Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 11 May 2002 14:07:59 -0700
From:      "Crist J. Clark" <cjc@FreeBSD.org>
To:        Marius Sorteberg <marius@overalt.no>
Cc:        "Jacques A. Vidrine" <nectar@FreeBSD.org>, freebsd-security@FreeBSD.org
Subject:   Re: How to remove Kerberos from base install
Message-ID:  <20020511140759.B2824@blossom.cjclark.org>
In-Reply-To: <200205110151.44504.marius@overalt.no>; from marius@overalt.no on Sat, May 11, 2002 at 01:51:44AM %2B0200
References:  <20020510093809.GA368@overalt.no> <20020510162535.GA52239@madman.nectar.cc> <200205110151.44504.marius@overalt.no>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, May 11, 2002 at 01:51:44AM +0200, Marius Sorteberg wrote:
[snip]

> > > I have included this in my /etc/make.conf, so it wount be build during
> > > the next make world.
> > >
> > > MAKE_KERBEROS4= false
> > > MAKE_KERBEROS5= false
> >
> > I suggest you comment these out.  These bits are only built if you
> > define MAKE_KERBEROS4=yes and MAKE_KERBEROS5=yes in /etc/make.conf.
> 
> Are you sure? I tought that the "#NOCRYPT= true" in the 
> /etc/defaults/make.conf, made the build world make all the src/crypto apps 
> (including Kerberos). 
> I tought that when not comment out the "NOCRYPT= true", but add 
> "MAKE_KERBEROS(5)4= false", it would build OpenSSL and OpenSSH, but not 
> KerberosVI and Heimdal.

No, don't define 'MAKE_KERBEROS[45]' at all. Here is the makefile
logic in src/Makefile.inc,

  .if exists(${.CURDIR}/kerberosIV) && exists(${.CURDIR}/crypto) && \
      !defined(NOCRYPT) && !defined(NO_OPENSSL) && defined(MAKE_KERBEROS4)
  SUBDIR+= kerberosIV
  .endif
  .if exists(${.CURDIR}/kerberos5) && exists(${.CURDIR}/crypto) && \
      !defined(NOCRYPT) && !defined(NO_OPENSSL) && defined(MAKE_KERBEROS5)
  SUBDIR+= kerberos5
  .endif

-- 
Crist J. Clark                     |     cjclark@alum.mit.edu
                                   |     cjclark@jhu.edu
http://people.freebsd.org/~cjc/    |     cjc@freebsd.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020511140759.B2824>