Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 7 Aug 2025 18:50:43 -0700
From:      Rick Macklem <rick.macklem@gmail.com>
To:        Rick Macklem <rmacklem@freebsd.org>, src-committers@freebsd.org,  dev-commits-src-all@freebsd.org, dev-commits-src-main@freebsd.org
Subject:   Re: git: e3ac01e18eb3 - main - kgssapi: Fix the kgssapi so that it can use MIT Kerberos
Message-ID:  <CAM5tNy4Fvv-aocbgGxNcDqrT0MUcqt9A1tQAn_kc2MtNKnqkAQ@mail.gmail.com>
In-Reply-To: <aJVThLBnHEsBnbW1@freefall.freebsd.org>
References:  <202508072105.577L5nA0081105@gitrepo.freebsd.org> <aJVThLBnHEsBnbW1@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Aug 7, 2025 at 6:33=E2=80=AFPM Lexi Winter <ivy@freebsd.org> wrote:
>
> CAUTION: This email originated from outside of the University of Guelph. =
Do not click links or open attachments unless you recognize the sender and =
know the content is safe. If in doubt, forward suspicious emails to IThelp@=
uoguelph.ca.
>
>
>
> ---------- Forwarded message ----------
> From: Lexi Winter <ivy@freebsd.org>
> To: Rick Macklem <rmacklem@freebsd.org>
> Cc: src-committers@freebsd.org, dev-commits-src-all@freebsd.org, dev-comm=
its-src-main@freebsd.org
> Bcc:
> Date: Fri, 8 Aug 2025 02:31:48 +0100
> Subject: Re: git: e3ac01e18eb3 - main - kgssapi: Fix the kgssapi so that =
it can use MIT Kerberos
> Rick Macklem:
> >     It also modifies the Makefile so that the gssd is only built
> >     when MK_KERBEROS_SUPPORT !=3D "no", since it is useless without
> >     Kerberos.
>
> currently the init script is conditional on MK_GSSAPI.  should this be
> changed to MK_KERBEROS_SUPPORT as well?  (see libexec/rc/rc.d/Makefile)
No idea.

The change looks like:
.if ${MK_KERBEROS_SUPPORT} !=3D "no"
SUBDIR.${MK_GSSAPI}+=3D  gssd
.endif

I think that means it depends on both of them.
(To be honest, I doubt anyone ever fiddles with MK_GSSAPI?)

I think that, long ago, someone thought there might be a use
for the gssd when Kerberos isn't being used (in theory there
can be other mechanisms, but Kerberos is the only one ever
implemented).

rick



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAM5tNy4Fvv-aocbgGxNcDqrT0MUcqt9A1tQAn_kc2MtNKnqkAQ>