From owner-freebsd-security  Fri May 10 16:50:49 2002
Delivered-To: freebsd-security@freebsd.org
Received: from alfanett.no (mail1.alfanett.no [195.134.40.22])
	by hub.freebsd.org (Postfix) with ESMTP
	id A35BF37B409; Fri, 10 May 2002 16:50:42 -0700 (PDT)
Received: from goppus.overalt.no (kunde1323.alfanett.no [195.134.38.54])
	by alfanett.no (8.9.3/8.9.3/alfaNETT1.0) with ESMTP id BAA23639;
	Sat, 11 May 2002 01:50:36 +0200
Content-Type: text/plain;
  charset="iso-8859-1"
From: Marius Sorteberg <marius@overalt.no>
Reply-To: marius@overalt.no
To: "Jacques A. Vidrine" <nectar@FreeBSD.ORG>
Subject: Re: How to remove Kerberos from base install
Date: Sat, 11 May 2002 01:51:44 +0200
X-Mailer: KMail [version 1.4]
Cc: freebsd-security@FreeBSD.ORG
References: <20020510093809.GA368@overalt.no> <20020510162535.GA52239@madman.nectar.cc>
In-Reply-To: <20020510162535.GA52239@madman.nectar.cc>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-Id: <200205110151.44504.marius@overalt.no>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


Thanks for your reply.

> > How do I remove KerberosIV and Heimdal from my base install?
> > I know it's OK to delete all files related to the old Kerberos apps, but
> > how do I know witch files do delete?
>
> I have two suggestions:
>
>   (1) Have a look at what is installed by
>         cd /usr/src/kerberosIV && make install
>         cd /usr/src/kerberos5 && make install
>
OK! I will try that to morrow.

>   (2) Look at the contents of the krb4 and krb5 dists on the CD-ROM.
>
OK! I'll compare that too.

> > I have included this in my /etc/make.conf, so it wount be build during
> > the next make world.
> >
> > MAKE_KERBEROS4= false
> > MAKE_KERBEROS5= false
>
> I suggest you comment these out.  These bits are only built if you
> define MAKE_KERBEROS4=yes and MAKE_KERBEROS5=yes in /etc/make.conf.

Are you sure? I tought that the "#NOCRYPT= true" in the 
/etc/defaults/make.conf, made the build world make all the src/crypto apps 
(including Kerberos). 
I tought that when not comment out the "NOCRYPT= true", but add 
"MAKE_KERBEROS(5)4= false", it would build OpenSSL and OpenSSH, but not 
KerberosVI and Heimdal.

I'll report back to the list after doing some tests.

-- Marius Sorteberg

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message