I have FreeBSD-6.1 and it appears the default installation has a full complement of Kerberos5. But, /usr/src/kerberos5/README states: This subtree is world-exportable, as it does not contain any cryptographic code. At the time of writing, it did not even contain source code, only Makefiles and headers. Please maintain this "exportable" status quo. Thanks! MarkM markm@freebsd.org 20th Sept 1997 I'm guessing the README is a bit out-of-date... The HANDBOOK suggests more needs to be obtained from the security/heimdal port. I see all the libraries in /usr/lib etc., so which is it... do we have a full install as a part of 6.1 or is the security/heimdal still needed to bring it up to speed. _F
Quoting Forrest Aldrich <forrie@forrie.com> (from Sun, 11 Jun 2006 12:37:17 -0400):> I have FreeBSD-6.1 and it appears the default installation has a full > complement of Kerberos5. But, /usr/src/kerberos5/README states: > > This subtree is world-exportable, as it does not contain any > cryptographic code. > > At the time of writing, it did not even contain source code, only > Makefiles and headers. > > Please maintain this "exportable" status quo. > > Thanks! > > MarkM > markm@freebsd.org > 20th Sept 1997 > > > I'm guessing the README is a bit out-of-date...Yes, the USA changed the export restrictions and we're able to export crypto code to the world.> The HANDBOOK suggests more needs to be obtained from the > security/heimdal port.The port allows you to add support for LDAP, cracklib and builds X11 tools if desired.> I see all the libraries in /usr/lib etc., so which is it... do we have > a full install as a part of 6.1 or is the security/heimdal still needed > to bring it up to speed.If you don't need the above menioned features, you don't need to install the port. Bye, Alexander. -- Selling GoodYear Eagle F1 235/40ZR18, 2x 4mm + 2x 5mm, ~150 EUR you have to pick it up between Germany/Saarland and Luxembourg/Capellen http://www.Leidinger.net Alexander @ Leidinger.net: PGP ID = B0063FE7 http://www.FreeBSD.org netchild @ FreeBSD.org : PGP ID = 72077137
Forrest Aldrich <forrie@forrie.com> writes:> I see all the libraries in /usr/lib etc., so which is it... do we > have a full install as a part of 6.1 or is the security/heimdal > still needed to bring it up to speed.kerberos5 contains only Makefiles; the source code itself is in crypto/heimdal. This was originally done to make it easier to separate exportable and non-exportable parts of the tree. Since export controls are no longer an issue, the contents of crypto should probably move into contrib, and the Makefiles in kerberos5 and secure should be distributed in other parts of the tree (lib, usr.bin, usr.sbin etc.). Doing so would be hard on the repo, though (it would grow by approximately 100 MB, or about 7%, overnight). DES -- Dag-Erling Sm?rgrav - des@des.no