1. Forum
  2. USENET
  3. muc.lists.freebsd.ports

  • ftp/curl: building on 14.3 with GSSAPI options

    From Dan Langille@dan@langille.org to muc.lists.freebsd.ports on Fri Apr 17 09:12:45 2026
    From Newsgroup: muc.lists.freebsd.ports

    Hello,

    Have any of you managed a successful build of ftp/curl on FreeBSD 14.3 with any GSSAPI options?

    I have tried various combinations of

    GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
    GSSAPI_MIT=off: GSSAPI support via security/krb5
    GSSAPI_NONE=off: Disable GSSAPI support

    I prefer GSSAPI_BASE, but I get told:

    FreeBSD only provides MIT implementation of Kerberos in the base system since 15.0

    I'm about to another series of test to confirm this. However, if you can shortcut my plans with
    a working example, that would be wonderful.

    Thank you.
    --
    Dan Langille
    dan@langille.org


    --
    Posted automagically by a mail2news gateway at muc.de e.V.
    Please direct questions, flames, donations, etc. to news-admin@muc.de
    --- Synchronet 3.21f-Linux NewsLink 1.2
  • From Dan Langille@dan@langille.org to muc.lists.freebsd.ports on Fri Apr 17 10:15:02 2026
    From Newsgroup: muc.lists.freebsd.ports

    On Fri, Apr 17, 2026, at 9:12 AM, Dan Langille wrote:
    Hello,

    Have any of you managed a successful build of ftp/curl on FreeBSD 14.3
    with any GSSAPI options?

    I have tried various combinations of

    GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
    GSSAPI_MIT=off: GSSAPI support via security/krb5
    GSSAPI_NONE=off: Disable GSSAPI support

    I prefer GSSAPI_BASE, but I get told:

    FreeBSD only provides MIT implementation of Kerberos in the base
    system since 15.0

    I'm about to another series of test to confirm this. However, if you
    can shortcut my plans with
    a working example, that would be wonderful.

    I didn't get any farther today and I opened: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294593
    --
    Dan Langille
    dan@langille.org


    --
    Posted automagically by a mail2news gateway at muc.de e.V.
    Please direct questions, flames, donations, etc. to news-admin@muc.de
    --- Synchronet 3.21f-Linux NewsLink 1.2
  • From Ronald Klop@ronald-lists@klop.ws to muc.lists.freebsd.ports on Fri Apr 17 16:40:15 2026
    From Newsgroup: muc.lists.freebsd.ports

    ------=_Part_1204_433732432.1776436815864
    Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit

    Well,

    Tl;dr: Curl does not support Heimdal Kerberos from FreeBSD 14 anymore.

    FreeBSD 14 has Heimdal Kerberos.

    2025-07-21
    FreeBSD 15 gets support for MIT Kerberos https://cgit.freebsd.org/src/commit/?id=c7da9fb90b0b6385e99bb7747476359b712993fa

    November 2025
    Support for Heimdal was removed from curl 8.17. https://cgit.freebsd.org/ports/commit/?id=77a0a54b7f3df8548487920090550ac880e8e26c
    https://cgit.freebsd.org/ports/commit/?id=25ff185fcef90ea90c75d046fe5a426ea3fd89c8

    05 Apr 2026
    Curl 8.19 gets support for MIT Kerberos. https://cgit.freebsd.org/ports/commit/?id=f485c4b627ccb16d24e639e71d02dda05f18274c

    I'm not a Kerberos expert, but what I understand is that current curl only supports MIT Kerberos. Or you have MIT Kerberos in base in FreeBSD 15 or you use MIT Kerberos from ports (security/krb5) via GSSAPI_MIT=on.

    Of course, if somebody else has more insights in this I'm happily corrected on this topic.

    Regards,
    Ronald.


    Van: Dan Langille <dan@langille.org>
    Datum: vrijdag, 17 april 2026 15:12
    Aan: freebsd-ports <freebsd-ports@freebsd.org>
    Onderwerp: ftp/curl: building on 14.3 with GSSAPI options

    Hello,

    Have any of you managed a successful build of ftp/curl on FreeBSD 14.3 with any GSSAPI options?

