security/krb5-122 1.22.2_4

MIT implementation of RFC 4120 network authentication service

Repository: FreeBSD ports
Maintainer: [email protected]
Last update: 2026-10-20
Commit: 85ba298b7e
License: MIT
Categories: security
Package size: 4308.4 KiB, 20321.4 KiB installed

Description

Kerberos V5 is an authentication system developed at MIT. Abridged from the User Guide: Under Kerberos, a client sends a request for a ticket to the Key Distribution Center (KDC). The KDC creates a ticket-granting ticket (TGT) for the client, encrypts it using the client's password as the key, and sends the encrypted TGT back to the client. The client then attempts to decrypt the TGT, using its password. If the client successfully decrypts the TGT, it keeps the decrypted TGT, which indicates proof of the client's identity. The TGT permits the client to obtain additional tickets, which give permission for specific services. Since Kerberos negotiates authenticated, and optionally encrypted, communications between two points anywhere on the internet, it provides a layer of security that is not dependent on which side of a firewall either client is on. The Kerberos V5 package is designed to be easy to use. Most of the commands are nearly identical to UNIX network programs you are already used to. Kerberos V5 is a single-sign-on system, which means that you have to type your password only once per session, and Kerberos does the authenticating and encrypting transparently.

Jacques Vidrine <[email protected]>

Install

As a binary package — by origin, or by package name:

pkg install security/krb5-122
pkg install krb5-122

From the ports tree:

cd /usr/ports/security/krb5-122/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	krb5-122>0:security/krb5-122
LIB_DEPENDS=	libcom_err.so:security/krb5-122

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository	aarch64	amd64	armv6	armv7	i386
FreeBSD:14:latest	1.22.2_3	1.22.2_3	-	1.22.1	1.22.2_3
FreeBSD:14:quarterly	1.22.2_3	1.22.2_3	n/a	-	1.22.2_3
FreeBSD:15:latest	1.22.2_3	1.22.2_3	n/a	1.22	1.22.1
FreeBSD:15:quarterly	1.22.2_3	1.22.2_3	n/a	n/a	n/a
FreeBSD:16:latest	1.22.2_3	1.22.2_3	n/a	n/a	n/a
FreeBSD:16:quarterly	n/a	n/a	n/a	n/a	n/a

Repository

aarch64

amd64

armv6

armv7

i386

FreeBSD:14:latest

1.22.2_3

1.22.1

1.22.2_3

FreeBSD:14:quarterly

1.22.2_3

n/a

1.22.2_3

FreeBSD:15:latest

1.22.2_3

n/a

1.22

1.22.1

FreeBSD:15:quarterly

1.22.2_3

n/a

FreeBSD:16:latest

1.22.2_3

n/a

FreeBSD:16:quarterly

n/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

All build dependencies 19

All run dependencies 3

No port depends on this one.

Configuration

Options name: security_krb5

Option	Default	Description
CRYPTO_BUILTIN	on	Use crypto built into KRB5
CRYPTO_OPENSSL	off	Use OpenSSL crypto
DNS_FOR_REALM	off	Enable DNS lookups for Kerberos realm names
DOCS	on	Build and/or install documentation
EXAMPLES	off	Build and/or install examples
LDAP	off	LDAP protocol support
LIBEDIT	off	Command line editing via libedit
LIBEDIT_BASE	off	Use libedit in FreeBSD base
LMDB	off	OpenLDAP Lightning Memory-Mapped Database support
NLS	off	Native Language Support
READLINE	on	Command line editing via libreadline

