security/krb5-devel 1.23.2026.09.04_1 FreeBSD

MIT implementation of RFC 4120 network authentication service

System: FreeBSD
Repository: FreeBSD ports
Maintainer: [email protected]
Last update: 2026-10-20
Commit: 85ba298b7e
License: MIT
Categories: security
Package size: 1251.7 KiB, 4408.4 KiB installed

Description

Kerberos V5 is an authentication system developed at MIT. Abridged from the User Guide: Under Kerberos, a client sends a request for a ticket to the Key Distribution Center (KDC). The KDC creates a ticket-granting ticket (TGT) for the client, encrypts it using the client's password as the key, and sends the encrypted TGT back to the client. The client then attempts to decrypt the TGT, using its password. If the client successfully decrypts the TGT, it keeps the decrypted TGT, which indicates proof of the client's identity. The TGT permits the client to obtain additional tickets, which give permission for specific services. Since Kerberos negotiates authenticated, and optionally encrypted, communications between two points anywhere on the internet, it provides a layer of security that is not dependent on which side of a firewall either client is on. The Kerberos V5 package is designed to be easy to use. Most of the commands are nearly identical to UNIX network programs you are already used to. Kerberos V5 is a single-sign-on system, which means that you have to type your password only once per session, and Kerberos does the authenticating and encrypting transparently.

Jacques Vidrine <[email protected]>

In the other systems

System

Port

Version

FreeBSD

security/krb5-devel

1.23.2026.09.04_1

HardenedBSD

security/krb5-devel

1.23.2026.09.04

GhostBSD

security/krb5-devel

1.23.2026.07.15

Install

Binary package:

pkg install krb5-devel

From the ports tree:

cd /usr/ports/security/krb5-devel/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	krb5-devel>0:security/krb5-devel
LIB_DEPENDS=	libcom_err.so:security/krb5-devel

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository	aarch64	amd64	armv6	armv7	i386
FreeBSD:14:latest	1.23.2026.09.04	1.23.2026.09.04	1.20.2022.12.26	1.22.2025.08.20	1.23.2026.09.04
FreeBSD:14:quarterly	1.23.2026.09.04	1.23.2026.09.04	n/a	1.22.2025.06.17	1.23.2026.09.04
FreeBSD:15:latest	1.23.2026.09.04	1.23.2026.09.04_1	n/a	1.22.2025.08.11	1.22.2025.08.20
FreeBSD:15:quarterly	1.23.2026.09.04	1.23.2026.09.04	n/a	n/a	n/a
FreeBSD:16:latest	1.23.2026.09.04	1.23.2026.09.04	n/a	n/a	n/a
FreeBSD:16:quarterly	n/a	n/a	n/a	n/a	n/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Build dependencies 19

Run dependencies 3

No port depends on this one.

Configuration

Options name: security_krb5

Option

Default

Description

CRYPTO_BUILTIN

Use crypto built into KRB5

CRYPTO_OPENSSL

off

Use OpenSSL crypto

DNS_FOR_REALM

off

Enable DNS lookups for Kerberos realm names

EXAMPLES

off

Build and/or install examples

LDAP

off

LDAP protocol support

LIBEDIT

off

Command line editing via libedit

LIBEDIT_BASE

off

Use libedit in FreeBSD base

LMDB

off

OpenLDAP Lightning Memory-Mapped Database support

NLS

off

Native Language Support

READLINE

Command line editing via libreadline

USES: autoreconf compiler:c11 cpe gmake localbase perl5 libtool:build gssapi:bootstrap,mit pkgconfig ssl
Service scripts: kpropd
Conflicts with: heimdal krb5 krb5-1*
Flavors: krb5-ldap-devel-1.23.2026.09.04_1

Files

Manual pages 30

.k5identity(5)
.k5login(5)
compile_et(1)
k5identity(5)
k5login(5)
k5srvutil(1)
kadm5.acl(5)
kadmin(1)
kadmin.local(8)
kadmind(8)
kdb5_ldap_util(8)
kdb5_util(8)
kdc.conf(5)
kdestroy(1)
kerberos(7)
kinit(1)
klist(1)
kpasswd(1)
kprop(8)
kpropd(8)
kproplog(8)
krb5-config(1)
krb5.conf(5)
krb5kdc(8)
ksu(1)
kswitch(1)
ktutil(1)
kvno(1)
sclient(1)
sserver(8)

