how to build for KRB5 MIT & GSSAPI for FreeBSD 15 ?

As HEIMDAL is no longer prefered kerberos for FreeBSD 15, what is the appropriate settings for GSSAPI in all ports ?

I assume :

UNSET GSSAPI_HEIMDAL
UNSET GSSAPI_BASE
SET GSSAPI_MIT

but if FreeBSD 15 was built using MIT kerberos as default , what is invoked by GSSAPI_BASE and how/why is it different from GSSAPI_MIT ?
 
well , yes this is what confuses me......
on a virgin new installation of Freebsd 15 with XORG, GNOME, KDE6 installed from packages
with no /etc/make.conf on the system and no /var/db/ports/security_krb5 file on the system
and no /usr/ports/security/krb5 contents , eg nothings been built,
The system does already have the krb5.1.22.1 package installed.

# pkg info krb5-1.22.1
krb5-1.22.1
Name : krb5
Version : 1.22.1
Installed on : Wed Nov 26 13:08:22 2025 CET
Origin : security/krb5
Architecture : FreeBSD:15:amd64
Prefix : /usr/local
Categories : security
Licenses : MIT

If this is delivered by default , there would be no actual difference between GSSAPI_BASE and GSSAPI_MIT , would there ?
 
This is what I have been using for quite some time:
Code:
OPTIONS_UNSET+=GSSAPI_BASE GSSAPI_NONE GSSAPI_HEIMDAL
OPTIONS_SET+=GSSAPI_MIT
with 15 in a couple of years I will move to `GSSAPI_BASE` no longer use the port.
 
Back
Top