summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBernhard Kaindl <43588962+bernhardkaindl@users.noreply.github.com>2022-06-14 13:41:32 +0200
committerGitHub <noreply@github.com>2022-06-14 13:41:32 +0200
commit83efea32f4105fbed0090da2401638c6da346763 (patch)
tree158875177f340f636487e4739763913798e79de3
parentbc577f2deef4432bf45575ee0f8562e37ddcd115 (diff)
downloadspack-83efea32f4105fbed0090da2401638c6da346763.tar.gz
spack-83efea32f4105fbed0090da2401638c6da346763.tar.bz2
spack-83efea32f4105fbed0090da2401638c6da346763.tar.xz
spack-83efea32f4105fbed0090da2401638c6da346763.zip
openssh: enable authentication via Kerberos through GSSAPI (#31086)
Add variant +gssapi to enable authentication via Kerberos through GSSAPI When openssh is installed at sites using Kerberos, openssh needs to auth via Kerberos through GSSAPI in order to work in such environments.
-rw-r--r--var/spack/repos/builtin/packages/openssh/package.py5
1 files changed, 5 insertions, 0 deletions
diff --git a/var/spack/repos/builtin/packages/openssh/package.py b/var/spack/repos/builtin/packages/openssh/package.py
index 97ee7c03ae..77dba88357 100644
--- a/var/spack/repos/builtin/packages/openssh/package.py
+++ b/var/spack/repos/builtin/packages/openssh/package.py
@@ -45,6 +45,9 @@ class Openssh(AutotoolsPackage):
version('6.7p1', sha256='b2f8394eae858dabbdef7dac10b99aec00c95462753e80342e530bbb6f725507')
version('6.6p1', sha256='48c1f0664b4534875038004cc4f3555b8329c2a81c1df48db5c517800de203bb')
+ variant('gssapi', default=True, description='Enable authentication via Kerberos through GSSAPI')
+
+ depends_on('krb5', when='+gssapi')
depends_on('openssl@:1.0', when='@:7.7p1')
depends_on('openssl')
depends_on('libedit')
@@ -67,6 +70,8 @@ class Openssh(AutotoolsPackage):
# least newer versions want to create the directory during the
# install step and fail if they cannot do so.
args = ['--with-privsep-path={0}'.format(self.prefix.var.empty)]
+ if self.spec.satisfies('+gssapi'):
+ args.append('--with-kerberos5=' + self.spec['krb5'].prefix)
# Somehow creating pie executables fails with nvhpc, not with gcc.
if '%nvhpc' in self.spec: