CBLFS - User contributions [en]

ALSA Utilities

2006-10-11T01:29:57Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.alsa-project.org/pub/utils/alsa-utils-1.0.13.tar.bz2
|}

----

== Dependencies ==

=== Required ===
* [[ALSA Library]]

== Non-Multilib ==

Compile the package:

./configure &&
make

Install the package

make install

== Multilib ==
'''''This package does not provide any libraries so only one installation is needed.'''''

=== 32Bit ===

Compile the package:

CC="gcc ${BUILD32}" ./configure &&
make

Install the package

make install

=== N32 ===

Compile the package:

CC="gcc ${BUILDN32}" ./configure &&
make

Install the package

make install

=== 64Bit ===

Compile the package:

CC="gcc ${BUILD64}" ./configure &&
make

Install the package

make install

== Configuration Information ==

Use a bootscript to store the values at shutdown.

As the root user, install the init script /etc/rc.d/init.d/alsa included in the [[blfs-bootscripts]] package.

make install-alsa

Note that all channels of your sound card are muted by default. You can use the alsamixer program from the ALSA Utilities to change this.

The first time the alsactl program is run from the udev rule below, it will complain that there is no state in /etc/asound.state. You can prevent this by running the following commands as the root user:

touch /etc/asound.state &&
alsactl store

As the root user, install a new Udev rules file to create the audio device nodes and run the restore script:

cat > /etc/udev/rules.d/15-alsa.rules << "EOF"
# Give the audio group ownership of sound devices
SUBSYSTEM=="sound", GROUP="audio"
SUBSYSTEM=="snd", GROUP="audio"

# ALSA Devices
# When a sound device is detected, restore the volume settings
KERNEL=="controlC[0-9]*", ACTION=="add", RUN+="/usr/sbin/alsactl restore %n"
KERNEL=="hw[CD0-9]*", NAME="snd/%k"
KERNEL=="pcm[CD0-9cp]*", NAME="snd/%k"
KERNEL=="midiC[D0-9]*", NAME="snd/%k"
KERNEL=="timer", NAME="snd/%k"
KERNEL=="seq", NAME="snd/%k"
EOF
chmod 644 /etc/udev/rules.d/15-alsa.rules

ALSA OSS

2006-10-11T01:25:09Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.alsa-project.org/pub/oss-lib/alsa-oss-1.0.12.tar.bz2
|}

----

== Dependencies ==

=== Required ===
* [[ALSA Library]]

== Non-Multilib ==

Compile the package:

./configure &&
make

Install the package

make install

== Multilib ==

=== 32Bit ===

Compile the package:

CC="gcc ${BUILD32}" ./configure &&
make

Install the package

make install

=== N32 ===

Compile the package:

CC="gcc ${BUILDN32}" ./configure --libdir=/usr/lib32 &&
make

Install the package

make install

=== 64Bit ===

Compile the package:

CC="gcc ${BUILD64}" ./configure --libdir=/usr/lib64 &&
make

Install the package

make install

ALSA Firmware

2006-10-11T01:24:00Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.alsa-project.org/pub/firmware/alsa-firmware-1.0.13.tar.bz2
|}

----

The ALSA Firmware package is only needed by those with advanced requirements for their sound card. See the README for configure options.

== Dependencies ==

=== Required ===
* [[ALSA Library]]

== Non-Multilib ==

Compile the package:

./configure --prefix=/usr &&
make

Install the package

make install

== Multilib ==

=== 32Bit ===

Compile the package:

CC="gcc ${BUILD32}" ./configure --prefix=/usr &&
make

Install the package

make install

=== N32 ===

Compile the package:

CC="gcc ${BUILDN32}" ./configure --prefix=/usr --libdir=/usr/lib32 &&
make

Install the package

make install

=== 64Bit ===

Compile the package:

CC="gcc ${BUILD64}" ./configure --prefix=/usr --libdir=/usr/lib64 &&
make

Install the package

make install

ALSA Tools

2006-10-11T01:22:23Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.alsa-project.org/pub/tools/alsa-tools-1.0.13.tar.bz2
|-
!Required Patch:
| http://svn.cross-lfs.org/svn/repos/patches/alsa-tools/alsa-tools-1.0.11-ac3dec_config_update-1.patch
|}

----

The ALSA Tools package is only needed by those with advanced requirements for their sound card. The tools are not all built together, instead you need to cd into the directory of each tool you wish to compile and run the appropriate commands:

== Dependencies ==

=== Required ===
* [[ALSA Library]]
=== Optional ===
* [[Gtk1]] (To Build echomixer, envy24control, and rmedigicontrol)
* [[FLTK]] (To Build hdspconf and hdspmixer)
* [[Qt]] (To Build qlo10k1)

'''ld10k1''' must be built before '''qt10k1'''

== Non-Multilib ==

Apply the following patch in the top-level directory of alsa-tools before building ac3dec:

patch -Np1 -i ../alsa-tools-1.0.11-ac3dec_config_update-1.patch

Compile each package with:

./configure --prefix=/usr &&
make

Install each package with:

make install

== Multilib ==

=== 32Bit ===

Apply the following patch in the top-level directory of alsa-tools before building ac3dec:

patch -Np1 -i ../alsa-tools-1.0.11-ac3dec_config_update-1.patch

Compile each package with:

CC="gcc ${BUILD32}" CXX="g++ ${BUILD32}" USE_ARCH=32 PKG_CONFIG_PATH="${PKG_CONFIG_PATH32}" \
./configure --prefix=/usr &&
make

Install each package with:

make install

=== N32 ===

Apply the following patch in the top-level directory of alsa-tools before building ac3dec:

patch -Np1 -i ../alsa-tools-1.0.11-ac3dec_config_update-1.patch

Before building qlo10k1 apply the following sed so it looks in the correct dir for libraries:

sed -i "s@QTDIR/lib@&32@g" configure

Compile each package with:

CC="gcc ${BUILDN32}" CXX="g++ ${BUILDN32}" USE_ARCH=n32 PKG_CONFIG_PATH="${PKG_CONFIG_PATHN32}" \
./configure --prefix=/usr --libdir=/usr/lib32 &&
make

Install each package with:

make install

=== 64Bit ===

Apply the following patch in the top-level directory of alsa-tools before building ac3dec:

patch -Np1 -i ../alsa-tools-1.0.11-ac3dec_config_update-1.patch

Before building qlo10k1 apply the following sed so it looks in the correct dir for libraries:

sed -i "s@QTDIR/lib@&64@g" configure

Compile each package with:

CC="gcc ${BUILD64}" CXX="g++ ${BUILD64}" USE_ARCH=64 PKG_CONFIG_PATH="${PKG_CONFIG_PATH64}" \
./configure --prefix=/usr --libdir=/usr/lib64 &&
make

Install each package with:

make install

ALSA Utilities

2006-10-11T01:20:40Z

218.244.247.185:

ALSA Plugins

2006-10-11T01:19:55Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.alsa-project.org/pub/plugins/alsa-plugins-1.0.13.tar.bz2
|}

----

== Dependencies ==

=== Required ===
* [[pkg-config]]
* [[ALSA Library]]
=== Optional ===
* [[FFmpeg]]
* [[JACK]]
* [[polypaudio]]
* [[Secret Rabbit Code]] (libsamplerate)

== Non-Multilib ==

Compile the package:

./configure &&
make

Install the package

make install &&
install -v -m755 -d /usr/share/doc/alsa-plugins-1.0.13 &&
install -v -m644 doc/{README*,*.txt} \
/usr/share/doc/alsa-plugins-1.0.13

== Multilib ==

=== 32Bit ===

Compile the package:

CC="gcc ${BUILD32}" PKG_CONFIG_PATH="${PKG_CONFIG_PATH32}" ./configure &&
make

Install the package

make install

=== N32 ===

Compile the package:

CC="gcc ${BUILDN32}" PKG_CONFIG_PATH="${PKG_CONFIG_PATHN32}" ./configure --libdir=/usr/lib32 &&
make

Install the package

make install

=== 64Bit ===

Compile the package:

