freebsd security - Mar 2015 - Missind #defines in /usr/include/gssapi/gssapi.h?

Hello list,

Currently, installing the Python gssapi module (sudo pip install python-gssapi)
fails (on FreeBSD 10.1, at least) because a lot of #defines are missing from
/usr/include/gssapi/gssapi.h (installed from /usr/src/include/gssapi/gssapi.h)
compared to /usr/src/crypto/heimdal/lib/gssapi/gssapi/gssapi.h, e.g.:

#define GSS_C_AF_INET6      24

Is there any reason these #defines are not present? Adding the missing ones let
the python-gssapi installation complete.


Thanks,
Erik

On Thu, 5 Mar 2015, Erik Cederstrand wrote:
> Hello list,
>
> Currently, installing the Python gssapi module (sudo pip install
python-gssapi) fails (on FreeBSD 10.1, at least) because a lot of #defines are
missing from /usr/include/gssapi/gssapi.h (installed from
/usr/src/include/gssapi/gssapi.h) compared to
/usr/src/crypto/heimdal/lib/gssapi/gssapi/gssapi.h, e.g.:
>
> #define GSS_C_AF_INET6      24
>
> Is there any reason these #defines are not present? Adding the missing ones
let the python-gssapi installation complete.
No value has been assigned to the symbol GSS_C_AF_INET6 in a
standards-track IETF document, so one might argue that its absence is the
correct behavior, as unfortunate as that may be.

Apparently it has been in the Heimdal tree since 1999, though (!).  Since
FreeBSD is basically stuck with the Heimdal implementation for POLA
reasons, it would probably be okay to synchronize the installed version
with Heimdal's version.

My understanding was that python-gssapi was intended to support both
Heimdal and MIT implementations, so given that MIT (correctly) does not
provide a GSS_C_AF_INET6 symbol, I am somewhat surprised that
python-gssapi cannot cope with its absence.

-Ben Kaduk