From nobody Wed Apr 3 17:35:32 2024 X-Original-To: ports-bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4V8sN70Yk1z5FTpT for ; Wed, 3 Apr 2024 17:35:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4V8sN66bsgz42jc for ; Wed, 3 Apr 2024 17:35:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1712165734; a=rsa-sha256; cv=none; b=Z1tvGLokRxH4hIH6d3MQvUmPFFlUlg27/v64RYK1TKDkiBpHeGK4boUua7hcC0oU7JQ7nE gVe3veqLvnvvoa8A0KvLMIc3YlNAzQfqfPX21hA13Vd4uqquHpTyvZtiH/hqInr/K8oshq fx9yXU92d6EUlMVgI7Km81wd/tKZ2bwfVY2pld9TwtlKZYmgkZu6HDimkYodm7QpMpFhqt QuZBMtVeBJ7egg4PXrmsTi999xeMwIXaJcxgsaCw+FwM4M/5V8tSa8Yy0SsYxJc/uTk+h8 hQeA8pe6mmKOIGyhwTzNZzDtZumpuHro3HmPZ1U1hoUWAFtkELToXaNUO1R4zw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1712165734; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=6HBCoyFe2COuLW7wakPXTRf8uMfjYibZeVYcirCuUuw=; b=r7mlEColpjm6zuCsr3Gis/8TwmyqlOMEg+Z5RVd9QebVmwqOwmRwXZ4CwO//owy2lGzHfB HEW83Zjt0434+RsFGrLDE0Gz7xDUpANCXiFkqI7oXFYQxFXmdP7zhXn17Y3dOTeFGIe9X/ OgReCor2C9c7IrRqJIHUdSuC6PH4H3plYgPae0PikYk1gnvkJKF8HrJGEiD+EkycfMn3Pl PQ6B49EUhvc2q3sK/2NNC56QdJC34u5VWKHGZUL+mLw/8UmJ3AWK4uZCqFxRcla2zVhs3e IeAIu+j4OjSLvlQDG2mSAVvMoklSQPq4Jbj8I2SXUeN8CNKmczMNMIrdxyliPA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4V8sN66D5vzj6C for ; Wed, 3 Apr 2024 17:35:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 433HZYpD050525 for ; Wed, 3 Apr 2024 17:35:34 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 433HZYmd050517 for ports-bugs@FreeBSD.org; Wed, 3 Apr 2024 17:35:34 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 277650] Remove supporting linking against Heimdal from base (GSSAPI_BASE) Date: Wed, 03 Apr 2024 17:35:32 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: 14.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: portmaster@bsdforge.com X-Bugzilla-Status: Closed X-Bugzilla-Resolution: FIXED X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: cy@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Ports bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-ports-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports-bugs@freebsd.org X-BeenThere: freebsd-ports-bugs@freebsd.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D277650 --- Comment #15 from Chris Hutchinson --- (In reply to Siva Mahadevan from comment #8) Sorry, I'm coming late to this discussion... > (e.g. sshd, , why not force users to build those applications from ports > and set the corresponding OPTIONS to enable GSSAPI/kerberos support? Because when FreeBSD is installed. Users should have a reasonably complete system that MUST provide reasonably secure (encrypted) communication. This includes using encrypted channels to add to, or upgrade their system. (s)ftp,telnet, and ssh require this. Regardless of the outcome of this GSSAPI discussion here. The above must be guaranteed. I'm guessing the sec team wouldn't have it any other way. :) --=20 You are receiving this mail because: You are on the CC list for the bug.=