Remove Heimdal Kerberos from my FreeBSD

Vladimir Terziev vladimir.terziev at sun-fish.com
Mon Jul 18 08:33:38 GMT 2005


   Hi,

   your right about useless things, but making basic software to depend on these useless things is a very bad idea.
   I'm sure, telnet & ssh are the most used applications on any UNIX system, so they must not depend on any third party software by default. If you need kerberized ssh or telnet, then ok -- relink them to use kerberos, but why possible bugs in kerberos should affect ssh & telnet when kerberos is not mandantory for their functioning ?

	Vladimir


On Mon, 18 Jul 2005 11:27:53 +0400
Roman Kurakin <rik at cronyx.ru> wrote:

> Hi,
> 
> Vladimir Terziev wrote:
> 
> >    Yes, i deleted it along with all libs related to it. This caused telnet/ssh/etc to stop working. So i rebuilt the world with NO_KERBEROS=yes and now all is like a charm -- no Heimdal Kerberos and no software depending on it.
> >    I think making the Heimdal Kerberos part of the base FreeBSD OS is bad idea, but linking base software (like telnet, ssh), which is part of the base FreeBSD OS, against it, is very very bad idea.
> >  
> >
> Why? Yes, all current OSs have a lot of useless things from some one 
> point of view.
> For example, at work I do not need X while driver development, but at 
> home I need it.
> At home I may not need almost all development tools.
> This is normal. If I want to setup a system fast and without additional 
> efforts I'll setup
> a typical options. And I'll start use it as fast as it would be up. Most 
> peoples do the
> same.
> 
> It is better to have all thing in generic system that suits the majority.
> If you want to setup a custom system, you need to do it manually.
> 
> rik
> 
> >	Vladimir
> >
> >
> >On Sun, 17 Jul 2005 22:02:04 +0930
> >"Daniel O'Connor" <doconnor at gsoft.com.au> wrote:
> >
> >  
> >
> >>On Sunday 17 July 2005 02:26, Dominic Marks wrote:
> >>    
> >>
> >>>In /etc/make.conf put
> >>>
> >>>NO_KERBEROS=yes
> >>>
> >>>Then build a new world. That should do the trick.
> >>>      
> >>>
> >>This won't remove it, it will just not update it.
> >>You would have to delete it by hand.
> >>
> >>Telnet/ssh/etc don't have to depend on Kerberos and if you use the above 
> >>option they will be built without Kerb support.
> >>
> >>-- 
> >>Daniel O'Connor software and network engineer
> >>for Genesis Software - http://www.gsoft.com.au
> >>"The nice thing about standards is that there
> >>are so many of them to choose from."
> >>  -- Andrew Tanenbaum
> >>GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
> >>
> >>    
> >>
> >_______________________________________________
> >freebsd-hackers at freebsd.org mailing list
> >http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> >To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"
> >  
> >
> 


More information about the freebsd-hackers mailing list