CC="gcc ${BUILD64}" PKG_CONFIG_PATH="${PKG_CONFIG_PATH64}" ./configure --libdir=/usr/lib64 &&
make

Install the package

make install &&
install -v -m755 -d /usr/share/doc/alsa-plugins-1.0.13 &&
install -v -m644 doc/{README*,*.txt} \
/usr/share/doc/alsa-plugins-1.0.13

ALSA Library

2006-10-11T01:19:27Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.alsa-project.org/pub/lib/alsa-lib-1.0.13.tar.bz2
|}

----

== Dependencies ==

=== Optional ===
* [[Doxygen]]
* [[resmgr]]

== Non-Multilib ==

Compile the package:

./configure --enable-static &&
make

Install the package

make install &&
install -v -m644 -D doc/asoundrc.txt \
/usr/share/doc/alsa-lib-1.0.13/asoundrc.txt

== Multilib ==

=== 32Bit ===

Compile the package:

CC="gcc ${BUILD32}" ./configure &&
make

Install the package

make install

=== N32 ===

Compile the package:

CC="gcc ${BUILDN32}" ./configure --libdir=/usr/lib32 --enable-static &&
make

Install the package

make install

=== 64Bit ===

Compile the package:

CC="gcc ${BUILD64}" ./configure --libdir=/usr/lib64 --enable-static &&
make

Install the package

make install &&
install -v -m644 -D doc/asoundrc.txt \
/usr/share/doc/alsa-lib-1.0.13/asoundrc.txt

== Documentation ==

If you have [[Doxygen]] installed and you wish to build the library API documentation, run the following commands:

make doc &&
install -v -d -m755 /usr/share/alsa/doc/html &&
install -v -m644 doc/doxygen/html/* /usr/share/alsa/doc/html

FontConfig

2006-10-10T08:37:26Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| http://fontconfig.org/release/fontconfig-2.4.1.tar.gz
|}

----

== Dependencies ==

=== Required ===
* [[FreeType]]
* [[expat]]
=== Optional ===
* [[DocBook Utils]]

'''''If you have DocBook-utils installed and you remove the --disable-docs parameter from the configure command below, you must have [[PerlModule SGMLSpm]] and [[JadeTeX]] installed also, or the Fontconfig build will fail.'''''

== Non-Multilib ==

Compile the package:

./configure --prefix=/usr --sysconfdir=/etc \
--disable-docs --without-add-fonts \
--with-docdir=/usr/share/doc/fontconfig-2.4.1 &&
make

Install the package

make install &&
install -v -m644 doc/*.3 /usr/share/man/man3 &&
install -v -m644 doc/*.5 /usr/share/man/man5 &&
install -v -m755 \
-d /usr/share/doc/fontconfig-2.4.1/fontconfig-devel &&
install -v -m644 doc/*.{html,pdf,txt} \
/usr/share/doc/fontconfig-2.4.1 &&
install -v -m644 doc/fontconfig-devel/* \
/usr/share/doc/fontconfig-2.4.1/fontconfig-devel

== Multilib ==

=== 32Bit ===

Compile the package:

USE_ARCH=32 CC="gcc ${BUILD32}" ./configure --prefix=/usr \
--sysconfdir=/etc --disable-docs --without-add-fonts \
--with-docdir=/usr/share/doc/fontconfig-2.4.1 &&
make

Install the package

make install

=== N32 ===

Compile the package:

USE_ARCH=n32 CC="gcc ${BUILDN32}" ./configure --prefix=/usr \
--sysconfdir=/etc --disable-docs --without-add-fonts \
--with-docdir=/usr/share/doc/fontconfig-2.4.1 \
--libdir=/usr/lib32 &&
make

Install the package

make install

=== 64Bit ===

Compile the package:

USE_ARCH=64 CC="gcc ${BUILD64}" ./configure --prefix=/usr \
--sysconfdir=/etc --disable-docs --without-add-fonts \
--with-docdir=/usr/share/doc/fontconfig-2.4.1 \
--libdir=/usr/lib64 &&
make

Install the package

make install &&
install -v -m644 doc/*.3 /usr/share/man/man3 &&
install -v -m644 doc/*.5 /usr/share/man/man5 &&
install -v -m755 \
-d /usr/share/doc/fontconfig-2.4.1/fontconfig-devel &&
install -v -m644 doc/*.{html,pdf,txt} \
/usr/share/doc/fontconfig-2.4.1 &&
install -v -m644 doc/fontconfig-devel/* \
/usr/share/doc/fontconfig-2.4.1/fontconfig-devel

FreeType

2006-10-10T08:37:19Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| http://prdownloads.sourceforge.net/freetype/freetype-2.2.1.tar.bz2
|-
!Optional Documentation:
| http://prdownloads.sourceforge.net/freetype/freetype-doc-2.2.1.tar.bz2
|}

----

== Dependencies ==

== Non-Multilib ==

If you downloaded the additional documentation, unpack it into the source tree using the following command:

tar xf ../freetype-doc-2.2.1.tar.bz2 --strip-components=2 -C docs

This command enables the built-in TrueType bytecode interpreter which in turn enables hinting of TrueType glyphs. Enabling the interpreter results in much better rendering of TrueType fonts.

sed -i -r 's:.*(#.*BYTE.*) .*:\1:' include/freetype/config/ftoption.h

Configure and compile the package:

./configure --prefix=/usr &&
make

Install the package:

make install &&
install -v -m755 -d /usr/share/doc/freetype-2.2.1 &&
cp -v -R docs/* /usr/share/doc/freetype-2.2.1

== Multilib ==

=== 32Bit ===

This command enables the built-in TrueType bytecode interpreter which in turn enables hinting of TrueType glyphs. Enabling the interpreter results in much better rendering of TrueType fonts.

sed -i -r 's:.*(#.*BYTE.*) .*:\1:' include/freetype/config/ftoption.h

Configure and compile the package:

CC="gcc ${BUILD32}" ./configure --prefix=/usr &&
make

Install the package:

make install &&
mv -v /usr/bin/freetype-config{,-32}

=== N32 ===

This command enables the built-in TrueType bytecode interpreter which in turn enables hinting of TrueType glyphs. Enabling the interpreter results in much better rendering of TrueType fonts.

sed -i -r 's:.*(#.*BYTE.*) .*:\1:' include/freetype/config/ftoption.h

Configure and compile the package:

CC="gcc ${BUILDN32}" ./configure --prefix=/usr --libdir=/usr/lib32 &&
make

Install the package:

make install &&
mv -v /usr/bin/freetype-config{,-n32}

=== 64Bit ===

If you downloaded the additional documentation, unpack it into the source tree using the following command:

tar xf ../freetype-doc-2.2.1.tar.bz2 --strip-components=2 -C docs

This command enables the built-in TrueType bytecode interpreter which in turn enables hinting of TrueType glyphs. Enabling the interpreter results in much better rendering of TrueType fonts.

sed -i -r 's:.*(#.*BYTE.*) .*:\1:' include/freetype/config/ftoption.h

Configure and compile the package:

CC="gcc ${BUILD64}" ./configure --prefix=/usr --libdir=/usr/lib64 &&
make

Install the package:

make install &&
mv -v /usr/bin/freetype-config{,-64} &&
ln -sf multiarch_wrapper /usr/bin/freetype-config &&
install -v -m755 -d /usr/share/doc/freetype-2.2.1 &&
cp -v -R docs/* /usr/share/doc/freetype-2.2.1

Glib2

2006-10-10T06:29:41Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.gtk.org/pub/glib/2.12/glib-2.12.4.tar.bz2
|}

----

== Dependencies ==

=== Required ===
* [[pkg-config]]
=== Optional ===
* [[Gtk-Doc]]

== Non-Multilib ==

Compile the package:

./configure --prefix=/usr &&
make

Install the package

make install

== Multilib ==

=== 32Bit ===

Compile the package:

CC="gcc ${BUILD32}" ./configure --prefix=/usr --host=${CLFS_TARGET32} &&
make

Install the package

make install

=== N32 ===

Compile the package:

