Re: heimdal -> MIT kdc migration

From: Gleb Smirnoff <glebius_at_freebsd.org>
Date: Tue, 26 Aug 2025 16:35:39 UTC
On Tue, Aug 26, 2025 at 08:31:13AM -0700, Gleb Smirnoff wrote:
T> On Tue, Aug 26, 2025 at 08:13:26AM -0700, Rick Macklem wrote:
T> R> Ok. If you install FreeBSD-13.5 and then "pkg install heimdal", you get a
T> R> working Heimdal-7.8 in ports.
T> R> 
T> R> Now, I have another challenge. Fixing the master passwords.
T> R> I'll work on it later to-day.
T> 
T> I have applied two commits from Heimdal from 2012 that add 'kadmin dump -f MIT'
T> feature to our base heimdal and polished them to compile.  So far it doesn't
T> work yet, either create an empty dump or create a core dump, instead of
T> database dump :) I'll see how difficult it is going to further resolve that to
T> a working condition. If I succeed, then having 'dump -f MIT' in base without
T> any ports would be the best solution.  Can also be merged to FreeBSD 14.4.

Good news.  In the above paragraph I was testing my change incorrectly - threw
the new binary on a system running unpatched libraries.  When run correctly,
it successfully produced something that looks like a correct dump in MIT format.
I haven't yet tried to load it into MIT kdc yet, though.

I will finalize the branch promptly and share it.  The above experience also
indicated that I need to do a library version bump.

-- 
Gleb Smirnoff