Update to 7.1.0. Changes include:

- hcrypto is now thread safe on all platforms and as much as possible
  hcrypto now uses the operating system's preferred crypto
  implementation ensuring that optimized hardware assisted
  implementations of AES-NI are used.

- RFC 6113 Generalized Framework for Kerberos Pre-Authentication
  (FAST).

- Hierarchical capath support

- iprop has been revamped to fix a number of race conditions that
  could lead to inconsistent replication.

- The KDC process now uses a multi-process model improving resiliency
  and performance.

- AES Encryption with HMAC-SHA2 for Kerberos 5
  draft-ietf-kitten-aes-cts-hmac-sha2-11

- Moved kadmin and ktutil to /usr/bin

- Stricter fcache checks (see fcache_strict_checking krb5.conf setting)

- Removed legacy applications: ftp, kx, login, popper, push, rcp, rsh,
  telnet, xnlock

1 files changed, 20 insertions, 0 deletions

diff --git a/security/heimdal/files/patch-appl-su-Makefile.in b/security/heimdal/files/patch-appl-su-Makefile.in
new file mode 100644
index 000000000000..ba9144d3681e
--- /dev/null
+++ b/security/heimdal/files/patch-appl-su-Makefile.in
@@ -0,0 +1,20 @@
+--- appl/su/Makefile.in.orig	2017-01-03 13:45:01 UTC
++++ appl/su/Makefile.in
+@@ -152,12 +152,16 @@ am__installdirs = "$(DESTDIR)$(bindir)" 
+ PROGRAMS = $(bin_PROGRAMS)
+ am_su_OBJECTS = su.$(OBJEXT)
+ su_OBJECTS = $(am_su_OBJECTS)
+-su_LDADD = $(LDADD)
++su_LDADD = $(LDADD) \
++	$(LIB_heimbase) \
++	$(top_builddir)/lib/hx509/libhx509.la
+ am__DEPENDENCIES_1 =
+ @NO_AFS_FALSE@am__DEPENDENCIES_2 =  \
+ @NO_AFS_FALSE@	$(top_builddir)/lib/kafs/libkafs.la \
+ @NO_AFS_FALSE@	$(am__DEPENDENCIES_1)
+ su_DEPENDENCIES = $(am__DEPENDENCIES_2) \
++	$(LIB_heimbase) \
++	$(top_builddir)/lib/hx509/libhx509.la \
+ 	$(top_builddir)/lib/krb5/libkrb5.la $(am__DEPENDENCIES_1) \
+ 	$(top_builddir)/lib/asn1/libasn1.la $(am__DEPENDENCIES_1)
+ AM_V_lt = $(am__v_lt_@AM_V@)