CC="gcc ${BUILDN32}" ./configure --prefix=/usr --libdir=/usr/lib32 &&
make

Install the package

make install

=== 64Bit ===

Compile the package:

CC="gcc ${BUILD64}" ./configure --prefix=/usr --libdir=/usr/lib64 &&
make

Install the package

make install

Curl

2006-10-10T06:05:44Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| http://curl.haxx.se/download/curl-7.15.5.tar.bz2
|}

----

== Dependencies ==

== Optional ==
* [[pkg-config]]
* [[OpenSSL]] or [[GnuTLS]]
* [[OpenLDAP]]
* [[libidn]]
* [[MIT krb5]] or [[Heimdal]]
* [[kdb4]]
* [[SPNEGO]]
* [[c-ares]]
== Optional (For The Testsuite) ==
* [[Stunnel]]
* [[Valgrind]]

== Non-Multilib ==

Configure and compile the package:

./configure --prefix=/usr &&
make

Install the package:

make install
find docs -name "Makefile*" -o -name "*.1" -o -name "*.3" | xargs rm &&
install -v -d -m755 /usr/share/doc/curl-7.15.5 &&
cp -v -R docs/* /usr/share/doc/curl-7.15.5

== Multilib ==

=== 32Bit ===

Configure and compile the package:

CC="gcc ${BUILD32}" USE_ARCH=32 PKG_CONFIG_PATH="${PKG_CONFIG_PATH32}" \
./configure --prefix=/usr &&
make

Install the package:

make install &&
mv -v /usr/bin/curl-config{,-32} &&
find docs -name "Makefile*" -o -name "*.1" -o -name "*.3" | xargs rm

=== N32 ===

Configure and compile the package:

CC="gcc ${BUILDN32}" USE_ARCH=n32 PKG_CONFIG_PATH="${PKG_CONFIG_PATHN32}" \
./configure --prefix=/usr --libdir=/usr/lib32 &&
make

Install the package:

make install &&
mv -v /usr/bin/curl-config{,-n32} &&
find docs -name "Makefile*" -o -name "*.1" -o -name "*.3" | xargs rm

=== 64Bit ===

Configure and compile the package:

CC="gcc ${BUILD64}" USE_ARCH=64 PKG_CONFIG_PATH="${PKG_CONFIG_PATH64}" \
./configure --prefix=/usr --libdir=/usr/lib64 &&
make

Install the package:

make install &&
mv -v /usr/bin/curl-config{,-64} &&
ln -sfv multiarch_wrapper /usr/bin/curl-config &&
find docs -name "Makefile*" -o -name "*.1" -o -name "*.3" | xargs rm &&
install -v -d -m755 /usr/share/doc/curl-7.15.5 &&
cp -v -R docs/* /usr/share/doc/curl-7.15.5

*[[Net Utilities]]
*[[Main Page]]

Heimdal

2006-10-10T05:12:14Z

218.244.247.185: /* Required */

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| http://ftp.vc-graz.ac.at/mirror/crypto/kerberos/heimdal/heimdal-0.7.2.tar.gz
|-
!Download Patch:
| ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt
|-
!Download Patch:
| http://www.linuxfromscratch.org/patches/blfs/svn/heimdal-0.7.2-fhs_compliance-1.patch
|-
!Download Patch (for cracklib):
| http://www.linuxfromscratch.org/patches/blfs/svn/heimdal-0.7.2-cracklib-1.patch
|}

----

== Dependencies ==

=== Required ===
* [[Berkely DB]] or [[GDBM]]

=== Reccomended ===
* [[OpenSSL]]
=== Optional ===
* [[Linux-Pam]]
* [[OpenLDAP]]
* [[X Window System]]
* [[Cracklib]]
* [[krb4]]

== Non-Multilib ==

If you wish the Heimdal package to link against the CrackLib library to provide enforcement of strong passwords (requires CrackLib-2.8.9 installed with the heimdal patch), you must apply a patch:

patch -Np1 -i ../heimdal-0.7.2-cracklib-1.patch

Install Heimdal by running the following commands:

patch -Np1 -i ../heimdal-0.7.2-setuid-patch.txt &&
patch -Np1 -i ../heimdal-0.7.2-fhs_compliance-1.patch &&
./configure --prefix=/usr \
--sysconfdir=/etc/heimdal \
--libexecdir=/usr/sbin \
--datadir=/var/lib/heimdal \
--localstatedir=/var/lib/heimdal \
--enable-shared \
--with-readline=/usr &&
make

Now, as the root user:

mv -v /usr/include/fnmatch.h /usr/include/fnmatch.h.glibc &&
mv -v /usr/include/glob.h /usr/include/glob.h.glibc &&
mv -v /usr/include/ss/ss.h /usr/include/ss/ss.h.e2fsprogs &&
mv -v /usr/lib/libss.a /usr/lib/libss.a.e2fsprogs &&
mv -v /usr/lib/libss.so /usr/lib/libss.so.e2fsprogs &&
make install &&
mv -v /usr/include/fnmatch.h /usr/include/fnmatch.h.heimdal &&
mv -v /usr/include/fnmatch.h.glibc /usr/include/fnmatch.h &&
mv -v /usr/include/glob.h /usr/include/glob.h.heimdal &&
mv -v /usr/include/glob.h.glibc /usr/include/glob.h &&
install -v -m755 -d /usr/share/doc/heimdal-0.7.2/standardisation &&
install -v -m644 doc/{init-creds,layman.asc} \
/usr/share/doc/heimdal-0.7.2 &&
install -v -m644 doc/standardisation/* \
/usr/share/doc/heimdal-0.7.2/standardisation &&
mv -v /bin/login /bin/login.shadow &&
mv -v /bin/su /bin/su.shadow &&
mv -v /usr/bin/{login,su} /bin &&
ln -v -sf ../../bin/login /usr/bin &&
mv -v /usr/lib/lib{otp,kafs,krb5,asn1,roken,crypto}.so.* /lib &&
for SYMLINK in otp.so.0.1.3 kafs.so.0.4.1 krb5.so.17.4.0 \
asn1.so.6.1.0 roken.so.16.1.0 crypto.so.0.9.8
do
ln -v -sf ../../lib/lib$SYMLINK \
/usr/lib/lib`echo $SYMLINK | cut -d. -f1`.so
done
ldconfig

== Multilib ==

TODO...

=== 32Bit ===

TODO...

=== N32 ===

TODO...

=== 64Bit ===

TODO...

== Configuration ==

Create the Kerberos configuration file with the following commands:

install -v -m755 -d /etc/heimdal &&
cat > /etc/heimdal/krb5.conf << "EOF"
# Begin /etc/heimdal/krb5.conf

[libdefaults]
default_realm = <EXAMPLE.COM>
encrypt = true

[realms]
<EXAMPLE.COM> = {
kdc = <hostname.example.com>
admin_server = <hostname.example.com>
kpasswd_server = <hostname.example.com>
}

[domain_realm]
.<example.com> = <EXAMPLE.COM>

[logging]
kdc = FILE:/var/log/kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb.log

# End /etc/heimdal/krb5.conf
EOF
chmod -v 644 /etc/heimdal/krb5.conf

You will need to substitute your domain and proper hostname for the occurrences of the <hostname> and <EXAMPLE.COM> names.

default_realm should be the name of your domain changed to ALL CAPS. This isn't required, but both Heimdal and MIT krb5 recommend it.

encrypt = true provides encryption of all traffic between kerberized clients and servers. It's not necessary and can be left off. If you leave it off, you can encrypt all traffic from the client to the server using a switch on the client program instead.

The [realms] parameters tell the client programs where to look for the KDC authentication services.

The [domain_realm] section maps a domain to a realm.

Store the master password in a key file using the following commands:

install -v -m755 -d /var/lib/heimdal &&
kstash

Create the KDC database:

kadmin -l

The commands below will prompt you for information about the principles. Choose the defaults for now unless you know what you are doing and need to specify different values. You can go in later and change the defaults, should you feel the need. You may use the up and down arrow keys to use the history feature of kadmin in a similar manner as the bash history feature.

