Re: ftp/curl: building on 14.3 with GSSAPI options

Well,

Tl;dr: Curl does not support Heimdal Kerberos from FreeBSD 14 anymore.

FreeBSD 14 has Heimdal Kerberos.

2025-07-21
FreeBSD 15 gets support for MIT Kerberos
https://cgit.freebsd.org/src/commit/?id=c7da9fb90b0b6385e99bb7747476359b712993fa

November 2025
Support for Heimdal was removed from curl 8.17.
https://cgit.freebsd.org/ports/commit/?id=77a0a54b7f3df8548487920090550ac880e8e26c
https://cgit.freebsd.org/ports/commit/?id=25ff185fcef90ea90c75d046fe5a426ea3fd89c8

05 Apr 2026
Curl 8.19 gets support for MIT Kerberos.
https://cgit.freebsd.org/ports/commit/?id=f485c4b627ccb16d24e639e71d02dda05f18274c

I'm not a Kerberos expert, but what I understand is that current curl only supports MIT Kerberos. Or you have MIT Kerberos in base in FreeBSD 15 or you use MIT Kerberos from ports (security/krb5) via GSSAPI_MIT=on.

Of course, if somebody else has more insights in this I'm happily corrected on this topic.

Regards,
Ronald.

 
Van: Dan Langille <[email protected]>
Datum: vrijdag, 17 april 2026 15:12
Aan: freebsd-ports <[email protected]>
Onderwerp: ftp/curl: building on 14.3 with GSSAPI options
> 
> Hello,
> 
> Have any of you managed a successful build of ftp/curl on FreeBSD 14.3 with any GSSAPI options?
> 
> I have tried various combinations of
> 
>      GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
>      GSSAPI_MIT=off: GSSAPI support via security/krb5
>      GSSAPI_NONE=off: Disable GSSAPI support
> 
> I prefer GSSAPI_BASE, but I get told:
> 
>    FreeBSD only provides MIT implementation of Kerberos in the base system since 15.0
> 
> I'm about to another series of test to confirm this. However, if you can shortcut my plans with
> a working example, that would be wonderful.
> 
> Thank you.
> 
> -- 
>   Dan Langille
>   [email protected]
>  
> 
> 
>