Try USES=samba

security/sssd2/Makefile

@@ -1,6 +1,6 @@
 PORTNAME=	sssd
 PORTVERSION=	2.9.4
-PORTREVISION=	7
+PORTREVISION=	6
 CATEGORIES=	security
 PKGNAMESUFFIX=	2
 
@@ -34,20 +34,13 @@ LIB_DEPENDS=	libcares.so:dns/c-ares \
 		libjansson.so:devel/jansson \
 		libjose.so:net/jose \
 		libkrb5.so:security/krb5 \
-		libldb.so:databases/ldb25 \
-		libndr-krb5pac.so:net/samba416 \
-		libndr-nbt.so:net/samba416 \
-		libndr-standard.so:net/samba416 \
-		libndr.so:net/samba416 \
 		libnfs.so:net/libnfs \
 		libnss3.so:security/nss \
 		libp11-kit.so:security/p11-kit \
 		libpcre2-posix.so:devel/pcre2 \
 		libplds4.so:devel/nspr \
 		libpopt.so:devel/popt \
-		libsamba-util.so:net/samba416 \
 		libsasl2.so:security/cyrus-sasl2 \
-		libsmbclient.so:net/samba416 \
 		libtalloc.so:devel/talloc \
 		libtdb.so:databases/tdb \
 		libtevent.so:devel/tevent \
@@ -57,7 +50,8 @@ LIB_DEPENDS=	libcares.so:dns/c-ares \
 RUN_DEPENDS=	cyrus-sasl-gssapi>0:security/cyrus-sasl2-gssapi
 
 USES=	autoreconf cpe gettext gmake gssapi:bootstrap,flags,mit iconv ldap \
-	libtool localbase:ldflags pathfix pkgconfig python:3.9+ shebangfix ssl
+	libtool localbase:ldflags pathfix pkgconfig python:3.9+ shebangfix ssl \
+	samba
 
 USE_LDCONFIG=	yes
 GNU_CONFIGURE=	yes

security/sssd2/files/patch-src_config_cfg__rules.ini

@@ -1,77 +0,0 @@
---- src/config/cfg_rules.ini.orig	2024-04-24 13:37:15 UTC
-+++ src/config/cfg_rules.ini
-@@ -11,15 +11,15 @@ section_re = ^prompting/password$
- section = kcm
- section = session_recording
- section_re = ^prompting/password$
--section_re = ^prompting/password/[^/\@]\+$
-+section_re = ^prompting/password/[^/\@]\{1,\}$
- section_re = ^prompting/2fa$
--section_re = ^prompting/2fa/[^/\@]\+$
-+section_re = ^prompting/2fa/[^/\@]\{1,\}$
- section_re = ^prompting/passkey$
--section_re = ^prompting/passkey/[^/\@]\+$
--section_re = ^domain/[^/\@]\+$
--section_re = ^domain/[^/\@]\+/[^/\@]\+$
--section_re = ^application/[^/\@]\+$
--section_re = ^certmap/[^/\@]\+/[^/\@]\+$
-+section_re = ^prompting/passkey/[^/\@]\{1,\}$
-+section_re = ^domain/[^/\@]\{1,\}$
-+section_re = ^domain/[^/\@]\{1,\}/[^/\@]\{1,\}$
-+section_re = ^application/[^/\@]\{1,\}$
-+section_re = ^certmap/[^/\@]\{1,\}/[^/\@]\{1,\}$
- 
- 
- [rule/allowed_sssd_options]
-@@ -329,13 +329,13 @@ validator = ini_allowed_options
- 
- [rule/allowed_prompting_password_subsec_options]
- validator = ini_allowed_options
--section_re = ^prompting/password/[^/\@]\+$
-+section_re = ^prompting/password/[^/\@]\{1,\}$
- 
- option = password_prompt
- 
- [rule/allowed_prompting_2fa_subsec_options]
- validator = ini_allowed_options
--section_re = ^prompting/2fa/[^/\@]\+$
-+section_re = ^prompting/2fa/[^/\@]\{1,\}$
- 
- option = single_prompt
- option = first_prompt
-@@ -343,7 +343,7 @@ validator = ini_allowed_options
- 
- [rule/allowed_prompting_passkey_subsec_options]
- validator = ini_allowed_options
--section_re = ^prompting/passkey/[^/\@]\+$
-+section_re = ^prompting/passkey/[^/\@]\{1,\}$
- 
- option = interactive
- option = interactive_prompt
-@@ -352,7 +352,7 @@ validator = ini_allowed_options
- 
- [rule/allowed_domain_options]
- validator = ini_allowed_options
--section_re = ^\(domain\|application\)/[^/]\+$
-+section_re = ^(domain|application)/[^/]\{1,\}$
- 
- option = debug
- option = debug_level
-@@ -810,7 +810,7 @@ validator = ini_allowed_options
- 
- [rule/allowed_subdomain_options]
- validator = ini_allowed_options
--section_re = ^domain/[^/\@]\+/[^/\@]\+$
-+section_re = ^domain/[^/\@]+/[^/\@]\{1,\}$
- 
- option = ldap_search_base
- option = ldap_user_search_base
-@@ -832,7 +832,7 @@ validator = ini_allowed_options
- 
- [rule/allowed_certmap_options]
- validator = ini_allowed_options
--section_re = ^certmap/[^/\@]\+/[^/\@]\+$
-+section_re = ^certmap/[^/\@]+/[^/\@]\{1,\}$
- 
- option = matchrule
- option = maprule