From nobody Sun Aug 31 13:33:29 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cFCd94MhKz65qbx for ; Sun, 31 Aug 2025 13:33:33 +0000 (UTC) (envelope-from ivy@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4cFCd93X7Nz418V; Sun, 31 Aug 2025 13:33:33 +0000 (UTC) (envelope-from ivy@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1756647213; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=pG3ErIK5x+loNZx1WUf+qvu5rAXM8jLG8/aruHB86kU=; b=r53O4HISI1ckydgDCLVOVE8MUTF17Aup4D0qKhFfbcjiuEAD4LVeLeAPFin1WeDXSqlLaf FdLsEkwVtwXM9L1gAZCi2dc3n8SiA5NvLI8Tdl36iRaj/AmyhvQMFWWOnCOZZhD5xV12CC YYp3zS52e2E94iAd38BBqXSKFiPMvboYi/uBxX1sDOkt9WXwABYlIW+cIkZ2VAqa86SJto IlsZ8EnDn56aTF6Sle7rfOql1kqKlR+D3uwdaKZ74ho/6Sy8tEI0ojqxPo7fXJ2dd3E+Xv boZi/cm7swEeHFgi0g4GjswkgH5WSbPnvCOiCAWutSv/unxtSZWZgR3m/tbyLA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1756647213; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=pG3ErIK5x+loNZx1WUf+qvu5rAXM8jLG8/aruHB86kU=; b=XRe+5TiYZRA/c1n8XNdZJMk3M9CGlxBk3mFJ8mtDWpI+NzLbFyTOXebjPcNrTlvaGxkCSP WKgxhJV0Fu1wL/M1mHtqy97fpJHZQS26YhpfhhhjzhhJErzoiA8ya5K/6se+IRfDYVmSBF ve9E7oa4b4BtrKjN6WlizZSN6nTugExbqT9XgCChJJBnuSOC3XV0N+vHTie1EM3NrZ5nGm o8FphR/z22IwFMLsUdxjge+++rsStWl1kG43ynM9hvRDSZ2+43ECYjGLnQjj8SVugnaAL/ PtWy5Udld1M0hTun3JsisS4kuCX5uvAW90+87hMXowu9Aq8y25QcOL0VwLQz1Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1756647213; a=rsa-sha256; cv=none; b=sEt1HPkaBnip1XzqVDvz39NtHJZ1Js8QWJC4TLdxcQbwYGz2naDhrRF7ji5FQem/1QzJDJ X/73CtfeZDJFM3fy/hQIV6dMPW96KuH8Bqd+7un/PavsVvw1yrR357Vg+yaMDu7ju/9TCu TlIaWghr+hiVYQO2E96bgiLmPY73TW3TpHeeR+XVX1z+0qayF69ZQp1MnPqcV4WEyvHZkL ng/Wj0dgrTi/17Y5ujVUkfxjfS0e1wYAvTV3VkVtwnyyKgpRKAUKbnbXZRElswE/UEba5b jqK4ATxmeoAtGCx7D3J7q6MyJCiAMg5nZERbn5O+xh7ynU66krHNcy8jbg6pAQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from amaryllis.le-fay.org (amaryllis.le-fay.org [IPv6:2a00:1098:6b:400::9]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: ivy/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4cFCd90RXrzH1f; Sun, 31 Aug 2025 13:33:32 +0000 (UTC) (envelope-from ivy@freebsd.org) Date: Sun, 31 Aug 2025 14:33:29 +0100 From: Lexi Winter To: Herbert Cc: freebsd-current@freebsd.org Subject: Re: a few observations with 15-prerelease as of early this week Message-ID: Mail-Followup-To: Herbert , freebsd-current@freebsd.org References: List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="uHWebDp4BJWoieSa" Content-Disposition: inline In-Reply-To: --uHWebDp4BJWoieSa Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Herbert: > Yes, it's broken. The problematic part: >=20 > GSSAPI_MIT_VARS_OFF=3D KRB5CONF=3D${HEIMDAL_HOME}/bin/krb5-config >=20 > and on main HEIMDAL_HOME is empty. >=20 > Maybe we need an OSVERSION check fpr this line? you can't use OSVERSION to check for this because the user can build 15.0 with Heimdal instead of MIT Kerberos. instead, check for the existence of /usr/libdata/pkgconfig/mit-krb5.pc; for example, from www/squid: =2Eif exists(/usr/libdata/pkgconfig/mit-krb5.pc) GSSAPI_BASE_CONFIGURE_ON+=3D --with-mit-krb5=3D${GSSAPIBASEDIR} =2Eelse GSSAPI_BASE_CONFIGURE_ON+=3D --with-heimdal-krb5=3D${GSSAPIBASEDIR} =2Eendif alternatively, perhaps you can assume that if ${HEIMDAL_HOME} is empty then the base system is using MIT Kerberos, but i don't know where that variable comes from. i wonder if Uses/gssapi.mk should provide some sort of variable to allow ports to check what Kerberos version the base system is using without having knowledge of specific files. --uHWebDp4BJWoieSa Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- iHUEABYKAB0WIQSyjTg96lp3RifySyn1nT63mIK/YAUCaLRPJgAKCRD1nT63mIK/ YFyeAQDNTLuFg7kjRBWdPZYU+LLd6m4b5v4U2SeWntrBPTBsugEAqPmt6v4hrI4s mprY1cacJyF69L2nqww8exaFbNm1hg0= =t2Kc -----END PGP SIGNATURE----- --uHWebDp4BJWoieSa--