Option

Default

Description

CRYPTO_BUILTIN

Use crypto built into KRB5

CRYPTO_OPENSSL

off

Use OpenSSL crypto

DNS_FOR_REALM

off

Enable DNS lookups for Kerberos realm names

DOCS

Build and/or install documentation

EXAMPLES

off

Build and/or install examples

LDAP

off

LDAP protocol support

LIBEDIT

off

Command line editing via libedit

LIBEDIT_BASE

off

Use libedit in FreeBSD base

LMDB

off

OpenLDAP Lightning Memory-Mapped Database support

NLS

off

Native Language Support

READLINE

Command line editing via libreadline

USES: autoreconf compiler:c++11-lang cpe gmake gettext-runtime gssapi:bootstrap,mit libtool:build localbase perl5 pkgconfig ssl
Service scripts: kpropd
Conflicts with: heimdal krb5 krb5-11* krb5-120
Flavors: krb5-ldap-122-1.22.2_4

Files

Manual pages 30

.k5identity(5)
.k5login(5)
compile_et(1)
k5identity(5)
k5login(5)
k5srvutil(1)
kadm5.acl(5)
kadmin(1)
kadmin.local(8)
kadmind(8)
kdb5_ldap_util(8)
kdb5_util(8)
kdc.conf(5)
kdestroy(1)
kerberos(7)
kinit(1)
klist(1)
kpasswd(1)
kprop(8)
kpropd(8)
kproplog(8)
krb5-config(1)
krb5.conf(5)
krb5kdc(8)
ksu(1)
kswitch(1)
ktutil(1)
kvno(1)
sclient(1)
sserver(8)

pkg-plist 177

bin/compile_et
bin/gss-client
bin/k5srvutil
bin/kadmin
bin/kdestroy
bin/kinit
bin/klist
bin/kpasswd
bin/krb5-config
@mode 04755
@owner root
@group wheel
bin/ksu
@mode
@owner root
@group wheel
bin/kswitch
bin/ktutil
bin/kvno
bin/sclient
bin/sim_client
bin/uuclient
include/com_err.h
include/gssapi.h
include/gssapi/gssapi.h
include/gssapi/gssapi_alloc.h
include/gssapi/gssapi_ext.h
include/gssapi/gssapi_generic.h
include/gssapi/gssapi_krb5.h
include/gssapi/mechglue.h
include/gssrpc/auth.h
include/gssrpc/auth_gss.h
include/gssrpc/auth_gssapi.h
include/gssrpc/auth_unix.h
include/gssrpc/clnt.h
include/gssrpc/netdb.h
include/gssrpc/pmap_clnt.h
include/gssrpc/pmap_prot.h
include/gssrpc/pmap_rmt.h
include/gssrpc/rename.h
include/gssrpc/rpc.h
include/gssrpc/rpc_msg.h
include/gssrpc/svc.h
include/gssrpc/svc_auth.h
include/gssrpc/types.h
include/gssrpc/xdr.h
include/krad.h
include/krb5.h
include/krb5/ccselect_plugin.h
include/krb5/clpreauth_plugin.h
include/krb5/hostrealm_plugin.h
include/krb5/kadm5_hook_plugin.h
include/krb5/kdcpolicy_plugin.h
include/krb5/kdcpreauth_plugin.h
include/krb5/localauth_plugin.h
include/krb5/krb5.h
include/krb5/locate_plugin.h
include/krb5/plugin.h
include/krb5/pwqual_plugin.h
include/kadm5/admin.h
include/kadm5/chpass_util_strings.h
include/krb5/kadm5_auth_plugin.h
include/kadm5/kadm_err.h
include/kdb.h
include/krb5/certauth_plugin.h
include/krb5/preauth_plugin.h
include/profile.h
include/verto-module.h
include/verto.h
lib/libcom_err.so
lib/libcom_err.so.3
lib/libcom_err.so.3.0
lib/libgssapi_krb5.so
lib/libgssapi_krb5.so.2
lib/libgssapi_krb5.so.2.2
lib/libgssrpc.so
lib/libgssrpc.so.4
lib/libgssrpc.so.4.2
lib/libk5crypto.so
lib/libk5crypto.so.3
lib/libk5crypto.so.3.1
lib/libkadm5clnt.so
lib/libkadm5clnt_mit.so
lib/libkadm5clnt_mit.so.12
lib/libkadm5clnt_mit.so.12.0
lib/libkadm5srv.so
lib/libkadm5srv_mit.so
lib/libkadm5srv_mit.so.12
lib/libkadm5srv_mit.so.12.0
lib/libkdb5.so
lib/libkdb5.so.10
lib/libkdb5.so.10.0
lib/libkrb5.so
lib/libkrb5.so.3
lib/libkrb5.so.3.3
lib/libkrb5support.so
lib/libkrb5support.so.0
lib/libkrb5support.so.0.1
lib/krb5/plugins/kdb/db2.so
lib/krb5/plugins/kdb/klmdb.so

