Page MenuHomeFreeBSD

gssd: Add support for MIT KRB5
ClosedPublic

Authored by cy on Jun 12 2025, 2:55 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Nov 21, 4:15 PM
Unknown Object (File)
Oct 22 2025, 12:24 PM
Unknown Object (File)
Oct 15 2025, 10:24 PM
Unknown Object (File)
Oct 11 2025, 12:33 PM
Unknown Object (File)
Oct 11 2025, 12:33 PM
Unknown Object (File)
Oct 11 2025, 12:33 PM
Unknown Object (File)
Oct 11 2025, 4:23 AM
Unknown Object (File)
Oct 7 2025, 3:32 PM
Subscribers
None

Details

Summary

Fix gssd build when building with MIT KRB5.

krb5_get_init_creds_opt_set_default_flags() is not an MIT KRB5 function.
It is also not needed to resolve the default keytable.

Sponsored by: The FreeBSD Foundation

Test Plan

Running here for a month.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

cy requested review of this revision.Jun 12 2025, 2:55 PM
cy created this revision.
rmacklem added inline comments.
usr.sbin/gssd/gssd.c
1196

Very minor nit (which means don't do it unless
you agree). Maybe use HEIMDAL or a comment
that indicates this is a HEIMDAL call instead of
"not MIT"?

This revision is now accepted and ready to land.Jun 15 2025, 3:09 PM
usr.sbin/gssd/gssd.c
1196

Good idea. I will add a comment, as I use the define MK_MITKRB5 elsewhere. That keeps every source #ifdef in the tree consistent.

I've added the comment for the other files with this same #ifdef, pam_krb5 and pam_ksu.

This revision was automatically updated to reflect the committed changes.