From: Michal Nowak <mnowak@isc.org>
Date: Fri, 22 Mar 2024 10:31:23 +0000 (+0100)
Subject: Build FreeBSD with MIT Kerberos5 instead of Heimdal
X-Git-Tag: v9.18.26~8^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c683e01ff8aee03284744ff753e8bd017d308938;p=thirdparty%2Fbind9.git

Build FreeBSD with MIT Kerberos5 instead of Heimdal

tsiggss system tests crash or are unstable with the base FreeBSD
(Heimdal-based) GSS-API.

(cherry picked from commit d6df757fdc196f8cf1c6a7f1292ea4bf87440d73)
---

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index f5bce8fb5e0..79a69c987b6 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1336,7 +1336,9 @@ unit:clang:bookworm:amd64:
 clang:freebsd13:amd64:
   variables:
     CFLAGS: "${CFLAGS_COMMON}"
-    EXTRA_CONFIGURE: "${WITH_READLINE_LIBEDIT}"
+    # Use MIT Kerberos5 for BIND 9 GSS-API support because of FreeBSD Heimdal
+    # incompatibility; see https://bugs.freebsd.org/275241.
+    EXTRA_CONFIGURE: "${WITH_READLINE_LIBEDIT} --with-gssapi=/usr/local/bin/krb5-config"
     USER: gitlab-runner
   <<: *freebsd_13_amd64_image
   <<: *build_job
@@ -1362,8 +1364,9 @@ unit:clang:freebsd13:amd64:
 clang:freebsd14:amd64:
   variables:
     CFLAGS: "${CFLAGS_COMMON}"
-    # Disable BIND 9 GSS-API support because of Heimdal incompatibility; see FreeBSD bug #275241.
-    EXTRA_CONFIGURE: "${WITH_READLINE_EDITLINE} --without-gssapi"
+    # Use MIT Kerberos5 for BIND 9 GSS-API support because of FreeBSD Heimdal
+    # incompatibility; see https://bugs.freebsd.org/275241.
+    EXTRA_CONFIGURE: "${WITH_READLINE_EDITLINE} --with-gssapi=/usr/local/bin/krb5-config"
     USER: gitlab-runner
   <<: *freebsd_14_amd64_image
   <<: *build_job