Page MenuHomeFreeBSD

[2/2] [WIP] Import heimdal 7.8.0
AbandonedPublic

Authored by mchoo on Jan 26 2024, 10:13 PM.
Referenced Files
Unknown Object (File)
Thu, Aug 27, 6:04 AM
Unknown Object (File)
Tue, Aug 25, 2:42 PM
Unknown Object (File)
Thu, Aug 20, 2:36 AM
Unknown Object (File)
Wed, Aug 19, 5:48 PM
Unknown Object (File)
Sat, Aug 15, 10:32 AM
Unknown Object (File)
Sat, Aug 15, 2:49 AM
Unknown Object (File)
Fri, Aug 14, 2:03 AM
Unknown Object (File)
Fri, Aug 14, 1:00 AM

Details

Reviewers
None
Group Reviewers
Contributor Reviews (src)
Summary

Import of heimdal 7.8.0 is in D43625

TODO
Use upstream sources for libgssapi
Fix libgssapi_krb5, libgssapi_ntlm, and libgssapi_spnego (help needed)

I have difficulty with creating gssapi_asn1.h with asn_compile. I have figured out that Makefiles in kerberos5/lib/libgssapi_[krb5|ntlm|spnego] and lib/libgssapi/Makefile` need to be change, but I could not make it since I'm not very skilled in Makefiles. Any advice would be greatly appreciated.

Test Plan
  • Pass build (make buildworld && make kernel && make installworld)
  • Boot into new system successfully
  • Run tests

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Warnings
SeverityLocationCodeMessage
Warningkerberos5/include/heimbase.h:66SPELL1Possible Spelling Mistake
Warningkerberos5/include/heimbase.h:72SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:231SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:249SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:437SPELL2Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:486SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:3743SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:4196SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:4235SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:4274SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:7647SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:7703SPELL1Possible Spelling Mistake
Warningkerberos5/include/krb5-protos.h:8356SPELL2Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:209SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:225SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:648SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:680SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:848SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5.3:898SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_address.3:187SPELL2Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_address.3:207SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_ccache.3:775SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_ccache.3:809SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_ccache.3:843SPELL1Possible Spelling Mistake
Warningkerberos5/man/krb5/man/man3/krb5_ccache.3:877SPELL1Possible Spelling Mistake
Unit
No Test Coverage
Build Status
Buildable 55660
Build 52549: arc lint + arc unit

Event Timeline

mchoo edited the summary of this revision. (Show Details)
mchoo edited the test plan for this revision. (Show Details)
mchoo added a reviewer: Contributor Reviews (src).
mchoo edited the summary of this revision. (Show Details)
mchoo added a subscriber: Contributor Reviews (src).

Use upstream sources for libgssapi

I have difficulty with creating gssapi_asn1.h with asn_compile. I have figured out that Makefiles in kerberos5/lib/libgssapi_[krb5|ntlm|spnego] and lib/libgssapi/Makefile` need to be change, but I could not make it since I'm not very skilled in Makefiles. Any advice would be greatly appreciated.

Separate import and other changes

Only uploads FreeBSD-side changes

not to be a total buzzkill, but, have you seen @cy's post on arch about this https://lists.freebsd.org/archives/freebsd-arch/2023-December/000580.html

Yes I have. But I don't see that the upgrade is impossible, although this would be a change that cannot be MFCed to -STABLE branches. But we can give it a try, at least

So far, these are some breaking changes that I found.

  • base has been moved to lib/base (done)
  • lib/hcrypto is required. OpenSSL(libcrypto) works as hcrypto's backend. (done)
  • heimdal's gssapi needs to be compiled in one library rather than splitting it up in four pieces

Full changelog

But yes, I agree with the plan that replaces heimdal with MIT, but it is not clear yet when it will happen.

Remove man page for heimdal's gssapi

mchoo retitled this revision from [WIP] Import heimdal 7.8.0 to [2/2] [WIP] Import heimdal 7.8.0.Jan 28 2024, 5:33 AM

MIT krb5 has been adopted in CURRENT.