Date: Tue, 26 Aug 2025 09:35:39 -0700 From: Gleb Smirnoff <glebius@freebsd.org> To: Rick Macklem <rick.macklem@gmail.com>, Cy Schubert <Cy.Schubert@cschubert.com> Cc: freebsd-current@freebsd.org Subject: Re: heimdal -> MIT kdc migration Message-ID: <aK3iW189fZ2_xSyB@cell.glebi.us> In-Reply-To: <aK3TQbWXkr_r24sW@cell.glebi.us> References: <aKwYB4d6l4ze-yXA@cell.glebi.us> <aKxcwqKqW3ZpA3Po@cell.glebi.us> <56dd78c6-a53a-4c4c-989a-335cc5fed405@FreeBSD.org> <CAM5tNy5sNv8z0zW2ZFt%2B9=ytUpjGVudsYbcSC2mQSudi3iWSfQ@mail.gmail.com> <CAM5tNy73KwR-DBqc28bqRPKqW7UqXN7RXYB=p-Za5Lsoy9jFcw@mail.gmail.com> <1578a4eac5402d0496d8989e5258bc78@Leidinger.net> <CAM5tNy42Xvj8M%2Bq4qDO35T31wWLO-2pC9H0_V0rVM2uZmSL2RA@mail.gmail.com> <CAM5tNy5m8tEaivQdC4G-=VNpf3ng6JcdpeJKvxA8oM==OdbMUw@mail.gmail.com> <aK3TQbWXkr_r24sW@cell.glebi.us>
index | next in thread | previous in thread | raw e-mail
On Tue, Aug 26, 2025 at 08:31:13AM -0700, Gleb Smirnoff wrote: T> On Tue, Aug 26, 2025 at 08:13:26AM -0700, Rick Macklem wrote: T> R> Ok. If you install FreeBSD-13.5 and then "pkg install heimdal", you get a T> R> working Heimdal-7.8 in ports. T> R> T> R> Now, I have another challenge. Fixing the master passwords. T> R> I'll work on it later to-day. T> T> I have applied two commits from Heimdal from 2012 that add 'kadmin dump -f MIT' T> feature to our base heimdal and polished them to compile. So far it doesn't T> work yet, either create an empty dump or create a core dump, instead of T> database dump :) I'll see how difficult it is going to further resolve that to T> a working condition. If I succeed, then having 'dump -f MIT' in base without T> any ports would be the best solution. Can also be merged to FreeBSD 14.4. Good news. In the above paragraph I was testing my change incorrectly - threw the new binary on a system running unpatched libraries. When run correctly, it successfully produced something that looks like a correct dump in MIT format. I haven't yet tried to load it into MIT kdc yet, though. I will finalize the branch promptly and share it. The above experience also indicated that I need to do a library version bump. -- Gleb Smirnoffhelp
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?aK3iW189fZ2_xSyB>