In D54182#1239024, @timur wrote:

The question is what problem are you trying to tackle. Chasing the software versions was never the good practice, IMHO, but see yourself.

The root of the problem here is the fact that maintainer of the dns/bind-tools doesn't want to enable krb5 support by default, so we don't have OOTB solution for the signed DNS updates in the AD configuration. This port was trying to close that gap, providing Samba AD, installable from the packages, without the need for building it separately.

This doesn't look like and adequate replacement:

====> GSSAPI Security API support: you have to select exactly one of them
     GSSAPI_BASE=off: Using Heimdal in base (nsupdate is broken)
     GSSAPI_HEIMDAL=off: Using security/heimdal (nsupdate is broken)
     GSSAPI_MIT=off: Using security/krb5
     GSSAPI_NONE=on: Disable

Again, it could be that with the current state of Samba it's (almost) impossible to retain AD functionality and we should concentrate only on the basic fileserver with ability to join AD domain.

Then we can drop a lot of patches, dependencies and this port all together.

maybe helpful: https://antranigv.am/posts/2025/02/dtrace-python-freebsd-again/