From owner-freebsd-security@FreeBSD.ORG  Sun Jun 11 16:35:21 2006
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9D1F716A52A
	for <freebsd-security@freebsd.org>;
	Sun, 11 Jun 2006 16:35:21 +0000 (UTC)
	(envelope-from forrie@forrie.com)
Received: from forrie.com (c-24-62-224-60.hsd1.nh.comcast.net [24.62.224.60])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5A6FE43D5E
	for <freebsd-security@freebsd.org>;
	Sun, 11 Jun 2006 16:35:20 +0000 (GMT)
	(envelope-from forrie@forrie.com)
Received: from [192.168.1.98] (monster.forrie.com [192.168.1.98])
	(authenticated bits=0)
	by forrie.com (8.13.6/8.13.6) with ESMTP id k5BGZfBr047637
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <freebsd-security@freebsd.org>;
	Sun, 11 Jun 2006 12:35:41 -0400 (EDT)
	(envelope-from forrie@forrie.com)
Message-ID: <448C46BD.8060203@forrie.com>
Date: Sun, 11 Jun 2006 12:37:17 -0400
From: Forrest Aldrich <forrie@forrie.com>
User-Agent: Thunderbird 1.5.0.4 (Windows/20060603)
MIME-Version: 1.0
To: freebsd-security@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: ClamAV 0.88.2/1524/Fri Jun 9 17:28:03 2006 on mail.forrie.com
X-Virus-Status: Clean
X-Mailman-Approved-At: Sun, 11 Jun 2006 19:00:40 +0000
Subject: Kerberos5 / Heimdal
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 11 Jun 2006 16:35:21 -0000

I have FreeBSD-6.1 and it appears the default installation has a full 
complement of Kerberos5.  But, /usr/src/kerberos5/README states:

    This subtree is world-exportable, as it does not contain any
    cryptographic code.

    At the time of writing, it did not even contain source code, only
    Makefiles and headers.

    Please maintain this "exportable" status quo.

    Thanks!

    MarkM
    markm@freebsd.org
    20th Sept 1997


I'm guessing the README is a bit out-of-date...

The HANDBOOK suggests more needs to be obtained from the 
security/heimdal port.

I see all the libraries in /usr/lib etc., so which is it... do we have a 
full install as a part of 6.1 or is the security/heimdal still needed to 
bring it up to speed.


_F