Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Joerg Sonnenberger
On Mon, Jul 18, 2005 at 09:44:35PM +0930, Daniel O'Connor wrote: > There is always a trade off but it seems most people don't think Heimdal is > insecure enough to disable by default. (Has it has any bugs that have been > exploitable in an unused configuration recently? I don't believe so). In t

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Robert Watson
On Mon, 18 Jul 2005, Vladimir Terziev wrote: The problem is that third party software is a part of basic software, which functionality includes authentication and authorization for host access. A bug in this third party software could become a reason for a host compromise even the functional

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Daniel O'Connor
On Monday 18 July 2005 21:14, Vladimir Terziev wrote: >The problem is that third party software is a part of basic software, > which functionality includes authentication and authorization for host > access. A bug in this third party software could become a reason for a host > compromise even t

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Vladimir Terziev
The problem is that third party software is a part of basic software, which functionality includes authentication and authorization for host access. A bug in this third party software could become a reason for a host compromise even the functionality of the third party software in not used (

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Daniel O'Connor
On Monday 18 July 2005 18:03, Vladimir Terziev wrote: >your right about useless things, but making basic software to depend on > these useless things is a very bad idea. I'm sure, telnet & ssh are the > most used applications on any UNIX system, so they must not depend on any > third party soft

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Eric Masson
Vladimir Terziev <[EMAIL PROTECTED]> writes: Hi. > i'm sure most of the FreeBSD users do not need kerberos for > authnetication. Could you give me your fortune teller crystal ball brand ? > If someone needs telnet+kerberos, then ok, such meta port could be > created and this person will

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Vladimir Terziev
Hi, i'm sure most of the FreeBSD users do not need kerberos for authnetication. Things should be kept simple, not generic -- this is one of the principles of UNIX. If someone needs telnet+kerberos, then ok, such meta port could be created and this person will just need to insta

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Roman Kurakin
Vladimir Terziev wrote: Hi, your right about useless things, but making basic software to depend on these useless things is a very bad idea. I'm sure, telnet & ssh are the most used applications on any UNIX system, so they must not depend on any third party software by default. If you n

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Vladimir Terziev
Hi, your right about useless things, but making basic software to depend on these useless things is a very bad idea. I'm sure, telnet & ssh are the most used applications on any UNIX system, so they must not depend on any third party software by default. If you need kerberized ssh or

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-18 Thread Roman Kurakin
Hi, Vladimir Terziev wrote: Yes, i deleted it along with all libs related to it. This caused telnet/ssh/etc to stop working. So i rebuilt the world with NO_KERBEROS=yes and now all is like a charm -- no Heimdal Kerberos and no software depending on it. I think making the Heimdal Kerbero

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-17 Thread Daniel O'Connor
On Sunday 17 July 2005 22:16, Vladimir Terziev wrote: > Yes, i deleted it along with all libs related to it. This caused > telnet/ssh/etc to stop working. So i rebuilt the world with NO_KERBEROS=yes > and now all is like a charm -- no Heimdal Kerberos and no software > depending on it. I think

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-17 Thread Vladimir Terziev
Yes, i deleted it along with all libs related to it. This caused telnet/ssh/etc to stop working. So i rebuilt the world with NO_KERBEROS=yes and now all is like a charm -- no Heimdal Kerberos and no software depending on it. I think making the Heimdal Kerberos part of the base FreeBSD OS

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-17 Thread Daniel O'Connor
On Sunday 17 July 2005 02:26, Dominic Marks wrote: > In /etc/make.conf put > > NO_KERBEROS=yes > > Then build a new world. That should do the trick. This won't remove it, it will just not update it. You would have to delete it by hand. Telnet/ssh/etc don't have to depend on Kerberos and if you us

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-17 Thread Dominic Marks
On Saturday 16 July 2005 17:43, Vladimir Terziev wrote: > Hi, > > i've just installed a fresh FreeBSD 5.4 on my PC i saw i have > Heimdal Kerberos installed on it. I don't want Heimdal Kerberos on my > syetem! Could someone point me to a easy way to remove it and rebuild > all software

Re: Remove Heimdal Kerberos from my FreeBSD

2005-07-16 Thread Vladimir Terziev
Thanks, for the suggestion. I hope it will help me. Why exactly Heimdal Kerberos had been incorporated into the base system? Why not MIT Kerberos ? Vladimir On Sat, 16 Jul 2005 17:56:57 +0100 Dominic Marks <[EMAIL PROTECTED]> wrote: > On Saturday 16 July 2005 17:43, Vladimir Te

Remove Heimdal Kerberos from my FreeBSD

2005-07-16 Thread Vladimir Terziev
Hi, i've just installed a fresh FreeBSD 5.4 on my PC i saw i have Heimdal Kerberos installed on it. I don't want Heimdal Kerberos on my syetem! Could someone point me to a easy way to remove it and rebuild all software (telnet, ssh, etc) which depends on it? Tha