYING and README. +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; version 2 of the License. A copy of the +# GNU General Public License can be found in the file COPYING. +# --- SDE-COPYRIGHT-NOTE-END --- + +if pkgcheck openssh X; then + menu_begin MENU_PKG_OPENSSH 'OpenSSH Package Options' + + # OpenSSH LPK Support + if pkgcheck openldap X; then + bool 'Include LDAP Public Key Support' \ + SDECFG_PKG_OPENSSH_LPK 0 + fi + menu_end +fi diff --git a/security/openssh/openssh.conf b/security/openssh/openssh.conf index 796f18724..20ec741b2 100644 --- a/security/openssh/openssh.conf +++ b/security/openssh/openssh.conf @@ -2,7 +2,7 @@ # This copyright note is auto-generated by ./scripts/Create-CopyPatch. # # Filename: package/.../openssh/openssh.conf -# Copyright (C) 2007 The OpenSDE Project +# Copyright (C) 2007 - 2009 The OpenSDE Project # Copyright (C) 2004 - 2006 The T2 SDE Project # Copyright (C) 1998 - 2003 Clifford Wolf # @@ -33,3 +33,11 @@ confopt="$confopt \ --with-xauth=/usr/X11/bin/xauth" pkginstalled tcp_wrappers && var_append confopt ' ' '--with-tcp-wrappers' + +# OpenSSH LDAP Public Key support +if [ "$SDECFG_PKG_OPENSSH_LPK" == 1 ] ; then + echo_status "Enabling OpenSSH LDAP Public Key support." + var_append patchfiles ' ' "$( match_source_file -p lpk )" + pkgprefix -t openldap + var_append extraconfopt ' ' "--with-ldap=$root/$( pkgprefix openldap )" +fi diff --git a/security/openssh/openssh.desc b/security/openssh/openssh.desc index 7eabcced5..5a9eb9323 100644 --- a/security/openssh/openssh.desc +++ b/security/openssh/openssh.desc @@ -42,3 +42,4 @@ [P] X -----5---9 191.100 [D] 470394460 openssh-5.1p1.tar.gz ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ +[D] 909527609 contrib-openssh-lpk-5.1p1-0.3.10.patch http://openssh-lpk.googlecode.com/svn/trunk/patch/contrib/