From nobody Tue Jul 29 13:58:34 2025 X-Original-To: dev-commits-doc-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4brxlG70r8z63271 for ; Tue, 29 Jul 2025 13:58:34 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4brxlG6T1lz3Gs9; Tue, 29 Jul 2025 13:58:34 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1753797514; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=rdZ0fA9KTc7eXx+TFfdwvi29yDpBzJ+DCHGY20vOJak=; b=ciSTW3xUteUA1GCPynE0Ngxy6OhdkZyYW8U8TcA3mE3f2a+94C75HjcOvbwQVBdFEdd7f9 XMR4Eo0ttjoiyTC8MW78RfTrER6OLxNVGpGSP7TCnu2RrLibTFTFf0c98jMulRHgZtqn9C trMxw3d9LKIhB073iydYYmVc7cOzl5f2VFM1WpxUkaIA6C8pOMglYvL/kUfMNZ0HbCX69A UgP91EEUYT/habCD+MpvsrBL/XaNyVxhZklR4y4lb9+QuX5fCpRuMHRrCq3/OnJAMNZedc QmkwOKaciU0iCNYYgnHlL6RvrAUQbmJDGRobyslGAV3MPYa19S2uU0E3hCOF3g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1753797514; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=rdZ0fA9KTc7eXx+TFfdwvi29yDpBzJ+DCHGY20vOJak=; b=TcQRdTatQk6pUfkCM6UOxkGO6I8iueRP7LQaE//JGlG01Dco819lzXx8Q1TpezxIn5uNcE YVspjImSSof3lR3uFdVORdHDdLHGV66CUrywrPPOVofTUGAbGMxctT5C3gSIBtqp8/9ycn uS6hfXKnoEmI6zFHTkAZdvHWP+bVPswhzPmNpKlRngN77Q9gbMZlcEIBF9QlmvkLd5rV73 NlZYoCywunwgMickdeT/bqrXKyPnyIFheGT7Qmx4wBoBdETtHwDd70DRpdkV1J8rZM+e7T VCjwZK6UuslRFj+JN/ev37hHCS0fmZpy1+r0NHxcP+WPNSoXHTJIgLcaF9OYDQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1753797514; a=rsa-sha256; cv=none; b=M1Dg3pFEqViu0teXNxtJlVf0c1WSKFOdaXzqk+Cuwbng99fGo/tgLVhFAJgF0wFULx4+M/ 080XvIy/b75KNQbsl3teBIoBv2wXspzQISsBaz11uJrREbHngl3xdWavvARS8hBh8vXiXn SB2qTKV1K3FFVMLEO7XZBfYh1vJ8YtCgXmehXv61tZz/dZ9SFQY045il/YQps1w/eG2FbM 9V6mkY0TPeuw/NM2n04jo8HFBsHPR0d0kCsEz5VA4TDZd99GYWubv08FPJjzXeaXQWsZpW uMb+f+zwpTjr4W0hYwmsVdIQp1Uvef1lpbHUp0aNiTYVaJgRfYk2GeSwSK1Mrg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4brxlG5xF4zZZg; Tue, 29 Jul 2025 13:58:34 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 56TDwYwd065892; Tue, 29 Jul 2025 13:58:34 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 56TDwYOt065889; Tue, 29 Jul 2025 13:58:34 GMT (envelope-from git) Date: Tue, 29 Jul 2025 13:58:34 GMT Message-Id: <202507291358.56TDwYOt065889@gitrepo.freebsd.org> To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org From: Lorenzo Salvadore Subject: git: db6794a5d6 - main - Status/2025Q2/mit_krb5.adoc: Add report List-Id: Commit messages for all branches of the doc repository List-Archive: https://lists.freebsd.org/archives/dev-commits-doc-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-doc-all@freebsd.org Sender: owner-dev-commits-doc-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: salvadore X-Git-Repository: doc X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: db6794a5d68d3418ad6f0cd4af526cd730b35e4a Auto-Submitted: auto-generated The branch main has been updated by salvadore: URL: https://cgit.FreeBSD.org/doc/commit/?id=db6794a5d68d3418ad6f0cd4af526cd730b35e4a commit db6794a5d68d3418ad6f0cd4af526cd730b35e4a Author: Cy Schubert AuthorDate: 2025-07-29 10:30:31 +0000 Commit: Lorenzo Salvadore CommitDate: 2025-07-29 13:57:27 +0000 Status/2025Q2/mit_krb5.adoc: Add report Differential Revision: https://reviews.freebsd.org/D50999 --- .../en/status/report-2025-04-2025-06/mit_krb5.adoc | 25 ++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/website/content/en/status/report-2025-04-2025-06/mit_krb5.adoc b/website/content/en/status/report-2025-04-2025-06/mit_krb5.adoc new file mode 100644 index 0000000000..88be806cfc --- /dev/null +++ b/website/content/en/status/report-2025-04-2025-06/mit_krb5.adoc @@ -0,0 +1,25 @@ +=== MIT Kerberos Import into FreeBSD + +Contact: Cy Schubert + +The FreeBSD Foundatation was approached to import MIT KRB5 into FreeBSD with the intent to replace our aging Heimdal. + +The Enterprise Working Group made a request to the Foundation to replace Heimdal with MIT KRB5. + +This is the first report for this project. + +Tasks completed: + +* MIT KRB5 has been imported into FreeBSD 15-CURRENT. +* The WITH_MITKRB5 option is disabled until a successful ports exp-run is complete. + +Additional remaining tasks: + +* Fix port build errors identified by a ports exp-run. +* Produce a writup of the new Kerberos. +* Determine if migration of the Heimdal database to an MIT database is possible. + (At the moment this appears unlikely due to the age of our ancient Heimdal and the lack of support for old crypto in newer Heimdal MIT). +* Produce Heimdal Kerberos database to MIT database migration documentation (if possible). +* (Optional) Develop and discuss the import and migration options at the next BSDCan. + +Sponsor: The FreeBSD Foundation