Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 26 Aug 2025 09:56:10 -0700
From:      Rick Macklem <rick.macklem@gmail.com>
To:        Gleb Smirnoff <glebius@freebsd.org>
Cc:        Alexander Leidinger <Alexander@leidinger.net>, Kyle Evans <kevans@freebsd.org>,  freebsd-current@freebsd.org, src-committers@freebsd.org
Subject:   Re: heimdal -> MIT kdc migration Was: August 2025 stabilization week
Message-ID:  <CAM5tNy7_KvG6zVg%2BDLqAySdoUJw1qrxJxTBGARJ_kHxE-trevQ@mail.gmail.com>
In-Reply-To: <aK3TQbWXkr_r24sW@cell.glebi.us>
References:  <aKwYB4d6l4ze-yXA@cell.glebi.us> <aKxcwqKqW3ZpA3Po@cell.glebi.us> <56dd78c6-a53a-4c4c-989a-335cc5fed405@FreeBSD.org> <CAM5tNy5sNv8z0zW2ZFt%2B9=ytUpjGVudsYbcSC2mQSudi3iWSfQ@mail.gmail.com> <CAM5tNy73KwR-DBqc28bqRPKqW7UqXN7RXYB=p-Za5Lsoy9jFcw@mail.gmail.com> <1578a4eac5402d0496d8989e5258bc78@Leidinger.net> <CAM5tNy42Xvj8M%2Bq4qDO35T31wWLO-2pC9H0_V0rVM2uZmSL2RA@mail.gmail.com> <CAM5tNy5m8tEaivQdC4G-=VNpf3ng6JcdpeJKvxA8oM==OdbMUw@mail.gmail.com> <aK3TQbWXkr_r24sW@cell.glebi.us>

index | next in thread | previous in thread | raw e-mail

On Tue, Aug 26, 2025 at 8:31 AM Gleb Smirnoff <glebius@freebsd.org> wrote:
>
> On Tue, Aug 26, 2025 at 08:13:26AM -0700, Rick Macklem wrote:
> R> Ok. If you install FreeBSD-13.5 and then "pkg install heimdal", you get a
> R> working Heimdal-7.8 in ports.
> R>
> R> Now, I have another challenge. Fixing the master passwords.
> R> I'll work on it later to-day.
Ok, I finally got the database to move over, (using Heimdal-7.8) but
the passwords didn't work.
kinit would complain that the password was wrong before it even prompted
for the password.

Doing a change_password in kadmin.local made it work, but changing
everyone's password would be a pain.

rick

>
> I have applied two commits from Heimdal from 2012 that add 'kadmin dump -f MIT'
> feature to our base heimdal and polished them to compile.  So far it doesn't
> work yet, either create an empty dump or create a core dump, instead of
> database dump :) I'll see how difficult it is going to further resolve that to
> a working condition. If I succeed, then having 'dump -f MIT' in base without
> any ports would be the best solution.  Can also be merged to FreeBSD 14.4.
>
> --
> Gleb Smirnoff


help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAM5tNy7_KvG6zVg%2BDLqAySdoUJw1qrxJxTBGARJ_kHxE-trevQ>