src/krb5/lib/kadm5srv, branch main

krb5: append to LDFLAGS instead of replacing

2026-03-20T17:19:35+00:00

Sponsored by:	Netflix
Reviewed by:	imp
Differential Revision:	https://reviews.freebsd.org/D55335

krb5: Expose missing symbols

2026-01-20T13:41:02+00:00

Add symbols found in the port but not in base. This requires replacing
a shared libkrb5profile.so with libkrb5profile.a (with -fPIC so it can
be used by shared libraries). We do this by making libkrb5profile
INTERNALLIB.

Base currently has libkrb5profile in a shared library. The patch moves
those functions to the various "consumer" libraries as the port does.

Symbols that should be in the other libraries are in libkrb5profile.so.
This is causing some ports issues.

PR:		291695
Reported by:	michaelo, markj,  Chris Inacio 
Tested by:	michaelo
Fixes:		ae07a5805b19
Reviewed by:	michaelo (previous version)
MFC after:	2 weeks
Differential revision:	https://reviews.freebsd.org/D54323

krb5: Build pkgconfig files with libraries

2025-08-18T18:57:59+00:00

For various reasons, trying to build 32-bit compatibility PCFILES
outside of a directory which is not a library doesn't work. Add a
new krb5/Makefile.pc with the build rule for .pc.in.pc, and use
this to build each pc file along with the library it's associated
with.

This means we automatically get 32-bit pcfiles in /usr/lib32, and
is arguably more correct anyway since if we don't build a library
for some reason, we also won't build its pcfiles.

Reviewed by:	des
Differential Revision:	https://reviews.freebsd.org/D51986

krb5: Fix typo "SPDX-License-Idendifier"

2025-08-17T21:17:06+00:00

sed -e s/SPDX-License-Idendifier/SPDX-License-Identifier/

krb5: Update MIT KRB5 from 1.21 to 1.22

2025-08-10T05:29:02+00:00

Merge commit 'd82a140dad3a571d66abb2da24acbba90191f168'

kadm5srv: get common headers from kadm5clnt

2025-08-04T12:58:47+00:00

Both were installing admin.h, chpass_util_strings.h, and kadm_err.h.
kadm5clnt is ordered first in krb5/lib/Makefile so pick it.

PR:		288594
Pull Request:	https://github.com/freebsd/freebsd-src/pull/1801

kadm5srv: remove unused HDRS entries

2025-08-04T12:58:46+00:00

Pull Request:	https://github.com/freebsd/freebsd-src/pull/1801

krb5: only apply -Wno-alloc-size-larger-than to gcc

2025-08-04T01:59:04+00:00

Otherwise, this breaks the clang build.

kadm5: add -Wno-alloc-size-larger-than

2025-08-03T22:56:37+00:00

This trips the gcc build in kadm5/srv/svr_principal.c:

/home/ivy/src/bsd/gcc/crypto/krb5/src/lib/kadm5/srv/svr_principal.c: In function 'apply_keysalt_policy':
/home/ivy/src/bsd/gcc/crypto/krb5/src/lib/kadm5/srv/svr_principal.c:208:14: error: argument 1 range [2147483648, 4294967295] exceeds maximum object size 2147483647 [-Werror=alloc-size-larger-than=]
  208 |     subset = calloc(n_ks_tuple, sizeof(*subset));
      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Differential Revision:	https://reviews.freebsd.org/D51577

krb5: remove private headers

2025-07-25T17:31:26+00:00

I compared the contents of the FreeBSD-kerberos-lib-dev package with
the contents of the security/krb5 port.  Based on that, remove all
the headers which are installed by base krb5 but not by the port.
These all appear to be internal headers which are not meant to be
publicly visible.

This removes some headers with unfortunate conflict-prone names like
 and .

Reviewed by:	des, cy
Differential Revision:	https://reviews.freebsd.org/D51518