From owner-freebsd-security@FreeBSD.ORG  Mon Jan 10 17:12:40 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A468916A4CE
	for <freebsd-security@freebsd.org>;
	Mon, 10 Jan 2005 17:12:40 +0000 (GMT)
Received: from mx01.uunet.co.za (mx01.uunet.co.za [196.31.48.143])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3686E43D45
	for <freebsd-security@freebsd.org>;
	Mon, 10 Jan 2005 17:12:40 +0000 (GMT)
	(envelope-from gareth@uunet.co.za)
Received: from [196.30.72.11] (helo=pixproxy.so.cpt1.za.uu.net)
	by mx01.uunet.co.za with esmtp (Exim 4.34; FreeBSD)
	id 1Co35n-000AwM-KO
	for freebsd-security@freebsd.org; Mon, 10 Jan 2005 19:12:39 +0200
Received: from gabba.so.cpt1.za.uu.net (gabba.so.cpt1.za.uu.net
	[196.30.72.25])
	by pixproxy.so.cpt1.za.uu.net (Postfix) with ESMTP id 8F93757AC
	for <freebsd-security@freebsd.org>;
	Mon, 10 Jan 2005 19:12:32 +0200 (SAST)
Date: Mon, 10 Jan 2005 19:12:32 +0200 (SAST)
From: Gareth Hopkins <gareth@uunet.co.za>
X-X-Sender: gareth@gabba.so.cpt1.za.uu.net
To: freebsd-security@freebsd.org
Message-ID: <20050110190814.J49931@gabba.so.cpt1.za.uu.net>
X-Cell: +27 82 929 6668
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
X-Virus-Scanner: Scanned By ClamAV
X-Spam-Score: -4.9 (----)
X-Scan-Signature: 481586322dcdedc11fb294da8311baae
X-Mailman-Approved-At: Tue, 11 Jan 2005 14:18:16 +0000
Subject: MIT Kerberos and OpenSSH
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Jan 2005 17:12:40 -0000

Howdie,

 	Is there a way to get the default BSD 5.3 openssh to compile 
against the MIT kerberos libraries? I have set NO_KERBEROS=yes in /etc/make.conf so
that the heimdal kerberos is not built, and rebuilt world, then installed 
/usr/ports/security/krb5 and rebuilt world again. sshd is however not being built 
against MIT at all.

[root@foobar] ~ # ldd /usr/sbin/sshd
/usr/sbin/sshd:
         libssh.so.2 => /usr/lib/libssh.so.2 (0x28098000)
         libutil.so.4 => /lib/libutil.so.4 (0x280c7000)
         libz.so.2 => /lib/libz.so.2 (0x280d3000)
         libwrap.so.3 => /usr/lib/libwrap.so.3 (0x280e3000)
         libpam.so.2 => /usr/lib/libpam.so.2 (0x280eb000)
         libcrypto.so.3 => /lib/libcrypto.so.3 (0x280f2000)
         libcrypt.so.2 => /lib/libcrypt.so.2 (0x281e7000)
         libc.so.5 => /lib/libc.so.5 (0x281ff000)

Thanks

---
Gareth Hopkins
Server Operations
UUNET South Africa