From owner-freebsd-current Tue Oct 6 08:30:48 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA06937 for freebsd-current-outgoing; Tue, 6 Oct 1998 08:30:48 -0700 (PDT) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from gratis.grondar.za (gratis.grondar.za [196.7.18.65]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA06875; Tue, 6 Oct 1998 08:30:29 -0700 (PDT) (envelope-from mark@grondar.za) Received: from grondar.za (IDENT:7OIX8jTvEWCGrQ3reqcD49wG5ucdxi3X@localhost [127.0.0.1]) by gratis.grondar.za (8.9.1/8.9.1) with ESMTP id RAA01761; Tue, 6 Oct 1998 17:27:37 +0200 (SAST) (envelope-from mark@grondar.za) Message-Id: <199810061527.RAA01761@gratis.grondar.za> To: Bjoern Groenvall cc: "Jordan K. Hubbard" , markm@FreeBSD.ORG, current@FreeBSD.ORG Subject: Re: Problems with Kerberos and /etc/auth.conf In-Reply-To: Your message of " 06 Oct 1998 15:31:20 +0200." References: <7633.907521782@time.cdrom.com> Date: Tue, 06 Oct 1998 17:27:32 +0200 From: Mark Murray Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG JKH sent me a mostly-correct solution involving this. I have nearly finished beating it into shape. It will be incorporated into most if the kerberised utils. M Bjoern Groenvall wrote: > "Jordan K. Hubbard" writes: > > > OK, so I'm just going down my sheet of "things that various people > > have reported as being most annoying in FreeBSD" and I'm looking at > > the 'ol "su -K" FAQ, that being the one where people inadvertently > > install kerberos (either by checking too many things off an install > > menu or building from sources) and it subsequently bites the > > non-internet connected by making su pause for a heck of a long time > > trying to contact a kerberos server which doesn't exist. The > > work-around is to use the -K flag, of course, but this apparently > > remains a well-kept secret despite having been mentioned many times on > > USENET and other forums, and people are basically putting their feet > > into this rabbit hole. We need to do something! :-) > > A simple medicine for this problem can be found in the krb4 source > crypto/kerberosIV/appl/bsd/su.c, i.e the su program that is not built. > > if (use_kerberos) { > int fd = open (KEYFILE, O_RDONLY); > > if (fd >= 0) > close (fd); > else > use_kerberos = 0; > } > > Cheers, > Björn > > PS > Are there any other situations where kerberized programs are known to hang? > DS -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message