Heimdal Kerberos Installed?

Rick Miller vmiller at hostileadmin.com
Tue Feb 2 15:48:55 UTC 2016

Hi all,

I've discovered kerberos binaries in /usr/bin and /usr/sbin that had been
presumed not installed as the build system utilizes NO_KERBEROS=YES in
make.conf that built the resulting distribution based on the releng/10.0
branch.  It had been presumed that kerberos bits would not be included
outside of /usr/local where security/krb5 is being installed.

Consider that /usr/bin and /usr/sbin contain binaries for kadmin, kpasswd,
kinit, klist, etc while /usr/sbin/ktutil is also present.  Additionally,
ldd reports these binaries linking against /usr/lib/libkrb5.so.11
vs. /usr/local/lib/libkrb5.so.3.3 installed by security/krb5.  Conversely,
the kerberos bits install in /usr/local do link against the appropriate

The problem is that it appears Heimdal Kerberos appears to be installed
despite the presence of NO_KERBEROS=YES in make.conf.  Are there base
kerberos bits that do get installed regardless of the existence of this
knob?  Is there an expectation that this knob notation (as opposed to
WITHOUT_KERBEROS) works with releng/10.0?

Take care
Rick Miller

More information about the freebsd-questions mailing list