From nobody Tue Aug 26 16:56:10 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cBDMd1dlpz65q4Q for ; Tue, 26 Aug 2025 16:56:29 +0000 (UTC) (envelope-from rick.macklem@gmail.com) Received: from mail-ed1-x529.google.com (mail-ed1-x529.google.com [IPv6:2a00:1450:4864:20::529]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4cBDMc6GF0z3shW; Tue, 26 Aug 2025 16:56:28 +0000 (UTC) (envelope-from rick.macklem@gmail.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-ed1-x529.google.com with SMTP id 4fb4d7f45d1cf-61c38da68ddso7727318a12.2; Tue, 26 Aug 2025 09:56:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1756227385; x=1756832185; darn=freebsd.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=kCleWKnB2ibxGMj2jaBnozgMNrBNgRNT/kJJii7GHUY=; b=GEzA6TvCTywIR+gUYoTlo3cN/dlOuXjrG5aaMuOJenih3zPD9OtHikCe3sqWEerE4a DfUD/36XEad6Yf3JUiZEPO4CEvEE8rSRCeYeUVocmlSZojnNGUhpZthpw+owmDsLDF3E zwtqpbps2ok7t1sd59wqhB6yF/5N4hRLBQjmpWPShhEJc8VhU0foE/U0CpCb47U6e8zS PDK3fccfRwQfB6DFL+70cC9lltH8t7BCV2xqVcZBOR895/EXhg10SxLCwJd8AYWW+nLK H00bQXNU+LY1pmNnQIKL4Sf08y7VFY+Bc5bc5mFXk9cB0LWvHI4gZ/Ha2BSn8GAkEYCy q9vQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1756227385; x=1756832185; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=kCleWKnB2ibxGMj2jaBnozgMNrBNgRNT/kJJii7GHUY=; b=COdfmhe31eYm/onwvy/iUZH9Cu2TL/fpogUS62P3khdHFE4284wlQTQrETzLXyRPDO +cZRxPakbIgl21FgEW47zL/TX/f56m35ALA6djGWZ4M8992EFnSsecX1frQQgPBPoTd/ dTmzLShluCBFT+FelDDNZwI3oGe7t4hJlMvNF18atOh1c2Ui9Q9V6JgGkKlS8gql/ScU fVhZEw3JxjeXIN2pmBl4IkufVxZ0k4DMbwZ6Ws3vYYvs+2ilr8nwV6KqGlnGMScHrmZf 0MOiY1ZY5eLIYn/sCCqAkgc4lr6+GnTb+r05xmTFaYyBN30HgMI8WfNyoI+W8YOBMqKx YwSQ== X-Forwarded-Encrypted: i=1; AJvYcCU3efgFRlSxZLKQdnThuVuTbUrMNWRc9N1q5DBufx8SrxyQqjbJlf2oe7DQUX7/taEhWe3UPRxJ@freebsd.org, AJvYcCVsORoYzBNm+v/8Hy87HcjbjsmYjy1q2jWwjdAxklBWyxewHTREiS+2mIkEcpALGeuWaAd4/nBICfTGzmGhLvU=@freebsd.org, AJvYcCW5/CcQEviBxbs0yg8EL0IyUTgVdeTYrcyWQ8Pd3pUQflujpODhelmohLzzq0UrpDWlOJm7g49FY1aziE4sfCw=@freebsd.org X-Gm-Message-State: AOJu0Yy1jc6bLW9OSP2rYuOBkSEsyP56MUCAyKmdW69/BwP1NpoHuzH2 W/HxkCf2qqZuEr+38Ec0/UsJ6o5J5RL1nmv6zrfKyrzz4rrl1d+nRrlIM9N56eigbhdEBnvk+YR CrlTg9XUvICcXzuaTL7Y7ukVgfYaNdOgq X-Gm-Gg: ASbGncvChDG9rerZE5rX8vpX2U516g9C4IRNzR3h3S+tYJf7bgA7FETM51KS8iJ17F0 DzhnKz9gZu3BsG/A/FdBHQj9aLklM4v2ZeDfYfJCUuX5ZmqROj0YiZ7SgADGa0xU5JpPZY5aoBo 3TOu9HCTFIfcaFZ0ywxDUBVrOr/DIHC0kpsA2klaFhc2BePpm9jCIyqtn9iZxILLMsIAbof2cwV rccaz5b4Mc2zTgMldrQ9UAx1yvn4xDPPlUz1Xc= X-Google-Smtp-Source: AGHT+IHgo4THfsnIyYaaJ3zDYJNEn1/pVVLIUc+4bx93qcjA2EHxaUqifuqIpUFsQ2o6vTkRlwxEodfGuhlhkRg5ejY= X-Received: by 2002:a05:6402:d0d:b0:61c:73f3:aa93 with SMTP id 4fb4d7f45d1cf-61c73f3af0cmr4990806a12.7.1756227384888; Tue, 26 Aug 2025 09:56:24 -0700 (PDT) List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 References: <56dd78c6-a53a-4c4c-989a-335cc5fed405@FreeBSD.org> <1578a4eac5402d0496d8989e5258bc78@Leidinger.net> In-Reply-To: From: Rick Macklem Date: Tue, 26 Aug 2025 09:56:10 -0700 X-Gm-Features: Ac12FXwzzVTYGAwI_AGiu3TrDNAbR5wjdXdBqd_B-QmJWTBoejDf3EUevciH0rE Message-ID: Subject: Re: heimdal -> MIT kdc migration Was: August 2025 stabilization week To: Gleb Smirnoff Cc: Alexander Leidinger , Kyle Evans , freebsd-current@freebsd.org, src-committers@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; TAGGED_FROM(0.00)[]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Rspamd-Queue-Id: 4cBDMc6GF0z3shW On Tue, Aug 26, 2025 at 8:31=E2=80=AFAM Gleb Smirnoff = wrote: > > On Tue, Aug 26, 2025 at 08:13:26AM -0700, Rick Macklem wrote: > R> Ok. If you install FreeBSD-13.5 and then "pkg install heimdal", you ge= t a > R> working Heimdal-7.8 in ports. > R> > R> Now, I have another challenge. Fixing the master passwords. > R> I'll work on it later to-day. Ok, I finally got the database to move over, (using Heimdal-7.8) but the passwords didn't work. kinit would complain that the password was wrong before it even prompted for the password. Doing a change_password in kadmin.local made it work, but changing everyone's password would be a pain. rick > > I have applied two commits from Heimdal from 2012 that add 'kadmin dump -= f MIT' > feature to our base heimdal and polished them to compile. So far it does= n't > work yet, either create an empty dump or create a core dump, instead of > database dump :) I'll see how difficult it is going to further resolve th= at to > a working condition. If I succeed, then having 'dump -f MIT' in base with= out > any ports would be the best solution. Can also be merged to FreeBSD 14.4= . > > -- > Gleb Smirnoff