From owner-freebsd-current@FreeBSD.ORG Mon May 5 02:02:45 2003 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5481C37B401 for ; Mon, 5 May 2003 02:02:45 -0700 (PDT) Received: from sccrmhc03.attbi.com (sccrmhc03.attbi.com [204.127.202.63]) by mx1.FreeBSD.org (Postfix) with ESMTP id B533043F75 for ; Mon, 5 May 2003 02:02:44 -0700 (PDT) (envelope-from DougB@freebsd.org) Received: from master.dougb.net (12-234-22-23.client.attbi.com[12.234.22.23]) by sccrmhc03.attbi.com (sccrmhc03) with SMTP id <200305050902430030054epie>; Mon, 5 May 2003 09:02:43 +0000 Date: Mon, 5 May 2003 02:02:41 -0700 (PDT) From: Doug Barton To: Mark Murray In-Reply-To: <200305050845.h458j38c069038@grimreaper.grondar.org> Message-ID: <20030505020008.V1391@znfgre.qbhto.arg> References: <200305050845.h458j38c069038@grimreaper.grondar.org> Organization: http://www.FreeBSD.org/ X-message-flag: Outlook -- Not just for spreading viruses anymore! MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: current@freebsd.org Subject: Re: HEADS UP! Kerberos5/Heimdal now default! X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 May 2003 09:02:45 -0000 On Mon, 5 May 2003, Mark Murray wrote: > Hello All > > Kerberos5/Heimdal is now the default in Current. The old option > "MAKE_KERBEROS5" is removed. If you do _NOT_ want Kerberos, you > need to define "NO_KERBEROS" in your /etc/make.conf. I have to object to this change of direction. Both on POLA grounds, and on the grounds that because most people don't use kerberos, it shouldn't be the default. I also think that given the historical propensity of kerberos to be vulnerable to attack, it definitely shouldn't be included by default. Doug -- This .signature sanitized for your protection