Page MenuHomeFreeBSD

[2/2] [WIP] Import heimdal 7.8.0
Changes PlannedPublic

Authored by minsoochoo0122_proton.me on Jan 26 2024, 10:13 PM.
Referenced Files
Unknown Object (File)
Wed, May 22, 7:59 PM
Unknown Object (File)
Sun, May 12, 2:58 AM
Unknown Object (File)
May 4 2024, 1:16 PM
Unknown Object (File)
May 1 2024, 4:51 AM
Unknown Object (File)
Apr 30 2024, 7:59 PM
Unknown Object (File)
Apr 30 2024, 11:55 AM
Unknown Object (File)
Apr 28 2024, 4:48 PM
Unknown Object (File)
Apr 27 2024, 8:11 PM

Details

Reviewers
None
Group Reviewers
Contributor Reviews (src)
Summary

Import of heimdal 7.8.0 is in D43625

TODO
Use upstream sources for libgssapi
Fix libgssapi_krb5, libgssapi_ntlm, and libgssapi_spnego (help needed)

I have difficulty with creating gssapi_asn1.h with asn_compile. I have figured out that Makefiles in kerberos5/lib/libgssapi_[krb5|ntlm|spnego] and lib/libgssapi/Makefile` need to be change, but I could not make it since I'm not very skilled in Makefiles. Any advice would be greatly appreciated.

Test Plan
  • Pass build (make buildworld && make kernel && make installworld)
  • Boot into new system successfully
  • Run tests

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Warnings
SeverityLocationCodeMessage
Warningkerberos5/include/heimbase.h:66SPELL1Possible Spelling Mistake
Warningkerberos5/include/heimbase.h:72SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:231SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:249SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:437SPELL2Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:486SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:3743SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:4196SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:4235SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:4274SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:7647SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:7703SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:8356SPELL2Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:209SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:225SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:648SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:680SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:848SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:898SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_address.3:187SPELL2Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_address.3:207SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_ccache.3:775SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_ccache.3:809SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_ccache.3:843SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_ccache.3:877SPELL1Possible Spelling Mistake
Unit
No Test Coverage
Build Status
Buildable 55660
Build 52549: arc lint + arc unit

Event Timeline

I have difficulty with creating gssapi_asn1.h with asn_compile. I have figured out that Makefiles in kerberos5/lib/libgssapi_[krb5|ntlm|spnego] and lib/libgssapi/Makefile` need to be change, but I could not make it since I'm not very skilled in Makefiles. Any advice would be greatly appreciated.

not to be a total buzzkill, but, have you seen @cy's post on arch about this https://lists.freebsd.org/archives/freebsd-arch/2023-December/000580.html

Yes I have. But I don't see that the upgrade is impossible, although this would be a change that cannot be MFCed to -STABLE branches. But we can give it a try, at least

So far, these are some breaking changes that I found.

  • base has been moved to lib/base (done)
  • lib/hcrypto is required. OpenSSL(libcrypto) works as hcrypto's backend. (done)
  • heimdal's gssapi needs to be compiled in one library rather than splitting it up in four pieces

Full changelog

But yes, I agree with the plan that replaces heimdal with MIT, but it is not clear yet when it will happen.

minsoochoo0122_proton.me retitled this revision from [WIP] Import heimdal 7.8.0 to [2/2] [WIP] Import heimdal 7.8.0.Jan 28 2024, 5:33 AM