Date: 06 Oct 1998 15:31:20 +0200 From: Bjoern Groenvall <bg@sics.se> To: "Jordan K. Hubbard" <jkh@time.cdrom.com> Cc: markm@FreeBSD.ORG, current@FreeBSD.ORG Subject: Re: Problems with Kerberos and /etc/auth.conf Message-ID: <wupvc5es0n.fsf@bg.sics.se> In-Reply-To: "Jordan K. Hubbard"'s message of Sun, 04 Oct 1998 10:23:02 -0700 References: <7633.907521782@time.cdrom.com>
next in thread | previous in thread | raw e-mail | index | archive | help
"Jordan K. Hubbard" <jkh@time.cdrom.com> writes: > OK, so I'm just going down my sheet of "things that various people > have reported as being most annoying in FreeBSD" and I'm looking at > the 'ol "su -K" FAQ, that being the one where people inadvertently > install kerberos (either by checking too many things off an install > menu or building from sources) and it subsequently bites the > non-internet connected by making su pause for a heck of a long time > trying to contact a kerberos server which doesn't exist. The > work-around is to use the -K flag, of course, but this apparently > remains a well-kept secret despite having been mentioned many times on > USENET and other forums, and people are basically putting their feet > into this rabbit hole. We need to do something! :-) A simple medicine for this problem can be found in the krb4 source crypto/kerberosIV/appl/bsd/su.c, i.e the su program that is not built. if (use_kerberos) { int fd = open (KEYFILE, O_RDONLY); if (fd >= 0) close (fd); else use_kerberos = 0; } Cheers, Björn PS Are there any other situations where kerberized programs are known to hang? DS To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?wupvc5es0n.fsf>