From 290e8aaa384085a7f691b2a140b5a904794eb83c Mon Sep 17 00:00:00 2001
From: Cy Schubert <cy@FreeBSD.org>
Date: Wed, 4 Jun 2025 16:39:08 -0700
Subject: [PATCH] share/mk: Add MIT KRB5 build knob

This is the first in a series of commits to replace Heimdal with
MIT KRB5. This first commit adds the WITH_MITKRB5/MK_MITKRB5 knob
to src.opts.mk and its corresponding documentation in
tools/build/options. The default is off.

This change of and by itself is of no consequence as MIT KRB5 has
yet to be imported in to HEAD. But it does insulate the build from
inremental change until the last patch is committed when WITH_MITKRB5
will build MIT KRB5 1.21.3 instead of Heimdal.

The affords us the opportunity to review smaller commits.

This is the first of many commits.

Reviewed by:	imp, jhb, brooks, markj
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D50684
---
 share/mk/src.opts.mk             | 3 +++
 tools/build/options/WITH_MITKRB5 | 1 +
 2 files changed, 4 insertions(+)
 create mode 100644 tools/build/options/WITH_MITKRB5

diff --git a/share/mk/src.opts.mk b/share/mk/src.opts.mk
index 956220be43b..387e570f851 100644
--- a/share/mk/src.opts.mk
+++ b/share/mk/src.opts.mk
@@ -211,6 +211,7 @@ __DEFAULT_NO_OPTIONS = \
     LOADER_VERIEXEC_PASS_MANIFEST \
     LLVM_FULL_DEBUGINFO \
     MALLOC_PRODUCTION \
+    MITKRB5 \
     OFED_EXTRA \
     OPENLDAP \
     REPRODUCIBLE_BUILD \
@@ -403,6 +404,7 @@ MK_OPENSSL:=	no
 MK_OPENSSH:=	no
 MK_KERBEROS:=	no
 MK_KERBEROS_SUPPORT:=	no
+MK_MITKRB5:=	no
 .endif
 
 .if ${MK_DTRACE} == "no"
@@ -429,6 +431,7 @@ MK_OPENSSH:=	no
 MK_OPENSSL_KTLS:=	no
 MK_KERBEROS:=	no
 MK_KERBEROS_SUPPORT:=	no
+MK_MITKRB5:=	no
 MK_LDNS:=	no
 MK_PKGBOOTSTRAP:=	no
 MK_LOADER_ZFS:=	no
diff --git a/tools/build/options/WITH_MITKRB5 b/tools/build/options/WITH_MITKRB5
new file mode 100644
index 00000000000..6e3683c351c
--- /dev/null
+++ b/tools/build/options/WITH_MITKRB5
@@ -0,0 +1 @@
+Set this to build MIT Kerberos 5 instead of KTH Heimdal.