diff options
author | Bernhard Kaindl <43588962+bernhardkaindl@users.noreply.github.com> | 2022-06-14 13:41:32 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-06-14 13:41:32 +0200 |
commit | 83efea32f4105fbed0090da2401638c6da346763 (patch) | |
tree | 158875177f340f636487e4739763913798e79de3 | |
parent | bc577f2deef4432bf45575ee0f8562e37ddcd115 (diff) | |
download | spack-83efea32f4105fbed0090da2401638c6da346763.tar.gz spack-83efea32f4105fbed0090da2401638c6da346763.tar.bz2 spack-83efea32f4105fbed0090da2401638c6da346763.tar.xz spack-83efea32f4105fbed0090da2401638c6da346763.zip |
openssh: enable authentication via Kerberos through GSSAPI (#31086)
Add variant +gssapi to enable authentication via Kerberos through GSSAPI
When openssh is installed at sites using Kerberos, openssh needs to auth
via Kerberos through GSSAPI in order to work in such environments.
-rw-r--r-- | var/spack/repos/builtin/packages/openssh/package.py | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/var/spack/repos/builtin/packages/openssh/package.py b/var/spack/repos/builtin/packages/openssh/package.py index 97ee7c03ae..77dba88357 100644 --- a/var/spack/repos/builtin/packages/openssh/package.py +++ b/var/spack/repos/builtin/packages/openssh/package.py @@ -45,6 +45,9 @@ class Openssh(AutotoolsPackage): version('6.7p1', sha256='b2f8394eae858dabbdef7dac10b99aec00c95462753e80342e530bbb6f725507') version('6.6p1', sha256='48c1f0664b4534875038004cc4f3555b8329c2a81c1df48db5c517800de203bb') + variant('gssapi', default=True, description='Enable authentication via Kerberos through GSSAPI') + + depends_on('krb5', when='+gssapi') depends_on('openssl@:1.0', when='@:7.7p1') depends_on('openssl') depends_on('libedit') @@ -67,6 +70,8 @@ class Openssh(AutotoolsPackage): # least newer versions want to create the directory during the # install step and fail if they cannot do so. args = ['--with-privsep-path={0}'.format(self.prefix.var.empty)] + if self.spec.satisfies('+gssapi'): + args.append('--with-kerberos5=' + self.spec['krb5'].prefix) # Somehow creating pie executables fails with nvhpc, not with gcc. if '%nvhpc' in self.spec: |