[CFT] FreeIPA - Server

Hi,

I've been porting FreeIPA to FreeBSD and it is now far enough along for 
a Call For Testing.
FreeIPA is integrated identity management - LDAP + Kerberos + a CA + a 
web UI. The whole stack is involved: 389 Directory Server, an MIT 
Kerberos KDC, Dogtag PKI (the CA, Java/Tomcat) and an Apache/mod_wsgi 
management layer.

Status on FreeBSD 15.1/amd64:
   - ipa-server-install runs to completion; all services come up
     (Directory Server, KDC, kadmin, Dogtag CA, httpd, KDC proxy, ipa-otpd)
   - a FreeBSD client enrolls via ipa-client-install and resolves
     users/groups through SSSD
   - the server survives a reboot and comes back up on its own

All of the dependencies are already committed to the ports tree; the 
only two ports not yet in it are net/freeipa-server and 
net/freeipa-client themselves. Both of them, together with the 
documentation (install, prerequisites, known issues, build notes), are here:

	https://github.com/joneum/FreeBSD-freeipa-server

Notes for testers:
   - Not for production yet - please use a throwaway VM.
   - security/cyrus-sasl2-gssapi must be built with the GSSAPI_MIT 	 
option, otherwise the install runs all the way through and then fails at 
the very end (SPNEGO / "cannot find KDC"). Details are in the README.
   - net/freeipa-client needs the fixes from PR 297487; the patched port 
is included in the repo.

Please send test results and bug reports to the GitHub repo so 
everything stays in one place. Review of and feedback on the ports 
themselves is very welcome as well.

Cheers,
Jochen