At the kadmin> prompt, issue the following statement:

init <EXAMPLE.COM>

The database must now be populated with at least one principle (user). For now, just use your regular login name or root. You may create as few, or as many principles as you wish using the following statement:

add <loginname>

The KDC server and any machine running kerberized server daemons must have a host key installed:

add --random-key host/<hostname.example.com>

After choosing the defaults when prompted, you will have to export the data to a keytab file:

ext host/<hostname.example.com>

This should have created two files in /etc/heimdal: krb5.keytab (Kerberos 5) and srvtab (Kerberos 4). Both files should have 600 (root rw only) permissions. Keeping the keytab files from public access is crucial to the overall security of the Kerberos installation.

Eventually, you'll want to add server daemon principles to the database and extract them to the keytab file. You do this in the same way you created the host principles. Below is an example:

add --random-key ftp/<hostname.example.com>

(choose the defaults)

ext ftp/<hostname.example.com>

Exit the kadmin program (use quit or exit) and return back to the shell prompt. Start the KDC daemon manually, just to test out the installation:

/usr/sbin/kdc &

Attempt to get a TGT (ticket granting ticket) with the following command:

kinit <loginname>

You will be prompted for the password you created. After you get your ticket, you should list it with the following command:

klist

Information about the ticket should be displayed on the screen.

To test the functionality of the keytab file, issue the following command:

ktutil list

This should dump a list of the host principals, along with the encryption methods used to access the principals.

At this point, if everything has been successful so far, you can feel fairly confident in the installation, setup and configuration of your new Heimdal Kerberos 5 installation.

Install the /etc/rc.d/init.d/heimdal init script included in the [[blfs-bootscripts]] package:

make install-heimdal

Heimdal

2006-10-10T05:09:35Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| http://ftp.vc-graz.ac.at/mirror/crypto/kerberos/heimdal/heimdal-0.7.2.tar.gz
|-
!Download Patch:
| ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt
|-
!Download Patch:
| http://www.linuxfromscratch.org/patches/blfs/svn/heimdal-0.7.2-fhs_compliance-1.patch
|-
!Download Patch (for cracklib):
| http://www.linuxfromscratch.org/patches/blfs/svn/heimdal-0.7.2-cracklib-1.patch
|}

----

== Dependencies ==

=== Required ===
* [[Berkely DB]] (recommended) or [[GDBM]]
=== Reccomended ===
* [[OpenSSL]]
=== Optional ===
* [[Linux-Pam]]
* [[OpenLDAP]]
* [[X Window System]]
* [[Cracklib]]
* [[krb4]]

== Non-Multilib ==

If you wish the Heimdal package to link against the CrackLib library to provide enforcement of strong passwords (requires CrackLib-2.8.9 installed with the heimdal patch), you must apply a patch:

patch -Np1 -i ../heimdal-0.7.2-cracklib-1.patch

Install Heimdal by running the following commands:

patch -Np1 -i ../heimdal-0.7.2-setuid-patch.txt &&
patch -Np1 -i ../heimdal-0.7.2-fhs_compliance-1.patch &&
./configure --prefix=/usr \
--sysconfdir=/etc/heimdal \
--libexecdir=/usr/sbin \
--datadir=/var/lib/heimdal \
--localstatedir=/var/lib/heimdal \
--enable-shared \
--with-readline=/usr &&
make

Now, as the root user:

mv -v /usr/include/fnmatch.h /usr/include/fnmatch.h.glibc &&
mv -v /usr/include/glob.h /usr/include/glob.h.glibc &&
mv -v /usr/include/ss/ss.h /usr/include/ss/ss.h.e2fsprogs &&
mv -v /usr/lib/libss.a /usr/lib/libss.a.e2fsprogs &&
mv -v /usr/lib/libss.so /usr/lib/libss.so.e2fsprogs &&
make install &&
mv -v /usr/include/fnmatch.h /usr/include/fnmatch.h.heimdal &&
mv -v /usr/include/fnmatch.h.glibc /usr/include/fnmatch.h &&
mv -v /usr/include/glob.h /usr/include/glob.h.heimdal &&
mv -v /usr/include/glob.h.glibc /usr/include/glob.h &&
install -v -m755 -d /usr/share/doc/heimdal-0.7.2/standardisation &&
install -v -m644 doc/{init-creds,layman.asc} \
/usr/share/doc/heimdal-0.7.2 &&
install -v -m644 doc/standardisation/* \
/usr/share/doc/heimdal-0.7.2/standardisation &&
mv -v /bin/login /bin/login.shadow &&
mv -v /bin/su /bin/su.shadow &&
mv -v /usr/bin/{login,su} /bin &&
ln -v -sf ../../bin/login /usr/bin &&
mv -v /usr/lib/lib{otp,kafs,krb5,asn1,roken,crypto}.so.* /lib &&
for SYMLINK in otp.so.0.1.3 kafs.so.0.4.1 krb5.so.17.4.0 \
asn1.so.6.1.0 roken.so.16.1.0 crypto.so.0.9.8
do
ln -v -sf ../../lib/lib$SYMLINK \
/usr/lib/lib`echo $SYMLINK | cut -d. -f1`.so
done
ldconfig

== Multilib ==

TODO...

=== 32Bit ===

TODO...

=== N32 ===

TODO...

=== 64Bit ===

TODO...

== Configuration ==

Create the Kerberos configuration file with the following commands:

install -v -m755 -d /etc/heimdal &&
cat > /etc/heimdal/krb5.conf << "EOF"
# Begin /etc/heimdal/krb5.conf

[libdefaults]
default_realm = <EXAMPLE.COM>
encrypt = true

[realms]
<EXAMPLE.COM> = {
kdc = <hostname.example.com>
admin_server = <hostname.example.com>
kpasswd_server = <hostname.example.com>
}

[domain_realm]
.<example.com> = <EXAMPLE.COM>

[logging]
kdc = FILE:/var/log/kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb.log

# End /etc/heimdal/krb5.conf
EOF
chmod -v 644 /etc/heimdal/krb5.conf

You will need to substitute your domain and proper hostname for the occurrences of the <hostname> and <EXAMPLE.COM> names.

default_realm should be the name of your domain changed to ALL CAPS. This isn't required, but both Heimdal and MIT krb5 recommend it.

encrypt = true provides encryption of all traffic between kerberized clients and servers. It's not necessary and can be left off. If you leave it off, you can encrypt all traffic from the client to the server using a switch on the client program instead.

The [realms] parameters tell the client programs where to look for the KDC authentication services.

The [domain_realm] section maps a domain to a realm.

Store the master password in a key file using the following commands:

install -v -m755 -d /var/lib/heimdal &&
kstash

Create the KDC database:

kadmin -l

The commands below will prompt you for information about the principles. Choose the defaults for now unless you know what you are doing and need to specify different values. You can go in later and change the defaults, should you feel the need. You may use the up and down arrow keys to use the history feature of kadmin in a similar manner as the bash history feature.

At the kadmin> prompt, issue the following statement:

init <EXAMPLE.COM>

The database must now be populated with at least one principle (user). For now, just use your regular login name or root. You may create as few, or as many principles as you wish using the following statement:

add <loginname>

The KDC server and any machine running kerberized server daemons must have a host key installed:

add --random-key host/<hostname.example.com>

After choosing the defaults when prompted, you will have to export the data to a keytab file:

ext host/<hostname.example.com>

This should have created two files in /etc/heimdal: krb5.keytab (Kerberos 5) and srvtab (Kerberos 4). Both files should have 600 (root rw only) permissions. Keeping the keytab files from public access is crucial to the overall security of the Kerberos installation.

Eventually, you'll want to add server daemon principles to the database and extract them to the keytab file. You do this in the same way you created the host principles. Below is an example:

add --random-key ftp/<hostname.example.com>

(choose the defaults)

ext ftp/<hostname.example.com>

Exit the kadmin program (use quit or exit) and return back to the shell prompt. Start the KDC daemon manually, just to test out the installation:

/usr/sbin/kdc &

Attempt to get a TGT (ticket granting ticket) with the following command:

kinit <loginname>

You will be prompted for the password you created. After you get your ticket, you should list it with the following command:

klist

Information about the ticket should be displayed on the screen.

