[Bug 290350] unbound su: krb5_verify_user: unable to reach any KDC in realm when invoked with service -R

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290350

            Bug ID: 290350
           Summary: unbound su: krb5_verify_user: unable to reach any KDC
                    in realm when invoked with service -R
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: void@f-m.fm

Hi,

unbound-1.24.0
OS: stable/15-n280740-317a5dd0288e GENERIC amd64 built today (Oct 18th)
ports tree @ 722054 (also today)

If one invokes 

% doas service -R

this happens:

Stopping unbound.
Waiting for PIDS: 96734.
Obtaining a trust anchor..unbound@HOME.ARPA's Password: 

This is new. Is it expected?

(enter bad passwd to check output)

su: krb5_verify_user: unable to reach any KDC in realm HOME.ARPA
.
Starting unbound.

% doas service unbound status
unbound is running as pid 48423.

To restore previous behaviour, one needs to become root beforehand:

# service -R

Stopping unbound.
Waiting for PIDS: 7300.
Obtaining a trust anchor...
Starting unbound.

This is only with service -R started via doas.

% doas service unbound start/stop/restart works as expected

The system has never had kerebos client or server configured or knowingly
running for anything.

-- 
You are receiving this mail because:
You are the assignee for the bug.