The first 100 are listed.

distinfo 1

File	Size	SHA256
krb5-1.22.2.tar.gz	8.747729e+06	3243ffbc8ea4d4ac22ddc7dd2a1dc54c57874c40648b60ff97009763554eaf13

File

Size

SHA256

krb5-1.22.2.tar.gz

8.747729e+06

3243ffbc8ea4d4ac22ddc7dd2a1dc54c57874c40648b60ff97009763554eaf13

Master sites 1

http://web.mit.edu/kerberos/dist/krb5/${PORTVERSION:C/^[0-9]*\.[0-9]*/&X/:C/X\.[0-9]*$//:C/X//}/

Commit history 2

Date Commit Credits Log message

Date	Commit	Credits	Log message
2026-10-20	`85ba298b7e`	Baptiste Daroussin	databases/lmdb: allow to install both 0.x and 1.x together LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are incompatibles as well. Rename or relocate everything databases/lmdb0 installs so that it no longer overlaps with databases/lmdb: - the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0 - the header is include/lmdb0/lmdb.h - the linker name is liblmdb0.so, the shared object keeps its ABI name liblmdb.so.0 so already linked programs are unaffected - the pkg-config file is lmdb0.pc A compatibility prefix holding the previous layout is also installed under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that build systems which expect to find lmdb.h and -llmdb relative to a single directory only need a path change. Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease …
2026-07-06	`5f9d389f29`	Xin LI	databases/lmdb0: Add port for LMDB 0.9.x legacy ABI LMDB 1.0 introduced an incompatible on-disk format change and subtle API breakage: applications that compiled cleanly against 1.0 headers could fail silently at run time. Known affected ports include dns/knot3, mail/bogofilter, and mail/postfix; the postfix issue has been confirmed upstream. Linux distributions such as Arch Linux have observed the same breakage. Samba can also be affected in certain configurations. Because the regression is not detectable in an -exp build run -- the postfix failure only manifests at run time, and bogofilter was caught only because post-build self-tests happen to exercise this path -- we cannot rely on package builds to validate the 1.0 upgrade. This commit introduces databases/lmdb0 as a holding port for the 0.9.35 …

2026-10-20

85ba298b7e

Baptiste Daroussin

databases/lmdb: allow to install both 0.x and 1.x together

LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are incompatibles as well. Rename or relocate everything databases/lmdb0 installs so that it no longer overlaps with databases/lmdb: - the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0 - the header is include/lmdb0/lmdb.h - the linker name is liblmdb0.so, the shared object keeps its ABI name liblmdb.so.0 so already linked programs are unaffected - the pkg-config file is lmdb0.pc A compatibility prefix holding the previous layout is also installed under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that build systems which expect to find lmdb.h and -llmdb relative to a single directory only need a path change. Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease …

2026-07-06

5f9d389f29

Xin LI

databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle API breakage: applications that compiled cleanly against 1.0 headers could fail silently at run time. Known affected ports include dns/knot3, mail/bogofilter, and mail/postfix; the postfix issue has been confirmed upstream. Linux distributions such as Arch Linux have observed the same breakage. Samba can also be affected in certain configurations. Because the regression is not detectable in an -exp build run -- the postfix failure only manifests at run time, and bogofilter was caught only because post-build self-tests happen to exercise this path -- we cannot rely on package builds to validate the 1.0 upgrade. This commit introduces databases/lmdb0 as a holding port for the 0.9.35 …