To test the functionality of the keytab file, issue the following command:

ktutil list

This should dump a list of the host principals, along with the encryption methods used to access the principals.

At this point, if everything has been successful so far, you can feel fairly confident in the installation, setup and configuration of your new Heimdal Kerberos 5 installation.

Install the /etc/rc.d/init.d/heimdal init script included in the [[blfs-bootscripts]] package:

make install-heimdal

Shadow

2006-10-10T04:12:50Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.pld.org.pl/software/shadow/shadow-4.0.18.1.tar.bz2
|-
!Download Patch:
| http://svn.cross-lfs.org/svn/repos/cross-lfs/trunk/patches/shadow-4.0.18.1-useradd_fix-1.patch
|-
|-|}

----

User Warning: the process described bellow prevents me from login at my computer, but the blfs way
works find. Perhaps something need to update here. Need further confirmation...

== Dependencies ==

=== Optional ===
*[[Cracklib]]
*[[PAM Library]]

== Non-Multilib ==

Configure and compile the package:

patch -Np1 -i ../shadow-4.0.18.1-useradd_fix-1.patch &&
./configure --libdir=/lib -sysconfdir=/etc --enable-shared \
--without-audit --without-selinux --with-libcrack --with-libpam &&
sed -i 's/groups$(EXEEXT) //' src/Makefile &&
sed -i '/groups/d' man/Makefile &&
make

Install the package:

make install &&
mv /usr/bin/passwd /bin &&
mv /lib/libshadow.{a,la} /usr/lib &&
rm /lib/libshadow.so &&
LIBNAME=`cat lib/libshadow.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
ln -sf ../../lib/$LIBNAME /usr/lib/libshadow.so &&
install -d /etc/default

Setup Configuration files:

This section makes sure login.defs is compatible with PAM

cp etc/login.defs /etc/login.defs
sed -i -e 's@#MD5_CRYPT_ENAB.no@MD5_CRYPT_ENAB yes@' \
-e 's@/var/spool/mail@/var/mail@' \
-e 's@DICTPATH.*@DICTPATH\t/lib/cracklib/pw_dict@' /etc/login.defs
FUNCTIONS="LASTLOG_ENAB MAIL_CHECK_ENAB PORTTIME_CHECKS_ENAB CONSOLE MOTD_FILE
NOLOGINS_FILE PASS_MIN_LEN SU_WHEEL_ONLY MD5_CRYPT_ENAB CONSOLE_GROUPS
ENVIRON_FILE ULIMIT ENV_TZ ENV_HZ ENV_SUPATH ENV_PATH QMAIL_DIR MAIL_DIR
MAIL_FILE CHFN_AUTH FAILLOG_ENAB QUOTAS_ENAB FTMP_FILE OBSCURE_CHECKS_ENAB
CRACKLIB_DICTPATH PASS_CHANGE_TRIES PASS_ALWAYS"
for function in $FUNCTIONS; do
sed -i "s/^$function/# &/" /etc/login.defs
done

=== /etc/default/useradd ===

With the PAM configuration that is in CBLFS, this is the only information needed in
/etc/default/useradd.

cat > /etc/default/useradd << "EOF"
HOME=/home
INACTIVE=-1
SHELL=/bin/bash
CREATE_MAIL_SPOOL=no
EOF

== Multilib ==

=== 32Bit ===

Configure and compile the package:

patch -Np1 -i ../shadow-4.0.18.1-useradd_fix-1.patch &&
CC="gcc ${BUILD32}" ./configure --libdir=/lib -sysconfdir=/etc --enable-shared \
--without-audit --without-selinux --with-libcrack --with-libpam &&
sed -i 's/groups$(EXEEXT) //' src/Makefile &&
sed -i '/groups/d' man/Makefile &&
make

Install the package:

make install &&
mv /usr/bin/passwd /bin &&
mv /lib/libshadow.{a,la} /usr/lib &&
rm /lib/libshadow.so &&
LIBNAME=`cat lib/libshadow.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
ln -sf ../../lib/$LIBNAME /usr/lib/libshadow.so

=== N32 ===

Configure and compile the package:

patch -Np1 -i ../shadow-4.0.18.1-useradd_fix-1.patch &&
CC="gcc ${BUILDN32}" ./configure --libdir=/lib32 -sysconfdir=/etc --enable-shared \
--without-audit --without-selinux --with-libcrack --with-libpam &&
sed -i 's/groups$(EXEEXT) //' src/Makefile &&
sed -i '/groups/d' man/Makefile &&
make

Install the package:

make install &&
mv /usr/bin/passwd /bin &&
mv /lib32/libshadow.{a,la} /usr/lib32 &&
rm /lib32/libshadow.so &&
LIBNAME=`cat lib/libshadow.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
ln -sf ../../lib32/$LIBNAME /usr/lib32/libshadow.so

=== 64Bit ===

patch -Np1 -i ../shadow-4.0.18.1-useradd_fix-1.patch &&
CC="gcc ${BUILD64}" ./configure --libdir=/lib64 -sysconfdir=/etc --enable-shared \
--without-audit --without-selinux --with-libcrack --with-libpam &&
sed -i 's/groups$(EXEEXT) //' src/Makefile &&
sed -i '/groups/d' man/Makefile &&
make

Install the package:

make install &&
mv /usr/bin/passwd /bin &&
mv /lib64/libshadow.{a,la} /usr/lib64 &&
rm /lib64/libshadow.so &&
LIBNAME=`cat lib/libshadow.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
ln -sf ../../lib64/$LIBNAME /usr/lib64/libshadow.so
install -d /etc/default

Setup Configuration files:

cp etc/login.defs /etc/login.defs
sed -i -e 's@#MD5_CRYPT_ENAB.no@MD5_CRYPT_ENAB yes@' \
-e 's@/var/spool/mail@/var/mail@' \
-e 's@DICTPATH.*@DICTPATH\t/lib/cracklib/pw_dict@' /etc/login.defs
FUNCTIONS="LASTLOG_ENAB MAIL_CHECK_ENAB PORTTIME_CHECKS_ENAB CONSOLE MOTD_FILE
NOLOGINS_FILE PASS_MIN_LEN SU_WHEEL_ONLY MD5_CRYPT_ENAB CONSOLE_GROUPS
ENVIRON_FILE ULIMIT ENV_TZ ENV_HZ ENV_SUPATH ENV_PATH QMAIL_DIR MAIL_DIR
MAIL_FILE CHFN_AUTH FAILLOG_ENAB QUOTAS_ENAB FTMP_FILE OBSCURE_CHECKS_ENAB
CRACKLIB_DICTPATH PASS_CHANGE_TRIES PASS_ALWAYS"
for function in $FUNCTIONS; do
sed -i "s/^$function/# &/" /etc/login.defs
done

=== /etc/default/useradd ===

With the PAM configuration that is in CBLFS, this is the only information needed in
/etc/default/useradd.

cat > /etc/default/useradd << "EOF"
HOME=/home
INACTIVE=-1
SHELL=/bin/bash
CREATE_MAIL_SPOOL=no
EOF

Shadow

2006-10-10T04:08:37Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.pld.org.pl/software/shadow/shadow-4.0.18.1.tar.bz2
|-
!Download Patch:
| http://svn.cross-lfs.org/svn/repos/cross-lfs/trunk/patches/shadow-4.0.18.1-useradd_fix-1.patch
|-
|-|}

User Warning: the process described bellow prevents me from login at my computer, but the blfs way
works find. Perhaps something need to update here. Need further confirmation...

