From owner-freebsd-security Tue Nov 19 5:29:48 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3603A37B401 for ; Tue, 19 Nov 2002 05:29:45 -0800 (PST) Received: from gw.nectar.cc (gw.nectar.cc [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id ACCA743E3B for ; Tue, 19 Nov 2002 05:29:44 -0800 (PST) (envelope-from nectar@nectar.cc) Received: from shade.nectar.cc (localhost [127.0.0.1]) by gw.nectar.cc (Postfix) with ESMTP id 1FA5C67; Tue, 19 Nov 2002 07:29:44 -0600 (CST) Received: by shade.nectar.cc (Postfix, from userid 1001) id 4659B237E5; Tue, 19 Nov 2002 07:29:50 -0600 (CST) Date: Tue, 19 Nov 2002 07:29:50 -0600 From: "Jacques A. Vidrine" To: KIMURA Yasuhiro Cc: freebsd-security@freebsd.org Subject: Re: ANNOUNCE: FreeBSD Security Advisory FreeBSD-SA-02:40.kadmind Message-ID: <20021119132950.GB929@shade.nectar.cc> Mail-Followup-To: "Jacques A. Vidrine" , KIMURA Yasuhiro , freebsd-security@freebsd.org References: <200211130406.gAD46ZFu008072@freefall.freebsd.org> <20021118.102218.35789518.yasu@utahime.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20021118.102218.35789518.yasu@utahime.org> User-Agent: Mutt/1.5.1i-ja.1 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org [I apologize if you receive a duplicate of this. I have reason to believe it didn't go through the first time.] On Mon, Nov 18, 2002 at 10:22:18AM +0900, KIMURA Yasuhiro wrote: > I tried instructions above on my 4.7-RELEASE pc and failed to build > k5admind and kandmind. [...] > Are there anything else that I should do to patch my 4.7R system? If you perform the following steps before the others, does it work for you? # cd /usr/src/kerberos5/lib # make depend && make all install # cd /usr/src/kerberosIV/lib # make depend && make all install > And one more question. This adovisary says: > > > The k5admind server is installed as part of the `krb5' distribution, > > or when building from source with MAKE_KERBEROS5 set. The kadmind > > server is installed as part of the `krb4' distribution, or when > > building from source with MAKE_KERBEROS4 set. Neither is installed by > > default. > > But both k5admind and kadmind are installed on my 4.7R systems. > > sugar# ls -l /usr/sbin/kadmind > -r-xr-xr-x 1 root wheel 21808 Oct 9 21:51 /usr/sbin/kadmind > sugar# ls -l /usr/libexec/k5admind > -r-xr-xr-x 1 root wheel 19704 Oct 9 21:55 /usr/libexec/k5admind > sugar# > > I selected "X-Developer" when I install these systems. Isn't it the > "default installation" describled above? No, `X-Developer' is not the default installation. Nonetheless, I'm surprised. The `krb4' and `krb5' distributions may be handled differently now --- I must check. Thanks for the feedback! Cheers, -- Jacques A. Vidrine http://www.celabo.org/ NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos jvidrine@verio.net . nectar@FreeBSD.org . nectar@kth.se To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message