On Thu, Aug 7, 2025 at 6:33 PM Lexi Winter <i...@freebsd.org> wrote:
>
> CAUTION: This email originated from outside of the University of Guelph. Do
> not click links or open attachments unless you recognize the sender and know
> the content is safe. If in doubt, forward suspicious emails to
> ith...@uoguelph.ca.
>
>
>
> ---------- Forwarded message ----------
> From: Lexi Winter <i...@freebsd.org>
> To: Rick Macklem <rmack...@freebsd.org>
> Cc: src-committ...@freebsd.org, dev-commits-src-...@freebsd.org,
> dev-commits-src-main@freebsd.org
> Bcc:
> Date: Fri, 8 Aug 2025 02:31:48 +0100
> Subject: Re: git: e3ac01e18eb3 - main - kgssapi: Fix the kgssapi so that it
> can use MIT Kerberos
> Rick Macklem:
> > It also modifies the Makefile so that the gssd is only built
> > when MK_KERBEROS_SUPPORT != "no", since it is useless without
> > Kerberos.
>
> currently the init script is conditional on MK_GSSAPI. should this be
> changed to MK_KERBEROS_SUPPORT as well? (see libexec/rc/rc.d/Makefile)
No idea.
The change looks like:
.if ${MK_KERBEROS_SUPPORT} != "no"
SUBDIR.${MK_GSSAPI}+= gssd
.endif
I think that means it depends on both of them.
(To be honest, I doubt anyone ever fiddles with MK_GSSAPI?)
I think that, long ago, someone thought there might be a use
for the gssd when Kerberos isn't being used (in theory there
can be other mechanisms, but Kerberos is the only one ever
implemented).
rick