----

== Dependencies ==

=== Optional ===
*[[Cracklib]]
*[[PAM Library]]

== Non-Multilib ==

Configure and compile the package:

patch -Np1 -i ../shadow-4.0.18.1-useradd_fix-1.patch &&
./configure --libdir=/lib -sysconfdir=/etc --enable-shared \
--without-audit --without-selinux --with-libcrack --with-libpam &&
sed -i 's/groups$(EXEEXT) //' src/Makefile &&
sed -i '/groups/d' man/Makefile &&
make

Install the package:

make install &&
mv /usr/bin/passwd /bin &&
mv /lib/libshadow.{a,la} /usr/lib &&
rm /lib/libshadow.so &&
LIBNAME=`cat lib/libshadow.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
ln -sf ../../lib/$LIBNAME /usr/lib/libshadow.so &&
install -d /etc/default

Setup Configuration files:

This section makes sure login.defs is compatible with PAM

cp etc/login.defs /etc/login.defs
sed -i -e 's@#MD5_CRYPT_ENAB.no@MD5_CRYPT_ENAB yes@' \
-e 's@/var/spool/mail@/var/mail@' \
-e 's@DICTPATH.*@DICTPATH\t/lib/cracklib/pw_dict@' /etc/login.defs
FUNCTIONS="LASTLOG_ENAB MAIL_CHECK_ENAB PORTTIME_CHECKS_ENAB CONSOLE MOTD_FILE
NOLOGINS_FILE PASS_MIN_LEN SU_WHEEL_ONLY MD5_CRYPT_ENAB CONSOLE_GROUPS
ENVIRON_FILE ULIMIT ENV_TZ ENV_HZ ENV_SUPATH ENV_PATH QMAIL_DIR MAIL_DIR
MAIL_FILE CHFN_AUTH FAILLOG_ENAB QUOTAS_ENAB FTMP_FILE OBSCURE_CHECKS_ENAB
CRACKLIB_DICTPATH PASS_CHANGE_TRIES PASS_ALWAYS"
for function in $FUNCTIONS; do
sed -i "s/^$function/# &/" /etc/login.defs
done

=== /etc/default/useradd ===

With the PAM configuration that is in CBLFS, this is the only information needed in
/etc/default/useradd.

cat > /etc/default/useradd << "EOF"
HOME=/home
INACTIVE=-1
SHELL=/bin/bash
CREATE_MAIL_SPOOL=no
EOF

== Multilib ==

=== 32Bit ===

Configure and compile the package:

patch -Np1 -i ../shadow-4.0.18.1-useradd_fix-1.patch &&
CC="gcc ${BUILD32}" ./configure --libdir=/lib -sysconfdir=/etc --enable-shared \
--without-audit --without-selinux --with-libcrack --with-libpam &&
sed -i 's/groups$(EXEEXT) //' src/Makefile &&
sed -i '/groups/d' man/Makefile &&
make

Install the package:

make install &&
mv /usr/bin/passwd /bin &&
mv /lib/libshadow.{a,la} /usr/lib &&
rm /lib/libshadow.so &&
LIBNAME=`cat lib/libshadow.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
ln -sf ../../lib/$LIBNAME /usr/lib/libshadow.so

=== N32 ===

Configure and compile the package:

patch -Np1 -i ../shadow-4.0.18.1-useradd_fix-1.patch &&
CC="gcc ${BUILDN32}" ./configure --libdir=/lib32 -sysconfdir=/etc --enable-shared \
--without-audit --without-selinux --with-libcrack --with-libpam &&
sed -i 's/groups$(EXEEXT) //' src/Makefile &&
sed -i '/groups/d' man/Makefile &&
make

Install the package:

make install &&
mv /usr/bin/passwd /bin &&
mv /lib32/libshadow.{a,la} /usr/lib32 &&
rm /lib32/libshadow.so &&
LIBNAME=`cat lib/libshadow.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
ln -sf ../../lib32/$LIBNAME /usr/lib32/libshadow.so

=== 64Bit ===

patch -Np1 -i ../shadow-4.0.18.1-useradd_fix-1.patch &&
CC="gcc ${BUILD64}" ./configure --libdir=/lib64 -sysconfdir=/etc --enable-shared \
--without-audit --without-selinux --with-libcrack --with-libpam &&
sed -i 's/groups$(EXEEXT) //' src/Makefile &&
sed -i '/groups/d' man/Makefile &&
make

Install the package:

make install &&
mv /usr/bin/passwd /bin &&
mv /lib64/libshadow.{a,la} /usr/lib64 &&
rm /lib64/libshadow.so &&
LIBNAME=`cat lib/libshadow.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
ln -sf ../../lib64/$LIBNAME /usr/lib64/libshadow.so
install -d /etc/default

Setup Configuration files:

cp etc/login.defs /etc/login.defs
sed -i -e 's@#MD5_CRYPT_ENAB.no@MD5_CRYPT_ENAB yes@' \
-e 's@/var/spool/mail@/var/mail@' \
-e 's@DICTPATH.*@DICTPATH\t/lib/cracklib/pw_dict@' /etc/login.defs
FUNCTIONS="LASTLOG_ENAB MAIL_CHECK_ENAB PORTTIME_CHECKS_ENAB CONSOLE MOTD_FILE
NOLOGINS_FILE PASS_MIN_LEN SU_WHEEL_ONLY MD5_CRYPT_ENAB CONSOLE_GROUPS
ENVIRON_FILE ULIMIT ENV_TZ ENV_HZ ENV_SUPATH ENV_PATH QMAIL_DIR MAIL_DIR
MAIL_FILE CHFN_AUTH FAILLOG_ENAB QUOTAS_ENAB FTMP_FILE OBSCURE_CHECKS_ENAB
CRACKLIB_DICTPATH PASS_CHANGE_TRIES PASS_ALWAYS"
for function in $FUNCTIONS; do
sed -i "s/^$function/# &/" /etc/login.defs
done

=== /etc/default/useradd ===

With the PAM configuration that is in CBLFS, this is the only information needed in
/etc/default/useradd.

cat > /etc/default/useradd << "EOF"
HOME=/home
INACTIVE=-1
SHELL=/bin/bash
CREATE_MAIL_SPOOL=no
EOF

CyrusSASL

2006-10-10T03:25:03Z

218.244.247.185: /* Required */

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.21.tar.gz
|-
!Required Patch:
| http://svn.cross-lfs.org/svn/repos/patches/cyrus-sasl/cyrus-sasl-2.1.21-gcc4-1.patch
|-
!Required Patch:
| http://svn.cross-lfs.org/svn/repos/patches/cyrus-sasl/cyrus-sasl-2.1.21-openldap23-1.patch
|-
!Required Patch:
| http://svn.cross-lfs.org/svn/repos/patches/cyrus-sasl/cyrus-sasl-2.1.21-openssl98-1.patch
|}

----

== Dependencies ==

=== Required ===
* [[OpenSSL]]
=== Optional ===
* [[Linux-Pam]]
* [[OpenLDAP]]
* [[MIT krb5]] or [[Heimdal]]
* [[JDK]]
* [[MySQL]]
* [[PostgreSQL]]
* [[GDBM]]
* [[krb4]]
* [[SQLite]]
* [[Dmalloc]]

== Configuration Information ==

If building against [[OpenLDAP]] add the following to the configure command:

--with-ldap --enable-ldapdb

== Non-Multilib ==

Compile the package:

patch -Np1 -i ../cyrus-sasl-2.1.21-openldap23-1.patch &&
patch -Np1 -i ../cyrus-sasl-2.1.21-openssl98-1.patch &&
patch -Np1 -i ../cyrus-sasl-2.1.21-gcc4-1.patch &&
sed -i '/sasl_global/s/^static //' lib/client.c &&
sed -i 's/cat8/man8/' saslauthd/Makefile.in &&
./configure --prefix=/usr --sysconfdir=/etc \
--with-dbpath=/var/lib/sasl/sasldb2 \
--with-saslauthd=/var/run &&
make

Install the package

make install &&
install -v -m755 -d /usr/share/doc/cyrus-sasl-2.1.21 &&
install -v -m644 doc/{*.{html,txt,fig},ONEWS,TODO} \
saslauthd/LDAP_SASLAUTHD /usr/share/doc/cyrus-sasl-2.1.21 &&
install -v -m700 -d /var/lib/sasl