    I have tried various combinations of

    GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
    GSSAPI_MIT=off: GSSAPI support via security/krb5
    GSSAPI_NONE=off: Disable GSSAPI support

    I prefer GSSAPI_BASE, but I get told:

    FreeBSD only provides MIT implementation of Kerberos in the base system since 15.0

    I'm about to another series of test to confirm this. However, if you can shortcut my plans with
    a working example, that would be wonderful.

    Thank you.

    --
    Dan Langille
    dan@langille.org






    ------=_Part_1204_433732432.1776436815864
    Content-Type: text/html; charset=us-ascii
    Content-Transfer-Encoding: 7bit

    <html><head></head><body>Well,<br>

    Tl;dr:&nbsp;Curl does not support Heimdal Kerberos from FreeBSD 14 anymore.<br>

    FreeBSD 14 has Heimdal Kerberos.<br>

    2025-07-21<br>
    FreeBSD 15 gets support for MIT Kerberos<br>
    <a href="https://cgit.freebsd.org/src/commit/?id=c7da9fb90b0b6385e99bb7747476359b712993fa">https://cgit.freebsd.org/src/commit/?id=c7da9fb90b0b6385e99bb7747476359b712993fa</a><br>

    November 2025<br>
    Support for Heimdal was removed from curl 8.17.<br>
    <a href="https://cgit.freebsd.org/ports/commit/?id=77a0a54b7f3df8548487920090550ac880e8e26c">https://cgit.freebsd.org/ports/commit/?id=77a0a54b7f3df8548487920090550ac880e8e26c</a><br>
    <a href="https://cgit.freebsd.org/ports/commit/?id=25ff185fcef90ea90c75d046fe5a426ea3fd89c8">https://cgit.freebsd.org/ports/commit/?id=25ff185fcef90ea90c75d046fe5a426ea3fd89c8</a><br>

    05 Apr 2026<br>
    Curl 8.19 gets support for MIT Kerberos.<br>
    <a href="https://cgit.freebsd.org/ports/commit/?id=f485c4b627ccb16d24e639e71d02dda05f18274c">https://cgit.freebsd.org/ports/commit/?id=f485c4b627ccb16d24e639e71d02dda05f18274c</a><br>

    I'm not a Kerberos expert, but what I understand is that current curl only supports MIT Kerberos. Or you have MIT Kerberos in base in FreeBSD 15 or you use MIT Kerberos from ports (security/krb5) via GSSAPI_MIT=on.<br>

    Of course, if somebody else has more insights in this I'm happily corrected on this topic.<br>

    Regards,<br>
    Ronald.<br>

    &nbsp;
    <p><strong>Van:</strong> Dan Langille &lt;dan@langille.org&gt;<br> <strong>Datum:</strong> vrijdag, 17 april 2026 15:12<br>
    <strong>Aan:</strong> freebsd-ports &lt;freebsd-ports@freebsd.org&gt;<br> <strong>Onderwerp:</strong> ftp/curl: building on 14.3 with GSSAPI options</p>

    <blockquote style="padding-right: 0px; padding-left: 5px; margin-left: 5px; border-left: #000000 2px solid; margin-right: 0px">
    <div class="MessageRFC822Viewer" id="P">
    <div class="TextPlainViewer" id="P.P">Hello,<br>

    Have any of you managed a successful build of ftp/curl on FreeBSD 14.3 with any GSSAPI options?<br>

    I have tried various combinations of<br>

    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)<br>
    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;GSSAPI_MIT=off: GSSAPI support via security/krb5<br>
    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;GSSAPI_NONE=off: Disable GSSAPI support<br>

    I prefer GSSAPI_BASE, but I get told:<br>

    &nbsp;&nbsp;&nbsp;FreeBSD only provides MIT implementation of Kerberos in the base system since 15.0<br>

    I'm about to another series of test to confirm this. However, if you can shortcut my plans with<br>
    a working example, that would be wonderful.<br>

    Thank you.<br>

    --&nbsp;<br>
    &nbsp;&nbsp;Dan Langille<br>
    &nbsp;&nbsp;dan@langille.org<br>
    &nbsp;</div>

    <hr></div>
    </blockquote>

    &nbsp;</body></html>
    ------=_Part_1204_433732432.1776436815864--


    --
    Posted automagically by a mail2news gateway at muc.de e.V.
    Please direct questions, flames, donations, etc. to news-admin@muc.de
    --- Synchronet 3.21f-Linux NewsLink 1.2