Kerberos auth broken after 15.0-RELEASE upgrade (~/.k5login.d/* unsupported) – potential release notes/errata candidate

[astralblue]

After upgrading to FreeBSD 15.0-RELEASE (from 14.3-STABLE), GSSAPI auth over sshd stopped working. The issue was that Heimdal's ~/.k5login.d/* feature is unsupported by MIT Kerberos. FWIW I'm using this shell snippet to merge them into ~/.k5login at upgrade time. Perhaps this is worth mentioning in the release notes or an errata.

if [ -d "${d}/root/.k5login.d" ]; then
  for f in "${d}/root/.k5login.d"/*; do
    [ -f "${f}" ] || continue
    { echo; echo "# ${f#"${d}/root/"}"; cat "${f}"; } >> "${d}/root/.k5login" && rm -f "${f}"
  done
  rmdir "${d}/root/.k5login.d"
fi