== Multilib ==

=== 32Bit ===

Compile the package:

patch -Np1 -i ../cyrus-sasl-2.1.21-openldap23-1.patch &&
patch -Np1 -i ../cyrus-sasl-2.1.21-openssl98-1.patch &&
patch -Np1 -i ../cyrus-sasl-2.1.21-gcc4-1.patch &&
sed -i '/sasl_global/s/^static //' lib/client.c &&
sed -i 's/cat8/man8/' saslauthd/Makefile.in &&
CC="gcc ${BUILD32}" ./configure --prefix=/usr --sysconfdir=/etc \
--with-dbpath=/var/lib/sasl/sasldb2 \
--with-saslauthd=/var/run &&
make

Install the package

make install

=== N32 ===

Compile the package:

patch -Np1 -i ../cyrus-sasl-2.1.21-openldap23-1.patch &&
patch -Np1 -i ../cyrus-sasl-2.1.21-openssl98-1.patch &&
patch -Np1 -i ../cyrus-sasl-2.1.21-gcc4-1.patch &&
sed -i '/sasl_global/s/^static //' lib/client.c &&
sed -i 's/cat8/man8/' saslauthd/Makefile.in &&
sed -i '/sasldir/s/lib/&32/' plugins/Makefile.in &&
CC="gcc ${BUILDN32}" ./configure --prefix=/usr --sysconfdir=/etc \
--libdir=/usr/lib32 --with-dbpath=/var/lib/sasl/sasldb2 \
--with-saslauthd=/var/run --with-plugindir=/usr/lib32/sasl2 &&
make

Install the package

make install

=== 64Bit ===

Compile the package:

patch -Np1 -i ../cyrus-sasl-2.1.21-openldap23-1.patch &&
patch -Np1 -i ../cyrus-sasl-2.1.21-openssl98-1.patch &&
patch -Np1 -i ../cyrus-sasl-2.1.21-gcc4-1.patch &&
sed -i '/sasl_global/s/^static //' lib/client.c &&
sed -i 's/cat8/man8/' saslauthd/Makefile.in &&
sed -i '/sasldir/s/lib/&64/' plugins/Makefile.in &&
CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc \
--libdir=/usr/lib64 --with-dbpath=/var/lib/sasl/sasldb2 \
--with-saslauthd=/var/run --with-plugindir=/usr/lib64/sasl2 &&
make

Install the package

make install &&
install -v -m755 -d /usr/share/doc/cyrus-sasl-2.1.21 &&
install -v -m644 doc/{*.{html,txt,fig},ONEWS,TODO} \
saslauthd/LDAP_SASLAUTHD /usr/share/doc/cyrus-sasl-2.1.21 &&
install -v -m700 -d /var/lib/sasl

= Contents =

The Cyrus SASL package contains a Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols.

Installed Programs: saslauthd, sasldblistusers2, saslpasswd2

Installed Libraries: libjavasasl.so, libsasl2.so, numerous SASL plugins and Java classes

Installed Directories: /usr/include/sasl, /usr/lib/java/classes/sasl, /usr/lib/sasl2, /usr/share/doc/cyrus-sasl-2.1.21, /var/lib/sasl

=== Short Descriptions ===

saslauthd: is the SASL authentication server.

sasldblistusers2: is used to list the users in the SASL password database sasldb2.

saslpasswd2: is used to set and delete a user's SASL password and mechanism specific secrets in the SASL password database sasldb2.

libsasl2.so: is a general purpose authentication library for server and client applications.

Cracklib

2006-10-10T03:20:56Z

218.244.247.185: /* Non-Multilib */

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| http://prdownloads.sourceforge.net/cracklib/cracklib-2.8.9.tar.gz
|-
!Download Source:
| http://prdownloads.sourceforge.net/cracklib/cracklib-words.gz
|-
!Download Source:
| http://www.linuxfromscratch.org/patches/blfs/svn/cracklib-2.8.9-heimdal-1.patch
|}

----

== Dependencies ==

=== Optional ===
* [[Python]]

== Non-Multilib ==

If desired, apply the Heimdal patch (note that with this patch the original library is not affected; this patch only creates an additional library used by the Heimdal password-checking routines):

patch -Np1 -i ../cracklib-2.8.9-heimdal-1.patch

Configure and compile the package:

./configure --prefix=/usr -with-default-dict=/lib/cracklib/pw_dict &&
make

Install the package:

make install &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
mv /usr/lib/$LIBNAME /lib &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f1 -d" "` &&
mv /usr/lib/$LIBNAME /lib &&
ln -sf ../../lib/$LIBNAME /usr/lib/libcrack.so

Install the dictionary:

install -m644 -D ../cracklib-words.gz /usr/share/dict/cracklib-words.gz
gunzip -f /usr/share/dict/cracklib-words.gz
ln -sf cracklib-words /usr/share/dict/words
echo $(hostname) >>/usr/share/dict/cracklib-extra-words &&
install -m755 -d /lib/cracklib
create-cracklib-dict /usr/share/dict/cracklib-words /usr/share/dict/cracklib-extra-words

== Multilib ==

If desired, apply the Heimdal patch (note that with this patch the original library is not affected; this patch only creates an additional library used by the Heimdal password-checking routines):

patch -Np1 -i ../cracklib-2.8.9-heimdal-1.patch

=== 32Bit ===

Configure and compile the package:

CC="gcc ${BUILD32}" USE_ARCH=32 ./configure --prefix=/usr -with-default-dict=/lib/cracklib/pw_dict &&
make

Install the package:

make install &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
mv /usr/lib/$LIBNAME /lib &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f1 -d" "` &&
mv /usr/lib/$LIBNAME /lib &&
ln -sf ../../lib/$LIBNAME /usr/lib/libcrack.so

=== N32 ===

Configure and compile the package:

CC="gcc ${BUILDN32}" USE_ARCH=n32 ./configure --prefix=/usr \
--libdir=/usr/lib32 -with-default-dict=/lib/cracklib/pw_dict &&
make

Install the package:

make install &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
mv /usr/lib/$LIBNAME /lib32 &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f1 -d" "` &&
mv /usr/lib/$LIBNAME /lib32 &&
ln -sf ../../lib/$LIBNAME /usr/lib32/libcrack.so

=== 64Bit ===

Configure and compile the package:

CC="gcc ${BUILDN64}" USE_ARCH=64 ./configure --prefix=/usr \
--libdir=/usr/lib64 -with-default-dict=/lib/cracklib/pw_dict &&
make

Install the package:

make install &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
mv /usr/lib/$LIBNAME /lib64 &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f1 -d" "` &&
mv /usr/lib/$LIBNAME /lib64 &&
ln -sf ../../lib/$LIBNAME /usr/lib64/libcrack.so

Install the dictionary:

install -m644 -D ../cracklib-words.gz /usr/share/dict/cracklib-words.gz
gunzip -f /usr/share/dict/cracklib-words.gz
ln -sf cracklib-words /usr/share/dict/words
install -m755 -d /lib/cracklib
create-cracklib-dict /usr/share/dict/cracklib-words /usr/share/dict/cracklib-extra-words

= Contents =

The CrackLib package contains a library used to enforce strong passwords by comparing user selected passwords to words in chosen word lists.

Installed Programs: cracklib-check, cracklib-format, cracklib-packer, cracklib-unpacker, create-cracklib-dict

Installed Libraries: libcrack.{so,a}, libcrack_heimdal.{so,a}, cracklibmodule.{so,a} Python Modules

Installed Directories: /lib/cracklib, /usr/share/dict, /usr/share/cracklib

=== Short Descriptions ===

create-cracklib-dict: is used to create the CrackLib dictionary from the given word list(s).

libcrack.{so,a}: provides a fast dictionary lookup method for strong password enforcement.

