diff --git a/website/content/en/status/report-2025-04-2025-06/mit_krb5.adoc b/website/content/en/status/report-2025-04-2025-06/mit_krb5.adoc new file mode 100644 --- /dev/null +++ b/website/content/en/status/report-2025-04-2025-06/mit_krb5.adoc @@ -0,0 +1,25 @@ +=== MIT Kerberos Import into FreeBSD + +Contact: Cy Schubert + +The FreeBSD Foundatation was approached to import MIT KRB5 into FreeBSD with the intent to replace our aging Heimdal. + +The Enterprise Working Group made a request to the Foundation to replace Heimdal with MIT KRB5. + +This is the first report for this project. + +Tasks completed: + +* MIT KRB5 has been imported into FreeBSD 15-CURRENT. +* The WITH_MITKRB5 option is disabled until a successful ports exp-run is complete. + +Additional remaining tasks: + +* Fix port build errors identified by a ports exp-run. +* Produce a writup of the new Kerberos. +* Determine if migration of the Heimdal database to an MIT database is possible. + (At the moment this appears unlikely due to the age of our ancient Heimdal and the lack of support for old crypto in newer Heimdal MIT). +* Produce Heimdal Kerberos database to MIT database migration documentation (if possible). +* (Optional) Develop and discuss the import and migration options at the next BSDCan. + +Sponsor: The FreeBSD Foundation