From owner-freebsd-questions@FreeBSD.ORG Thu Feb 26 17:48:36 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id ADD60106566C for ; Thu, 26 Feb 2009 17:48:36 +0000 (UTC) (envelope-from tajudd@gmail.com) Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.245]) by mx1.freebsd.org (Postfix) with ESMTP id 6BC1A8FC18 for ; Thu, 26 Feb 2009 17:48:36 +0000 (UTC) (envelope-from tajudd@gmail.com) Received: by an-out-0708.google.com with SMTP id b38so470419ana.13 for ; Thu, 26 Feb 2009 09:48:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=CVBc8mcycjqkhx4VEoRQ9r9d6/tHNV49BcFZjGmdbQQ=; b=wq7EYjC59XmdQCMBtr5Y/C3Kxjg9BmaICQFvX/Ix8dX0UzNQLQi8baQN6uY+mfJ55Y NFcE20kfdnr+DPVRd7ALiHoDpBt8NrOTSmGvTM3f52Gru0tlysH1942WSivfcp4oIYfQ /hXteSk4EUdiWmUaQoQYlT/XlAPAxcStyjSYk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=T4rQZSnIVZBHwc8Ha8AsNiLet4r6IW/D3lwLbr7KXPqPelVy05rZFzmhjQ1gufE+YY U9bG+2h2g0pTm4U0KbfvipM7mdmJ96nDH8JUrvnWklD7gmqR/lJbwtnBc4lzKuRmLYUG QhL3irIKKQvr0xsROQVvA2+C6K3evm4kkKdw4= MIME-Version: 1.0 Received: by 10.231.10.68 with SMTP id o4mr2022987ibo.33.1235670515269; Thu, 26 Feb 2009 09:48:35 -0800 (PST) Date: Thu, 26 Feb 2009 10:48:35 -0700 Message-ID: From: Tim Judd To: FreeBSD Questions Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Heimdal vs MIT KerberosV X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Feb 2009 17:48:36 -0000 Hello, Experts.. MIT and I are both located in the US -- so the export law from the US/to the US isn't applicable. I can understand why the included KerberosV implementation is the one from Sweeden, due to these export laws. I know there's a knob (WITHOUT_KERBEROS) to exclude it from the base system, but how can I replace the Sweeden-based Heimdal implementation in favor of the MIT implementation. This isn't expected to be a long drawn out process, one that takes world hacking to work. It'd be just as easy for me to build MIT krb5 from ports and let it install into /usr/local. That's fine -- but I wanted to stretch my knowledge on FreeBSD and the building process and would like to know what it would take to drop in MIT in exchange for Heimdal. I'd guess a couple possible ways to do it, but I wanted to ask the experts before I broke FreeBSD. :) Options as I see them: 1) Take the port directory and replace the contents of /usr/src/kerberos5 with security/krb5 from ports 2) Take the tarball from MIT and drop it into /usr/src/kerberos5 If anything were to work, I'd expect #1 to. So what is the expert's opinion, is it really this easy? Thanks, everyone. Appreciate your time and input. --Tim