From nobody Tue Aug 26 13:28:50 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cB7mM3J3sz65Z7w for ; Tue, 26 Aug 2025 13:29:07 +0000 (UTC) (envelope-from rick.macklem@gmail.com) Received: from mail-ed1-x532.google.com (mail-ed1-x532.google.com [IPv6:2a00:1450:4864:20::532]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4cB7mM1KWvz3H8G; Tue, 26 Aug 2025 13:29:07 +0000 (UTC) (envelope-from rick.macklem@gmail.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-ed1-x532.google.com with SMTP id 4fb4d7f45d1cf-61ca9a5b41bso8637a12.1; Tue, 26 Aug 2025 06:29:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1756214944; x=1756819744; darn=freebsd.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=xKXXNgpraWZZaZeADdQ2nXYBCqLIp9ag0ew3w5GhzVg=; b=BglEWUGE3PvipH1m9py6nm4J1b7BNbbaI4nZFJ4oxxHj21XHTekPANX4bZ+zIQY/gJ b2s4IeybbpYnqx+O+ircX2YESSrLpJrLn5pTrKh2nWTotEkizLEbyqv+kvrIXVX21meW 8CZkt6a/xqjjLq6HyWJ14YQ91+R5SN9mGx4M9xy68cEjt3nBQMWj4AueAb4GmLf1Z5VT WHOJIE5RWS3wXafyrDkHiE3QhojcsnYdVoWRoYApkf7Ee5X2H1cVVHIgwHQEuwLnu8P+ MyJEoz0zyeC1mHIK0PtI6CZG7SdEbokcTEgTRCnBQPX9oLHROcXVwO2C76gEJmtKt0Ut nlLQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1756214944; x=1756819744; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=xKXXNgpraWZZaZeADdQ2nXYBCqLIp9ag0ew3w5GhzVg=; b=JiJ39zD5P6x7MNdn8yCXs7FEjZCLnPMLNKxIoS+9A0yTFHpvL5TrL+UJVPqjHIKJu8 Eo8YivusPr87TVtH8mA6Ie5KUI/eoV7yYo+8Z1n2IpSRmsV2ZseCTQYrCzndTX1Kzzug T/wMwiXZuWlGt5+dBTnba1sWh7FwoC3wu67zw6wyFSjaEtWvPNW8SUoN0xzHQRkTh7yH T3Az2DzgU5gdGlpOwtziXdtjlLG7t5/ZKUpJs50eJOFpUMywEK3ukBaCfGUK5OG5a+x2 vF31+dn9JjxA4gqEdbII2MFPiR2Lv0Cn1gwdIuKxRaJ0NsP30HS95Wq9+Y6qXtwrD8NF +4UA== X-Forwarded-Encrypted: i=1; AJvYcCV0AWW3Wn+/3pO3uy+yJmsQ1WSBa3JbbvDJhuFZUYWc+ecL/+01hcKTEw47l5A7KQPodO68xcYIEQ==@freebsd.org, AJvYcCVTMzNIt6ODDRxt0VCKx7381t6Aeor4gfhVOwsFNnaJSDTQdAYR+lErDzIQCUqI0PHYtL2iqXfLFAk62LsspCU=@freebsd.org, AJvYcCW330Tkjrdo+xx4ot83nUFMzxa9B23HVDRfZ+Nnz1ZLFpESa7+tuO0NUskpNrF43KypvfkrtXYx9kJBfLAxK0A=@freebsd.org X-Gm-Message-State: AOJu0YyGiuPtkIrJSHlBhLdyrbs+2gwMPQJIC16wdOqoZ7OEBQ6I4FKL 8vGOa3yB+R6so+omab8UX0qPI8d85lZ/kCiWqdXuQON1uu/zgyPDzwk2GuX/d0YQIMzuD4zUqS2 13G+P2IdRho1MZJBEXpZmeEJwBOAzulU1 X-Gm-Gg: ASbGncvEFWoyY5lyiaIQbOkOkTbebrFa4DEUJ04EBG8kARiJBkUP5S+Yg3Zo96WKqWk /szaAUP7cIrDRe/dLfgFjhWPajEaI2fKoVltt72ZCOINFgvK11ji7xRtB9yRrWaniRIlOBa/Yo2 8nGz4I3fwgYrl62a+nm+Zsrwpa+VBA0eYqYyq4SV7BE3bTfH7SFjf4NrOf6jbpTTUXb+b7wG8dL iJFB5HyK5eKg0iDwery3dudTiL22fn44XBs53sq1tLMdrmEJw== X-Google-Smtp-Source: AGHT+IFzYi+jKRaqokM6YLkcIS0eys2ocQ2T7UCmqyxYBF2poa+mjxEOBNrw/Bkpk+r4+komaVCPGRMJ/8g6DOi6+j8= X-Received: by 2002:a05:6402:42c3:b0:61c:7336:67d9 with SMTP id 4fb4d7f45d1cf-61c7336722bmr5140363a12.26.1756214943446; Tue, 