[Bug 297304] net/kea: Enable Kerberos in build

[email protected] Wed, 05 Aug 2026 20:18:58 +0000
Newsgroups gmane.os.freebsd.devel.ports.bugs
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297304

            Bug ID: 297304
           Summary: net/kea: Enable Kerberos in build
           Product: Ports & Packages
           Version: Latest
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]
             Flags: maintainer-feedback?([email protected])
                CC: [email protected]

As part of ISC making the majority of the various hook libraries open-source
starting with KEA version 3.0, there is one module that is not being built by
the ports tree due to Kerberos not being enabled in the buil. More
specifically, it's the DDNS server GSS-TSIG hook library (libddns_gss_tsig.so).

It's included in the source code tarball - all it needs for a clean compile
against base MIT Kerberos libraries (done under 15.1-RELEASE) is to add krb5 in
the Meson build arguments:

# diff -u Makefile.orig Makefile     
--- Makefile.orig       2026-08-03 09:58:42.947776000 +0200
+++ Makefile    2026-08-03 11:51:57.613297000 +0200
@@ -31,6 +31,7 @@

 MESON_ARGS=    --auto-features=disabled \
                -Dcrypto=openssl \
+                -Dkrb5=enabled \
                -Dnetconf=disabled

And adding it to the pkg-plist:
# diff -u pkg-plist.orig pkg-plist
--- pkg-plist.orig      2026-08-03 09:58:41.024263000 +0200
+++ pkg-plist   2026-08-03 12:43:49.407025000 +0200
@@ -459,6 +459,7 @@
 include/kea/util/versioned_csv_file.h
 include/kea/util/watch_socket.h
 include/kea/util/watched_thread.h
+lib/kea/hooks/libddns_gss_tsig.so
 lib/kea/hooks/libdhcp_bootp.so
 lib/kea/hooks/libdhcp_class_cmds.so
 lib/kea/hooks/libdhcp_ddns_tuning.so

No other changes appear to be needed. Not sure if the source code allows for
easy picking whether to link against base KRB5 or ports KRB5.

-- 
You are receiving this mail because:
You are the assignee for the bug.