Date: Mon, 6 Oct 2025 09:55:18 +0100 From: Lexi Winter <ivy@freebsd.org> To: Cy Schubert <Cy.Schubert@cschubert.com> Cc: Rick Macklem <rick.macklem@gmail.com>, FreeBSD-STABLE Mailing List <freebsd-stable@freebsd.org>, Gleb Smirnoff <glebius@freebsd.org>, Cy Schubert <cy@freebsd.org> Subject: Re: RFC: Heimdal FreeBSD KDC users Message-ID: <aOOD9mn0Mnke5Pem@amaryllis.le-fay.org> In-Reply-To: <20251006082708.83FA51876@slippy.cwsent.com> References: <CAM5tNy4BPvMd2Uv_w_qd8oU0sZJ8AwfwWemrE78%2BtuRgX9Dy7g@mail.gmail.com> <aOMTpQ43qBRdRyHz@amaryllis.le-fay.org> <20251006082708.83FA51876@slippy.cwsent.com>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] Cy Schubert wrote in <20251006082708.83FA51876@slippy.cwsent.com>: > In message <aOMTpQ43qBRdRyHz@amaryllis.le-fay.org>, Lexi Winter writes: > > would it make sense to provide this version of kadmin (+ whatever > > else is required) as a self-contained port, so people could more > > easily install it for a one-off migration? that might also make > > it less risky to provide on 14.x, if that's useful. > kadmin from Heimda 1.5.2 cannot be ported without porting all or much of > Heimdal 1.5.2. It uses many functions in the various Heimdal libraries. A > Heimdal 1.5.2 port might be difficult to maintain as it's sensitive to the > OpenSSL in base. i don't really follow why this preventing adding it as a port. the source is in crypto/heimdal, so we could simply take that source and put it in a port. it must compile with the version of OpenSSL that's in base, since we still ship Heimdal in base. if Heimdal is removed from base, we can also remove the port, if needed. the point would be to allow people to migrate their Heimdal 1.5 KDCs to MIT Kerberos without having to rebuild src twice. [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iHUEABYKAB0WIQSyjTg96lp3RifySyn1nT63mIK/YAUCaOOD8gAKCRD1nT63mIK/ YLbHAQDKVLNOHTTP9UWF1ZXs417AEJQCc+U+fBh12l4NLeYDigD/cO4GYzZAktNU hsjiOROLpoU9X7HAu4LtulBBRcv6lAw= =OlaB -----END PGP SIGNATURE-----help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?aOOD9mn0Mnke5Pem>