Date: Mon, 5 May 2003 07:01:13 -0500 From: "Jacques A. Vidrine" <nectar@FreeBSD.org> To: Mark Murray <markm@FreeBSD.org> Cc: cvs-all@FreeBSD.org Subject: NO_KERBEROS (was Re: cvs commit: src/kerberos5 ...) Message-ID: <20030505120113.GB21530@madman.celabo.org> In-Reply-To: <200305050758.h457wiEQ043565@repoman.freebsd.org> References: <200305050758.h457wiEQ043565@repoman.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, May 05, 2003 at 12:58:44AM -0700, Mark Murray wrote: > Log: > Turn MAKE_KERBEROS5 into NO_KERBEROS by negating the logic. Some extra > cleanups were necessary in release/Makefile, and the tinderbox code > was syntax checked, not run checked. Hi, Mark! Thanks so much! This takes care of many issues which were bothering me. First and foremost, now we no longer have the bad situation where the Kerberos bits were installed by default, but they were not rebuilt by default during `make world'. This was leaving stale Kerberos libraries and utilities in many situations. Now the Kerberos bits are treated more like the other (in theory) `optional' components of `make world'. Getting rid of the separate Kerberos 4 and Kerberos 5 distributions makes applying fixes, regression testing, and package building significantly simpler (at least from the security-officer perspective). This also removes some misgivings I had about enabling Kerberos support in more parts of the base system --- with separate distributions, each Kerberos-enabled utility became a fork and a support issue. Binary patches (such as those occassionally issued by the SO team and those by 3rd parties such as Colin's updater) will be more widely applicable now. This should cut make release times a wee bit, since we don't have to build telnet and ssh quite so many times. (Now if we could only dispatch the `crypto' distribution :-) Finally, this brings us in line with the other BSDs (NetBSD, OpenBSD, and Mac OS X), which all have Kerberos built-in. Thanks again! Cheers, -- Jacques Vidrine . NTT/Verio SME . FreeBSD UNIX . Heimdal nectar@celabo.org . jvidrine@verio.net . nectar@freebsd.org . nectar@kth.se
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030505120113.GB21530>