freebsd-skq

History

Jacques Vidrine 4b2eaea43f Background: When libdes was replaced with OpenSSL's libcrypto, there were a few interfaces that the former implemented but the latter did not. Because some software in the base system still depended upon these interfaces, we simply included them in our libcrypto (rnd_keys.c). Now, finally get around to removing the dependencies on these interfaces. There were basically two cases: des_new_random_key -- This is just a wrapper for des_random_key, and these calls were replaced. des_init_random_number_generator et. al. -- A few functions were used by the application to seed libdes's PRNG. These are not necessary when using libcrypto, as OpenSSL internally seeds the PRNG from /dev/random. These calls were simply removed. Again, some of the Kerberos 4 files have been taken off the vendor branch. I do not expect there to be future imports of KTH Kerberos 4.		2003-01-29 18:14:29 +00:00
..
admin	Background:	2003-01-29 18:14:29 +00:00
appl	Make the Kerberos 4 bits build against OpenSSL 0.9.7. This required	2003-01-28 20:18:26 +00:00
cf	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
doc
etc
include	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
kadmin	Background:	2003-01-29 18:14:29 +00:00
kuser	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
lib	Make the Kerberos 4 bits build against OpenSSL 0.9.7. This required	2003-01-28 20:18:26 +00:00
man	merge imported changes into HEAD	2001-05-11 00:14:02 +00:00
server	Background:	2003-01-29 18:14:29 +00:00
slave
acconfig.h
acinclude.m4
aclocal.m4	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
ChangeLog	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
config.guess	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
config.sub	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
configure	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
configure.in	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
COPYRIGHT
eBones-p9.README
install-sh
Makefile.in
mkinstalldirs
NEWS	import krb4-1.0.5	2000-12-29 21:00:22 +00:00
PROBLEMS
README
TODO

README

*** PLEASE REPORT BUGS AND PROBLEMS TO kth-krb-bugs@nada.kth.se ***

This is a severly hacked up version of Eric Young's eBones-p9 kerberos
version. The DES library has been updated with his 3.23 version and
numerous patches collected over the years have been applied to both
the kerberos and DES sources, most notably the CMU patches for extended
lifetimes that AFS uses. There is also support for AFS built into most
programs. 

The source has been changed to use ANSI C and POSIX to the largest
possible extent. The code in util/et and appl/bsd have not been
updated in this way though (they really need it).

Telnet and telnetd are based on the telnet.95.10.23.NE.tar.Z. Kerberos
authentication is the default and warnings are issued by telnetd if
the telnet client does not turn on encryption.

The r* programs in appl/bsd have been updated with newer sources from
NetBSD and FreeBSD. NOTE: use of telnet is prefered to the use of
rlogin which is a temporary hack and not an Internet standard (and has
only been documented quite recently).  Telnet uses kerberos
authentication to prevent the passing of cleartext passwords and is
thus superior to rlogin.

The distribution has been configured to primarily use kerberos
authentication with a fallback to /etc/passwd passwords. This should
make it easy to do a slow migration to kerberos.  OTP support is also
included in login, popper, and ftpd.

All programs in this distribution follow these conventions:

/usr/athena/bin:	User programs
/usr/athena/sbin:	Administrator programs
/usr/athena/libexec:	Daemons
/etc:			Configuration files
/var/log:		Logfiles
/var/kerberos:		Kerberos database and ACL files

A W3-page is at http://www.pdc.kth.se/kth-krb/

You can get some documentation from ftp://ftp.pdc.kth.se/pub/krb/doc.

Please report bugs and problems to kth-krb-bugs@nada.kth.se

There is a mailing list discussing kerberos at krb4@sics.se, send a
message to majordomo@sics.se to subscribe.