git: 07328360c1fe - main - dns/bind9*: nsupdate works on 15+ with MIT kerberos from base

The branch main has been updated by mat:

URL: https://cgit.FreeBSD.org/ports/commit/?id=07328360c1feb5bc3e3b2e18eb7abd89d226b663

commit 07328360c1feb5bc3e3b2e18eb7abd89d226b663
Author:     Mathieu Arnold <mat@FreeBSD.org>
AuthorDate: 2026-01-24 09:22:52 +0000
Commit:     Mathieu Arnold <mat@FreeBSD.org>
CommitDate: 2026-01-24 09:37:00 +0000

    dns/bind9*: nsupdate works on 15+ with MIT kerberos from base
    
    FreeBSD 15+ have MIT kerberos in the base system, and it fixes the
    problems BIND9 was having with Heimdal.
    
    PR:             291776
---
 dns/bind9-devel/Makefile | 6 +++---
 dns/bind918/Makefile     | 3 ++-
 dns/bind920/Makefile     | 6 +++---
 3 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/dns/bind9-devel/Makefile b/dns/bind9-devel/Makefile
index 287b39f4a768..1ec8d0dd84ea 100644
--- a/dns/bind9-devel/Makefile
+++ b/dns/bind9-devel/Makefile
@@ -4,11 +4,11 @@ PORTNAME=	bind
 DISTVERSION=	9.21.17
 .if defined(BIND_TOOLS_SLAVE)
 # dns/bind-tools here
-PORTREVISION=	0
+PORTREVISION=	1
 .else
 # XXX: correct version
 # dns/bind9xx here
-PORTREVISION=	0
+PORTREVISION=	1
 .endif
 CATEGORIES=	dns net
 MASTER_SITES=	ISC/bind9/${DISTVERSION}
@@ -104,7 +104,7 @@ OPTIONS_EXCLUDE=	DOCS GEOIP LMDB OVERRIDECACHE QUERYTRACE START_LATE \
 OPTIONS_SUB=	yes
 
 DNSTAP_DESC=		Provides fast passive logging of DNS messages
-GSSAPI_BASE_DESC=	Using Heimdal in base (nsupdate is broken)
+GSSAPI_BASE_DESC=	Using ${${OSREL:R} < 15:?Heimdal in base (nsupdate is broken):MIT in base}
 GSSAPI_HEIMDAL_DESC=	Using security/heimdal (nsupdate is broken)
 GSSAPI_MIT_DESC=	Using security/krb5
 GSSAPI_NONE_DESC=	Disable
diff --git a/dns/bind918/Makefile b/dns/bind918/Makefile
index 1920e65e009f..7ed973cd34a0 100644
--- a/dns/bind918/Makefile
+++ b/dns/bind918/Makefile
@@ -2,6 +2,7 @@
 
 PORTNAME=	bind
 DISTVERSION=	9.18.44
+PORTREVISION=	1
 CATEGORIES=	dns net
 MASTER_SITES=	ISC/bind9/${DISTVERSION}
 PKGNAMESUFFIX=	918
@@ -68,7 +69,7 @@ OPTIONS_SUB=	yes
 
 DNSTAP_DESC=		Provides fast passive logging of DNS messages
 FIXED_RRSET_DESC=	Enable fixed rrset ordering
-GSSAPI_BASE_DESC=	Using Heimdal in base (nsupdate is broken)
+GSSAPI_BASE_DESC=	Using ${${OSREL:R} < 15:?Heimdal in base (nsupdate is broken):MIT in base}
 GSSAPI_HEIMDAL_DESC=	Using security/heimdal (nsupdate is broken)
 GSSAPI_MIT_DESC=	Using security/krb5
 GSSAPI_NONE_DESC=	Disable
diff --git a/dns/bind920/Makefile b/dns/bind920/Makefile
index 35d57c395e10..8b0e6690113e 100644
--- a/dns/bind920/Makefile
+++ b/dns/bind920/Makefile
@@ -4,11 +4,11 @@ PORTNAME=	bind
 DISTVERSION=	9.20.18
 .if defined(BIND_TOOLS_SLAVE)
 # dns/bind-tools here
-PORTREVISION=	0
+PORTREVISION=	1
 .else
 # XXX: correct version
 # dns/bind920 here
-PORTREVISION=	0
+PORTREVISION=	1
 .endif
 CATEGORIES=	dns net
 MASTER_SITES=	ISC/bind9/${DISTVERSION}
@@ -104,7 +104,7 @@ OPTIONS_SUB=	yes
 
 DNSTAP_DESC=		Provides fast passive logging of DNS messages
 FIXED_RRSET_DESC=	Enable fixed rrset ordering
-GSSAPI_BASE_DESC=	Using Heimdal in base (nsupdate is broken)
+GSSAPI_BASE_DESC=	Using ${${OSREL:R} < 15:?Heimdal in base (nsupdate is broken):MIT in base}
 GSSAPI_HEIMDAL_DESC=	Using security/heimdal (nsupdate is broken)
 GSSAPI_MIT_DESC=	Using security/krb5
 GSSAPI_NONE_DESC=	Disable