On 7/24/25 15:05, Cy Schubert wrote:
In message <202507241824.56oio88s005...@gitrepo.freebsd.org>, Lexi Winter
write
s:
The branch main has been updated by ivy:

URL: https://cgit.FreeBSD.org/src/commit/?id=962876cc24ee9fe1f0ee508f420f11fd
eac02ee3

commit 962876cc24ee9fe1f0ee508f420f11fdeac02ee3
Author:     Lexi Winter <i...@freebsd.org>
AuthorDate: 2025-07-24 18:24:33 +0000
Commit:     Lexi Winter <i...@freebsd.org>
CommitDate: 2025-07-24 18:25:05 +0000

     UPDATING: Note the Kerberos package rename (c7da9fb90b0b)
---
  UPDATING | 11 +++++++++++
  1 file changed, 11 insertions(+)

diff --git a/UPDATING b/UPDATING
index 3fd8a0fd0c0b..2be01f2c98c3 100644
--- a/UPDATING
+++ b/UPDATING
@@ -27,6 +27,17 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 15.x IS SLOW:
        world, or to merely disable the most expensive debugging functionality
        at runtime, run "ln -s 'abort:false,junk:false' /etc/malloc.conf".)
+20250724:
+       The Kerberos packages which are built when WITH_MITKRB5 is enabled
+       have been renamed from FreeBSD-krb5* to FreeBSD-kerberos*.  This
+       affects pkgbase users who manually enabled WITH_MITKRB5, *or* use
+       the default value of WITH_MITKRB5 and updated past c7da9fb90b0b
+       (20250721) which made WITH_MITKRB5 the default.
+
+       In either case, if you have FreeBSD-krb5* packages installed, you
+       should remove them and (re)install the equivalent FreeBSD-kerberos*
+       packages instead.

Shouldn't this be the other way around? Heimdal is FreeBSD-kerberos while
MIT is FreeBSD-krb5. I objected to the name change because it could cause
people to assume they were one in the same.

I'm open to be convinced otherwise though.

I think the view expressed here is that "FreeBSD-kerberos" are the kerberos
libraries, whichever was enabled when the package set was built.  In theory,
a user using pkg to upgrade across the default changing would have their
libraries transparently switch the same way users using buildworld do.  The
old pattern meant that users wouldn't get the MIT libraries and the upgrade
process would fail to find newer "versions" of the old libraries with the
end result that the user just stays on the old heimdal libraries forever.
That would probably not be what most users would want, and it doesn't match
the behavior of freebsd-update or buildworld/installworld.

For example, switching bc from the previous vendor to 'gh-bc' didn't need
to change the package name, it's just 'bc'.

Also, I think for users, krb5 vs kerberos is probably not at all clear in
terms of which one is preferred, or even which one is which (even if we did
find a way to build both sets, which we don't currently do).  If we really
wanted to support having both sets at the same time (and I don't think we do),
the two sets of packages would need to have 'heidmal' and 'mit' in the names
to have a chance of not confusing users further.

--
John Baldwin


Reply via email to