Hi,
I am posting to try and find out how many users
are currently using the old Heimdal 1.5 KDC in
FreeBSD 14.n and are interested in using the
same KDC database in FreeBSD 15.
I am asking because I just made a commit to
main (which will soon be in stable/15) which
adds support to the Heimdal code for doing
a database dump in an MIT compatible format.
--> The problem is that it will require a
make buildworld, make installworld from
sources with WITHOUT_MITKRB5="yes"
set in /etc/src.conf, followed by an (re)upgrade
with the default MIT Kerberos setting.
(ie. no WITHOUT_MITKRB5="yes")
Because the patch is rather large (commit 5000d023a446
in main) and a lot of it was a couple of cherry-picks
from Heimdal 7.8, I cannot easily audit it for any
security vulnerability it might have introduced.
As such, I am not comfortable MFC'ng it to stable/14,
although that would make the conversion path easier.
So, who out there needs this Heimdal->MIT KDC
database conversion?
Thanks for any info, rick