26 Aug 2025 06:29:03 -0700 (PDT) List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 References: <56dd78c6-a53a-4c4c-989a-335cc5fed405@FreeBSD.org> <1578a4eac5402d0496d8989e5258bc78@Leidinger.net> In-Reply-To: <1578a4eac5402d0496d8989e5258bc78@Leidinger.net> From: Rick Macklem Date: Tue, 26 Aug 2025 06:28:50 -0700 X-Gm-Features: Ac12FXzkFU4-7w_Z3X6DZ48jMLd7B-DAvOIHZyZOfvJcvm-g3KQmJFFIYQzdWiE Message-ID: Subject: Re: August 2025 stabilization week To: Alexander Leidinger Cc: Kyle Evans , Gleb Smirnoff , freebsd-current@freebsd.org, src-committers@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; TAGGED_FROM(0.00)[]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Rspamd-Queue-Id: 4cB7mM1KWvz3H8G On Tue, Aug 26, 2025 at 2:34=E2=80=AFAM Alexander Leidinger wrote: > > Am 2025-08-26 06:25, schrieb Rick Macklem: > > On Mon, Aug 25, 2025 at 1:27=E2=80=AFPM Rick Macklem > > wrote: > >> > >> On Mon, Aug 25, 2025 at 9:09=E2=80=AFAM Kyle Evans wrote: > > >> > There is no yet an official way to migrate kdc > >> > > from Heimdal to MIT. > >> Yea. One possibility is to install Heimdal-7.8 from ports/packages and > >> then > >> use it to dump the KDC's database in MIT format. (Although Cy seemed > >> to > >> find it didn't work, doing this with the "--decrypt" option might > >> retain the > >> passwords.) > >> > >> I'll give this a try and report back if it worked for me. > > Well, I'm not having any luck. > > Every time I try and use Heimdal-7.8 to load the database from > > Heimdal-1.5.2, > > "kadmin -l" throws this error and exits. > > > > kadmin: rc4 8: EVP_CipherInit_ex einit > > > > I need the Heimdal-7.8 kadmin to work to try and convert the database > > to > > MIT format. > > > > So, does anyone know the trick to fixing this? rick > > I migrated a while ago... don't remember if this year or last year. And > I don't have my notes about this anymore. But I exported everything from > base-heimdal and imported into MIT. > A quick google gave mit this: > https://serverfault.com/questions/1000332/migrating-from-heimdal-to-mit-k= erberos > This can be done with the base-heimdal + ports-heimdal + mit-krb. Yes. That was basically what I am trying to do. However, I cannot get the ports-heimdal to work, due to that rc4 related problem. (I've tried 15 and 14. Maybe I'll try 13?) Because there are several principals created when the MIT database is creat= ed, I think the last step might need "-update" ("kdb5_util load -update mit.dum= p"). rick > > Bye, > Alexander. > > -- > http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF > http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF