sys-auth/pambase: wire up sssd

Closes: https://bugs.gentoo.org/726050 Signed-off-by: Sam James <sam@gentoo.org>
2026-09-23 16:49:10 -07:00 · 2024-01-22 14:01:34 +00:00
parent efb4ffbb24
commit 6b19951c8e
11 changed files with 19 additions and 3 deletions
--- a/profiles/arch/alpha/package.use.mask
+++ b/profiles/arch/alpha/package.use.mask
@@ -317,6 +317,7 @@ dev-db/percona-server cjk
 # Mikle Kolyada <zlogene@gentoo.org> (2018-10-05)
 # Not keyworded (see bug #540540c#8)
 app-admin/sudo sssd
+sys-auth/pambase sssd

 # Andreas Sturmlechner <asturm@gentoo.org> (2018-09-30)
 # Optional dependency blocking security cleanup, bug #627316
--- a/profiles/arch/amd64/package.use.stable.mask
+++ b/profiles/arch/amd64/package.use.stable.mask
@@ -105,6 +105,7 @@ media-libs/opencv contribcvv contribhdf contribsfm contribxfeatures2d gflags glo
 # Mikle Kolyada <zlogene@gentoo.org> (2018-11-07)
 # unmask sssd for sudo
 app-admin/sudo -sssd
+sys-auth/pambase -sssd

 # Thomas Deutschmann <whissi@gentoo.org> (2018-06-01)
 net-analyzer/wireshark -doc
--- a/profiles/arch/ia64/package.use.mask
+++ b/profiles/arch/ia64/package.use.mask
@@ -16,6 +16,7 @@ dev-lang/php capstone
 # David Seifert <soap@gentoo.org> (2023-12-30)
 # sys-auth/sssd not keyworded here anymore
 app-admin/sudo sssd
+sys-auth/pambase sssd

 # Mart Raudsepp <leio@gentoo.org> (2023-12-25)
 # sys-apps/xdg-desktop-portal not keyworded here yet
--- a/profiles/arch/loong/package.use.mask
+++ b/profiles/arch/loong/package.use.mask
@@ -184,6 +184,7 @@ media-video/ffmpeg libilbc libtesseract
 # WANG Xuerui <xen0n@gentoo.org> (2022-12-05)
 # sys-auth/sssd isn't keyworded here yet
 app-admin/sudo sssd
+sys-auth/pambase sssd

 # WANG Xuerui <xen0n@gentoo.org> (2022-12-04)
 # neither app-text/ronn or app-text/ronn-ng can be built with
--- a/profiles/arch/s390/package.use.mask
+++ b/profiles/arch/s390/package.use.mask
@@ -123,6 +123,7 @@ app-crypt/pinentry efl
 # Sam James <sam@gentoo.org> (2022-04-24)
 # sssd not keyworded here
 app-admin/sudo sssd
+sys-auth/pambase sssd

 # Sam James <sam@gentoo.org> (2022-04-24)
 # app-crypt/dieharder and dev-libs/softhsm:2 unkeyworded here
--- a/profiles/arch/x86/package.use.stable.mask
+++ b/profiles/arch/x86/package.use.stable.mask
@@ -1,4 +1,4 @@
-# Copyright 1999-2023 Gentoo Authors
+# Copyright 1999-2024 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2

 # When you add an entry to the top of this file, add your name, the date, and
@@ -97,6 +97,7 @@ media-libs/opencv contribcvv contribhdf contribsfm contribxfeatures2d gflags glo
 # Mikle Kolyada <zlogene@gentoo.org> (2018-11-07)
 # unmask sssd for sudo
 app-admin/sudo -sssd
+sys-auth/pambase -sssd

 # Thomas Deutschmann <whissi@gentoo.org> (2018-06-01)
 net-analyzer/wireshark -doc
--- a/profiles/base/package.use.stable.mask
+++ b/profiles/base/package.use.stable.mask
@@ -168,6 +168,7 @@ media-plugins/grilo-plugins chromaprint
 # Mikle Kolyada <zlogene@gentoo.org> (2018-11-07)
 # sssd is only stable for amd64 and x86
 app-admin/sudo sssd
+sys-auth/pambase sssd

