Kerberos5 / Heimdal

Alexander Leidinger Alexander at Leidinger.net
Wed Jun 14 09:27:27 UTC 2006


Quoting Forrest Aldrich <forrie at forrie.com> (from Sun, 11 Jun 2006  
12:37:17 -0400):

> I have FreeBSD-6.1 and it appears the default installation has a full
> complement of Kerberos5.  But, /usr/src/kerberos5/README states:
>
>    This subtree is world-exportable, as it does not contain any
>    cryptographic code.
>
>    At the time of writing, it did not even contain source code, only
>    Makefiles and headers.
>
>    Please maintain this "exportable" status quo.
>
>    Thanks!
>
>    MarkM
>    markm at freebsd.org
>    20th Sept 1997
>
>
> I'm guessing the README is a bit out-of-date...

Yes, the USA changed the export restrictions and we're able to export  
crypto code to the world.

> The HANDBOOK suggests more needs to be obtained from the
> security/heimdal port.

The port allows you to add support for LDAP, cracklib and builds X11  
tools if desired.

> I see all the libraries in /usr/lib etc., so which is it... do we have
> a full install as a part of 6.1 or is the security/heimdal still needed
> to bring it up to speed.

If you don't need the above menioned features, you don't need to  
install the port.

Bye,
Alexander.

-- 
Selling GoodYear Eagle F1 235/40ZR18, 2x 4mm + 2x 5mm, ~150 EUR
you have to pick it up between Germany/Saarland and Luxembourg/Capellen
http://www.Leidinger.net    Alexander @ Leidinger.net: PGP ID = B0063FE7
http://www.FreeBSD.org       netchild @ FreeBSD.org  : PGP ID = 72077137



More information about the freebsd-security mailing list