telnet: Add Support for MIT KRB5 build

MIT KRB5 does not support telnet. This is because telnet uses 3DES
encryption, which requires 3DES encrypted keys in the KDC database.
As MIT had deprecated and removed 3DES support about a decade ago,
telnet is not supported.

Sponsored by:		The FreeBSD Foundation
Reviewed by:		markj
Differential revision:	https://reviews.freebsd.org/D50785
This commit is contained in:
Cy Schubert 2025-06-10 13:07:32 -07:00
parent 0acf1dd792
commit 78d4557a9b
2 changed files with 4 additions and 2 deletions

View file

@ -19,7 +19,8 @@ CFLAGS+= -DENCRYPTION -DAUTHENTICATION -DSRA
CFLAGS+= -DOPENSSL_API_COMPAT=0x10100000L
.endif
.if ${MK_KERBEROS_SUPPORT} != "no"
.if ${MK_KERBEROS_SUPPORT} != "no" && ${MK_MITKRB5} != "yes"
# MIT KRB5 deprecated and removed 3DES. Therefore no telnet support.
SRCS+= kerberos5.c
CFLAGS+= -DKRB5 -DFORWARD -Dnet_write=telnet_net_write
.endif

View file

@ -30,7 +30,8 @@ CFLAGS+= -DENCRYPTION -DAUTHENTICATION -DIPSEC
LIBADD+= mp crypto ipsec pam
.endif
.if ${MK_KERBEROS_SUPPORT} != "no"
.if ${MK_KERBEROS_SUPPORT} != "no" && ${MK_MITKRB5} != "yes"
# MIT KRB5 deprecated and removed 3DES. Therefore no telnet support.
CFLAGS+= -DKRB5 -DFORWARD -Dnet_write=telnet_net_write
LIBADD+= krb5 roken
.endif