[Bug 277650] Remove supporting linking against Heimdal from base (GSSAPI_BASE)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277650

--- Comment #13 from Siva Mahadevan <me@svmhdvn.name> ---
(In reply to Michael Osipov from comment #12)

I still feel that this is a vague argument in favour of keeping it in base. For
users that desire a kerberized sshd, here are the advantages of relying on
openssh-portable from ports in my eyes:
* users can simply 'pkg upgrade' to immediately get security and feature
upgrades to openssh and kerberos at the cadence that they wish
* sshd in base will potentially have a smaller attack surface if GSSAPI is
disabled
* Both currently-supported providers of kerberos are up-to-date in ports, along
with their -devel counterparts for those who wish to use bleeding-edge
providers. This is a big one, since Heimdal has been stuck on 7.8.0 for quite
some time, but the upstream git project has seen recent active development and
fixes.
* The duplication of work for maintainers to update both base and ports
kerberos providers is removed
* Users can wish to link against port-provided OpenSSL as well

The only disadvantage that I can see is that users will not be provided
out-of-the-box with a default batteries-included environment that supports
kerberized services like sshd or others.

-- 
You are receiving this mail because:
You are on the CC list for the bug.