 # Thomas Deutschmann <whissi@gentoo.org> (2018-06-01)
 # Needs dev-ruby/asciidoctor which has a lot of unstable deps
--- a/profiles/features/musl/package.use.mask
+++ b/profiles/features/musl/package.use.mask
@@ -52,6 +52,7 @@ dev-scheme/scm readline
 # Sam James <sam@gentoo.org> (2022-10-04)
 # sys-auth/sssd is masked on musl
 app-admin/sudo sssd
+sys-auth/pambase sssd

 # Sam James <sam@gentoo.org> (2022-10-04)
 # sys-libs/libsmbios is masked on musl
--- a/sys-auth/pambase/metadata.xml
+++ b/sys-auth/pambase/metadata.xml
@@ -67,6 +67,10 @@
 			will not be compatible with systems using an earlier glibc
 			version.
 		</flag>
+		<flag name="sssd">
+			Add System Security Services Daemon (<pkg>sys-auth/sssd</pkg>) support
+			via pam_sss.
+		</flag>
 		<flag name="yescrypt">
 			Switch Linux-PAM's pam_unix module to use yescrypt for passwords hashes rather than MD5
 		</flag>
--- a/sys-auth/pambase/pambase-20240119.ebuild
+++ b/sys-auth/pambase/pambase-20240119.ebuild
@@ -24,7 +24,7 @@ fi

 LICENSE="MIT"
 SLOT="0"
-IUSE="caps debug elogind gnome-keyring homed minimal mktemp +nullok pam_krb5 pam_ssh +passwdqc pwhistory pwquality securetty selinux +sha512 systemd yescrypt"
+IUSE="caps debug elogind gnome-keyring homed minimal mktemp +nullok pam_krb5 pam_ssh +passwdqc pwhistory pwquality securetty selinux +sha512 sssd systemd yescrypt"

 RESTRICT="binchecks"

@@ -57,6 +57,7 @@ RDEPEND="
 	homed? ( sys-apps/systemd[homed] )
 	systemd? ( sys-apps/systemd[pam] )
 	yescrypt? ( sys-libs/libxcrypt[system] )
+	sssd? ( sys-auth/sssd )
 "
 BDEPEND="
 	$(python_gen_any_dep '
@@ -88,6 +89,7 @@ src_configure() {
 		$(usex sha512 '--sha512' '') \
 		$(usex systemd '--systemd' '') \
 		$(usex yescrypt '--yescrypt' '') \
+		$(usex sssd '--sssd' '') \
 	|| die
 }

--- a/sys-auth/pambase/pambase-999999999.ebuild
+++ b/sys-auth/pambase/pambase-999999999.ebuild
@@ -24,7 +24,7 @@ fi

 LICENSE="MIT"
 SLOT="0"
-IUSE="caps debug elogind gnome-keyring homed minimal mktemp +nullok pam_krb5 pam_ssh +passwdqc pwhistory pwquality securetty selinux +sha512 systemd yescrypt"
+IUSE="caps debug elogind gnome-keyring homed minimal mktemp +nullok pam_krb5 pam_ssh +passwdqc pwhistory pwquality securetty selinux +sha512 sssd systemd yescrypt"

 RESTRICT="binchecks"

@@ -57,6 +57,7 @@ RDEPEND="
 	homed? ( sys-apps/systemd[homed] )
 	systemd? ( sys-apps/systemd[pam] )
 	yescrypt? ( sys-libs/libxcrypt[system] )
+	sssd? ( sys-auth/sssd )
 "
 BDEPEND="
 	$(python_gen_any_dep '
@@ -88,6 +89,7 @@ src_configure() {
 		$(usex sha512 '--sha512' '') \
 		$(usex systemd '--systemd' '') \
 		$(usex yescrypt '--yescrypt' '') \
+		$(usex sssd '--sssd' '') \
 	|| die
 }