In message <ah98inxobigu3...@kib.kiev.ua>, Konstantin Belousov writes:
> On Mon, Jul 21, 2025 at 07:46:45AM -0700, Cy Schubert wrote:
> > In message <47c3cc37-6f32-4376-900a-b5387b981...@freebsd.org>, Jessica 
> > Clarke w
> > rites:
> > > On 21 Jul 2025, at 15:10, Cy Schubert <c...@freebsd.org> wrote:
> > > >=20
> > > > The branch main has been updated by cy:
> > > >=20
> > > > URL: =
> > > https://cgit.FreeBSD.org/src/commit/?id=3Dc7da9fb90b0b6385e99bb7747476359
> b=
> > > 712993fa
> > > >=20
> > > > commit c7da9fb90b0b6385e99bb7747476359b712993fa
> > > > Author:     Cy Schubert <c...@freebsd.org>
> > > > AuthorDate: 2025-07-19 14:11:18 +0000
> > > > Commit:     Cy Schubert <c...@freebsd.org>
> > > > CommitDate: 2025-07-21 14:07:22 +0000
> > > >=20
> > > >    KRB5: Enable MIT KRB5 by default
> > > >=20
> > > >    Set WITH_MITKRB5=3Dyes as the default.
> > > >=20
> > > >    Rebuild all USES=3Dgssapi ports is recommended.
> > > >=20
> > > >    A clean buildworld is required.
> > >
> > > That=E2=80=99s going to be quite annoying and cause a lot of issues =
> > > given
> > > WITH_CLEAN is now the default. Can we do something in depend-cleanup.sh
> > > to delete everything from the obj tree that needs to be rebuilt if we
> > > detect the wrong kerberos implementation was previously built?
> > 
> > All binaries that depend on any kerberos libraries must be rebuilt. 
> > WITHOUT_CLEAN will fail at various spots. Meta mode should take care of 
> > this for us.
> Does the statement mean that ABI for the base libraries was broken?
> If yes, and the new libs have the same name as the old, we must bump
> dso versions.

Three new libs have the same names. Most don't. The three with the same 
names are libkrb5, libgssapi_krb5 and libcom_err.

libgssapi_krb5 is a merge of the Heimdal libgssapi_* files. For example, 
there is no libgssapi_spnego in MIT.

The libcom_err contains the same but updated MIT functions.

libkrb5 removes Heimdal-only functions.

There is no libasn1 nor libroken in MIT.

The differences are outlined at https://k5wiki.kerberos.org/wiki/Samba%27s_u
se_of_Heimdal_symbols,_with_MIT_differences.


-- 
Cheers,
Cy Schubert <cy.schub...@cschubert.com>
FreeBSD UNIX:  <c...@freebsd.org>   Web:  https://FreeBSD.org
NTP:           <c...@nwtime.org>    Web:  https://nwtime.org

                        e**(i*pi)+1=0



Reply via email to