pkgbase is NOT broken because of Kerberos (was: Re: pkgbase is broken because of Kerberos)

On 2025-08-08 20:09:30 (+0800), Dag-Erling Smørgrav wrote:
> Philip Paeps <philip@freebsd.org> writes:
>> - The pkgbase builds need to be fixed in a post-Kerberos-update 
>> world.
>
> The pkgbase build is just fine in a post-Kerberos-update world.  
> What's
> broken is incremental builds across the switch from Heimdal to MIT.  
> I'm
> not sure this is something we want to support; we should probably 
> force
> a cleanworld when build options have changed, even if it's because the
> defaults changed.

pkgbase builds are now ok.  Sorry for the noise.

--------------------------------------------------------------
>>> World build completed on Fri Aug  8 12:47:46 UTC 2025
>>> World built in 1200 seconds, ncpu: 64, make -j64
--------------------------------------------------------------

Thanks to DES for the gentle tap with the clue mallet.

pkgsync should notice this build shortly and it will turn up on the 
mirrors not much later.  I've taken the cleanworld away again.  I'll 
cook up proper flags for that in the coming days.

Unfortunately though ...

> philip@costaud1.chi:~ % su
> Segmentation fault
> philip@costaud1.chi:~ % ksu
> ksu: Operation not permitted while selecting the best principal
>
> (Our cluster su uses pam_krb5.so.)

This still needs to be fixed.  I've narrowed this down to probably 
pam_ksu.so.  Happy to test patches.

Philip