Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Aug 2025 13:24:09 +0100
From:      Lexi Winter <ivy@freebsd.org>
To:        current@freebsd.org, ports@freebsd.org
Subject:   USES=gssapi:base and MIT Kerberos on 15.0
Message-ID:  <aJng6THyuqAvROIB@freefall.freebsd.org>

index | next in thread | raw e-mail

[-- Attachment #1 --]
hello,

i've just landed 0c13e9c3c464[0] in src that installs the pkgconfig data
for MIT Kerberos.  a related ports commit, d30d5dfae517[1], uses these
pkgconfig files to detect MIT Kerberos when using USES=gssapi:base.

[0] https://cgit.freebsd.org/src/commit/?id=0c13e9c3c4647d16d3490ff1a6d7c33b39c28260
[1] https://cgit.freebsd.org/ports/commit/?id=d30d5dfae517a74a4a9e2a22e1cf110594bcb43d

as a result:

- if you're building ports that use base GSSAPI on 15.0 and you have
  MIT Kerberos enabled (this is the default), you should update to
  src 0c13e9c3c464 or later.

- it is no longer necessary for ports to patch pkgconfig files that
  add a dependency on mit-krb5 or mit-krb5-gssapi.  the equivalent
  patch for Heimdal is still required as nothing has changed there.

notably, this fixes ports that use libcurl.pc when ftp/curl is built
with base GSSAPI.

also, if you maintain ports that need to determine whether base GSSAPI
is MIT or Heimdal, you should test for /usr/libdata/pkgconfig/mit-krb5.pc
to do that, and not e.g. /usr/libexec/krb5kdc which might not be
installed on pkgbase systems.

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQSyjTg96lp3RifySyn1nT63mIK/YAUCaJng5QAKCRD1nT63mIK/
YP42AQCHG80mgzpt39sAAdDZHnJWvN3TYJa5lrBi+v1kaHAbbQEAg+zD96doZFDy
N9c3i7dl/PrrOSiPe8UfGVamJsFsKg0=
=77aX
-----END PGP SIGNATURE-----
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?aJng6THyuqAvROIB>