Page MenuHomeFreeBSD

OptionalObsoleteFiles: Update Kerberos entries
ClosedPublic

Authored by ivy on Aug 12 2025, 2:07 PM.
Tags
None
Referenced Files
F132892866: D51874.diff
Mon, Oct 20, 10:25 PM
Unknown Object (File)
Sat, Oct 11, 3:40 AM
Unknown Object (File)
Thu, Oct 9, 8:26 PM
Unknown Object (File)
Thu, Oct 9, 8:26 PM
Unknown Object (File)
Thu, Oct 9, 8:26 PM
Unknown Object (File)
Thu, Oct 9, 8:26 PM
Unknown Object (File)
Thu, Oct 9, 8:26 PM
Unknown Object (File)
Thu, Oct 9, 5:35 PM
Subscribers

Details

Summary

Consolidate the various lists of Kerberos files into three sets:
common files, files only installed by MIT Kerberos, and files only
installed by Heimdal. This avoids having to list the same files in
multiple places and makes the logic a lot easier to maintain.

The new file lists were created by comparing the actual result of
make installworld with the various options enabled or disabled.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 66196
Build 63079: arc lint + arc unit

Event Timeline

ivy requested review of this revision.Aug 12 2025, 2:07 PM
This revision is now accepted and ready to land.Aug 12 2025, 2:59 PM

usr/lib/libkadm5clnt.so.11 should be in the Heimdal section

this suggests i missed something when testing, i'll do some more tests

This revision now requires review to proceed.Aug 12 2025, 3:04 PM

further testing revealed that usr/lib/libkadm5clnt.a is also specific to Heimdal
(but not libkadm5clnt.so, which exists in both)

cy added a subscriber: cy.

This is a lot to review.

This revision is now accepted and ready to land.Aug 12 2025, 3:22 PM
In D51874#1185532, @cy wrote:

This is a lot to review.

yes, sorry. however, the result is a smaller file that should require less work in the future.

In D51874#1185538, @ivy wrote:
In D51874#1185532, @cy wrote:

This is a lot to review.

yes, sorry. however, the result is a smaller file that should require less work in the future.

I envisage Heimdal removal in 16. It's only there for 15 should someone need to use Heimdal for a KDC with principals encrypted using ancient unsupported ciphers. This would have still been a problem had we updated to Heimdal 7.8.0 instead. This is something I am working on: a migration path.

This revision was automatically updated to reflect the committed changes.