Cracklib

2006-10-10T03:13:55Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| http://prdownloads.sourceforge.net/cracklib/cracklib-2.8.9.tar.gz
|-
!Download Source:
| http://prdownloads.sourceforge.net/cracklib/cracklib-words.gz
|-
!Download Source:
| http://www.linuxfromscratch.org/patches/blfs/svn/cracklib-2.8.9-heimdal-1.patch
|}

----

== Dependencies ==

=== Optional ===
* [[Python]]

== Non-Multilib ==

If desired, apply the Heimdal patch (note that with this patch the original library is not affected; this patch only creates an additional library used by the Heimdal password-checking routines):

patch -Np1 -i ../cracklib-2.8.9-heimdal-1.patch

Configure and compile the package:

./configure --prefix=/usr -with-default-dict=/lib/cracklib/pw_dict &&
make

Install the package:

make install &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
mv /usr/lib/$LIBNAME /lib &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f1 -d" "` &&
mv /usr/lib/$LIBNAME /lib &&
ln -sf ../../lib/$LIBNAME /usr/lib/libcrack.so

Install the dictionary:

install -m644 -D ../cracklib-words.gz /usr/share/dict/cracklib-words.gz
gunzip -f /usr/share/dict/cracklib-words.gz
ln -sf cracklib-words /usr/share/dict/words
install -m755 -d /lib/cracklib
create-cracklib-dict /usr/share/dict/cracklib-words /usr/share/dict/cracklib-extra-words

== Multilib ==

If desired, apply the Heimdal patch (note that with this patch the original library is not affected; this patch only creates an additional library used by the Heimdal password-checking routines):

patch -Np1 -i ../cracklib-2.8.9-heimdal-1.patch

=== 32Bit ===

Configure and compile the package:

CC="gcc ${BUILD32}" USE_ARCH=32 ./configure --prefix=/usr -with-default-dict=/lib/cracklib/pw_dict &&
make

Install the package:

make install &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
mv /usr/lib/$LIBNAME /lib &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f1 -d" "` &&
mv /usr/lib/$LIBNAME /lib &&
ln -sf ../../lib/$LIBNAME /usr/lib/libcrack.so

=== N32 ===

Configure and compile the package:

CC="gcc ${BUILDN32}" USE_ARCH=n32 ./configure --prefix=/usr \
--libdir=/usr/lib32 -with-default-dict=/lib/cracklib/pw_dict &&
make

Install the package:

make install &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
mv /usr/lib/$LIBNAME /lib32 &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f1 -d" "` &&
mv /usr/lib/$LIBNAME /lib32 &&
ln -sf ../../lib/$LIBNAME /usr/lib32/libcrack.so

=== 64Bit ===

Configure and compile the package:

CC="gcc ${BUILDN64}" USE_ARCH=64 ./configure --prefix=/usr \
--libdir=/usr/lib64 -with-default-dict=/lib/cracklib/pw_dict &&
make

Install the package:

make install &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f2 -d" "` &&
mv /usr/lib/$LIBNAME /lib64 &&
LIBNAME=`cat lib/libcrack.la | grep library_names | cut -f2 -d"'" | cut -f1 -d" "` &&
mv /usr/lib/$LIBNAME /lib64 &&
ln -sf ../../lib/$LIBNAME /usr/lib64/libcrack.so

Install the dictionary:

install -m644 -D ../cracklib-words.gz /usr/share/dict/cracklib-words.gz
gunzip -f /usr/share/dict/cracklib-words.gz
ln -sf cracklib-words /usr/share/dict/words
install -m755 -d /lib/cracklib
create-cracklib-dict /usr/share/dict/cracklib-words /usr/share/dict/cracklib-extra-words

= Contents =

The CrackLib package contains a library used to enforce strong passwords by comparing user selected passwords to words in chosen word lists.

Installed Programs: cracklib-check, cracklib-format, cracklib-packer, cracklib-unpacker, create-cracklib-dict

Installed Libraries: libcrack.{so,a}, libcrack_heimdal.{so,a}, cracklibmodule.{so,a} Python Modules

Installed Directories: /lib/cracklib, /usr/share/dict, /usr/share/cracklib

=== Short Descriptions ===

create-cracklib-dict: is used to create the CrackLib dictionary from the given word list(s).

libcrack.{so,a}: provides a fast dictionary lookup method for strong password enforcement.

OpenSSH

2006-10-10T02:58:17Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| http://sunsite.ualberta.ca/pub/OpenBSD/OpenSSH/portable/openssh-4.4p1.tar.gz
|}

----

== Dependencies ==

=== Required ===
* [[OpenSSL]]
=== Optional ===
* [[Linux-Pam]]
* [[TCP Wrappers]]
* [[X Window System]]
* [[MIT krb5]] or [[Heimdal]]
* [[JDK]]
* [[NetTools]]
* [[Sysstat]]
* [[OpenSC]]
* [[libsectok]]

== OpenSSH User/Group & PrivSep Dir ==

groupadd -g 50 sshd &&
useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 50 sshd &&
install -v -m700 -d /var/lib/sshd &&
chown -v root:sys /var/lib/sshd

== Non-Multilib ==

Compile the package:

./configure --prefix=/usr --sysconfdir=/etc/ssh \
--libexecdir=/usr/sbin --with-md5-passwords \
--with-privsep-path=/var/lib/ssh &&
make

Install the package

make install &&
install -v -m755 -d /usr/share/doc/openssh-4.4p1 &&
install -v -m644 INSTALL LICENCE OVERVIEW README* WARNING.RNG \
/usr/share/doc/openssh-4.4p1

== Multilib ==
'''''This package does not provide any libraries so only one installation is needed.'''''

=== 32Bit ===

Compile the package:

CC="gcc ${BUILD32}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \
--libexecdir=/usr/sbin --with-md5-passwords \
--with-privsep-path=/var/lib/ssh &&
make

Install the package

make install &&
install -v -m755 -d /usr/share/doc/openssh-4.4p1 &&
install -v -m644 INSTALL LICENCE OVERVIEW README* WARNING.RNG \
/usr/share/doc/openssh-4.4p1

=== N32 ===

Compile the package:

install -v -m700 -d /var/lib/sshd &&
chown -v root:sys /var/lib/sshd &&
CC="gcc ${BUILDN32} ./configure --prefix=/usr --sysconfdir=/etc/ssh \
--libexecdir=/usr/sbin --libdir=/usr/lib32 --with-md5-passwords \
--with-privsep-path=/var/lib/ssh &&
make

Install the package

make install &&
install -v -m755 -d /usr/share/doc/openssh-4.4p1 &&
install -v -m644 INSTALL LICENCE OVERVIEW README* WARNING.RNG \
/usr/share/doc/openssh-4.4p1

=== 64Bit ===

Compile the package

CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \
--libexecdir=/usr/sbin --with-md5-passwords \
--with-privsep-path=/var/lib/ssh &&
make

Install the package

make install &&
install -v -m755 -d /usr/share/doc/openssh-4.4p1 &&
install -v -m644 INSTALL LICENCE OVERVIEW README* WARNING.RNG \
/usr/share/doc/openssh-4.4p1

== Configuring ==

=== BootScript ===

Install the init script included in the [[blfs-bootscripts]] package.

make install-sshd

Pkg-config

2006-10-10T02:27:19Z

218.244.247.185:

{| style="text-align: left; background-color: AliceBlue;"
|-
!Download Source:
| http://pkgconfig.freedesktop.org/releases/pkg-config-0.21.tar.gz
|-
!Download Source: (older)
| ftp://ftp.cross-lfs.org/pub/cblfs/conglomeration/pkg-config/pkg-config-0.20.tar.gz
|}

----

== Dependencies ==

== Non-Multilib ==

Compile the package:

./configure --prefix=/usr &&
make

Install the package

make install

== Multilib ==
'''''This package does not provide any libraries so only one installation is needed.'''''

=== 32Bit ===

Compile the package:

CC="gcc ${BUILD32}" ./configure --prefix=/usr --with-pc-path=/usr/share/pkgconfig &&
make

Install the package

make install

=== N32 ===

Compile the package:

CC="gcc ${BUILDN32}" ./configure --prefix=/usr --with-pc-path=/usr/share/pkgconfig &&
make

Install the package

make install

=== 64Bit ===

Compile the package:

CC="gcc ${BUILD64}" ./configure --prefix=/usr --with-pc-path=/usr/share/pkgconfig &&
make

Install the package

make install