pkg-plist 177

bin/compile_et
bin/gss-client
bin/k5srvutil
bin/kadmin
bin/kdestroy
bin/kinit
bin/klist
bin/kpasswd
bin/krb5-config
@mode 04755
@owner root
@group wheel
bin/ksu
@mode
@owner root
@group wheel
bin/kswitch
bin/ktutil
bin/kvno
bin/sclient
bin/sim_client
bin/uuclient
include/com_err.h
include/gssapi.h
include/gssapi/gssapi.h
include/gssapi/gssapi_alloc.h
include/gssapi/gssapi_ext.h
include/gssapi/gssapi_generic.h
include/gssapi/gssapi_krb5.h
include/gssapi/mechglue.h
include/gssrpc/auth.h
include/gssrpc/auth_gss.h
include/gssrpc/auth_gssapi.h
include/gssrpc/auth_unix.h
include/gssrpc/clnt.h
include/gssrpc/netdb.h
include/gssrpc/pmap_clnt.h
include/gssrpc/pmap_prot.h
include/gssrpc/pmap_rmt.h
include/gssrpc/rename.h
include/gssrpc/rpc.h
include/gssrpc/rpc_msg.h
include/gssrpc/svc.h
include/gssrpc/svc_auth.h
include/gssrpc/types.h
include/gssrpc/xdr.h
include/krad.h
include/krb5.h
include/krb5/ccselect_plugin.h
include/krb5/certauth_plugin.h
include/krb5/clpreauth_plugin.h
include/krb5/hostrealm_plugin.h
include/krb5/kadm5_auth_plugin.h
include/krb5/kadm5_hook_plugin.h
include/krb5/kdcpolicy_plugin.h
include/krb5/kdcpreauth_plugin.h
include/krb5/localauth_plugin.h
include/krb5/krb5.h
include/krb5/locate_plugin.h
include/krb5/plugin.h
include/krb5/pwqual_plugin.h
include/kadm5/admin.h
include/kadm5/chpass_util_strings.h
include/kadm5/kadm_err.h
include/kdb.h
include/krb5/preauth_plugin.h
include/profile.h
include/verto-module.h
include/verto.h
lib/libcom_err.so
lib/libcom_err.so.3
lib/libcom_err.so.3.0
lib/libgssapi_krb5.so
lib/libgssapi_krb5.so.2
lib/libgssapi_krb5.so.2.2
lib/libgssrpc.so
lib/libgssrpc.so.4
lib/libgssrpc.so.4.2
lib/libk5crypto.so
lib/libk5crypto.so.3
lib/libk5crypto.so.3.1
lib/libkadm5clnt.so
lib/libkadm5clnt_mit.so
lib/libkadm5clnt_mit.so.12
lib/libkadm5clnt_mit.so.12.0
lib/libkadm5srv.so
lib/libkadm5srv_mit.so
lib/libkadm5srv_mit.so.12
lib/libkadm5srv_mit.so.12.0
lib/libkdb5.so
lib/libkdb5.so.10
lib/libkdb5.so.10.0
lib/libkrb5.so
lib/libkrb5.so.3
lib/libkrb5.so.3.3
lib/libkrb5support.so
lib/libkrb5support.so.0
lib/libkrb5support.so.0.1
lib/krb5/plugins/kdb/db2.so
lib/krb5/plugins/kdb/klmdb.so

The first 100 are listed.

distinfo 1

File

Size

SHA256

krb5-krb5-1.23.2026.09.04-82a4224f0_GH0.tar.gz

4.682275e+06

c811d49752e60060008fcfd0458b6cfb87301696846b24162556f98e8d132625

Commit history 5

Date Commit Credits Log message

2026-10-20

85ba298b7e

Baptiste Daroussin

databases/lmdb: allow to install both 0.x and 1.x together

LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are incompatibles as well. Rename or relocate everything databases/lmdb0 installs so that it no longer overlaps with databases/lmdb: - the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0 - the header is include/lmdb0/lmdb.h - the linker name is liblmdb0.so, the shared object keeps its ABI name liblmdb.so.0 so already linked programs are unaffected - the pkg-config file is lmdb0.pc A compatibility prefix holding the previous layout is also installed under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that build systems which expect to find lmdb.h and -llmdb relative to a single directory only need a path change. Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease …

2026-09-23 d8dd32ef06 Cy Schubert security/krb5-devel: update to the latest MIT/KRB5 github commit

2026-07-27 c936ea0c0d Cy Schubert security/krb5-devel: update to the latest MIT/KRB5 github commit

2026-07-13 00cbbb2566 Cy Schubert security/krb5-devel: update to the latest MIT/KRB5 github commit

2026-07-06

5f9d389f29

Xin LI

databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle API breakage: applications that compiled cleanly against 1.0 headers could fail silently at run time. Known affected ports include dns/knot3, mail/bogofilter, and mail/postfix; the postfix issue has been confirmed upstream. Linux distributions such as Arch Linux have observed the same breakage. Samba can also be affected in certain configurations. Because the regression is not detectable in an -exp build run -- the postfix failure only manifests at run time, and bogofilter was caught only because post-build self-tests happen to exercise this path -- we cannot rely on package builds to validate the 1.0 upgrade. This commit introduces databases/lmdb0 as a holding port for the 0.9.35 …