Re: ANNOUNCE: FreeBSD Security Advisory FreeBSD-SA-02:40.kadmind

From: Jacques A. Vidrine (nectar@FreeBSD.org)
Date: 11/19/02


Date: Tue, 19 Nov 2002 07:29:50 -0600
From: "Jacques A. Vidrine" <nectar@FreeBSD.org>
To: KIMURA Yasuhiro <yasu@utahime.org>


[I apologize if you receive a duplicate of this. I have reason to
 believe it didn't go through the first time.]

On Mon, Nov 18, 2002 at 10:22:18AM +0900, KIMURA Yasuhiro wrote:
> I tried instructions above on my 4.7-RELEASE pc and failed to build
> k5admind and kandmind.
[...]
> Are there anything else that I should do to patch my 4.7R system?

If you perform the following steps before the others, does it
work for you?

   # cd /usr/src/kerberos5/lib
   # make depend && make all install
   # cd /usr/src/kerberosIV/lib
   # make depend && make all install

> And one more question. This adovisary says:
>
> > The k5admind server is installed as part of the `krb5' distribution,
> > or when building from source with MAKE_KERBEROS5 set. The kadmind
> > server is installed as part of the `krb4' distribution, or when
> > building from source with MAKE_KERBEROS4 set. Neither is installed by
> > default.
>
> But both k5admind and kadmind are installed on my 4.7R systems.
>
> sugar# ls -l /usr/sbin/kadmind
> -r-xr-xr-x 1 root wheel 21808 Oct 9 21:51 /usr/sbin/kadmind
> sugar# ls -l /usr/libexec/k5admind
> -r-xr-xr-x 1 root wheel 19704 Oct 9 21:55 /usr/libexec/k5admind
> sugar#
>
> I selected "X-Developer" when I install these systems. Isn't it the
> "default installation" describled above?

No, `X-Developer' is not the default installation. Nonetheless, I'm
surprised. The `krb4' and `krb5' distributions may be handled
differently now --- I must check.

Thanks for the feedback!

Cheers,

-- 
Jacques A. Vidrine <nectar@celabo.org>          http://www.celabo.org/
NTT/Verio SME          .     FreeBSD UNIX     .       Heimdal Kerberos
jvidrine@verio.net     .  nectar@FreeBSD.org  .          nectar@kth.se
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message


Relevant Pages

  • Re: Universal sound card?
    ... As soon as that machine is set up and fully functional, I intend to install ... GNU/Linux as an operating system was meant as a Windows replacement. ... GNU/Linux continues that tradition - and perhaps more so even for the Linux ... AFAIK Mandriva is not the only distribution that is this ...
    (comp.os.linux.hardware)
  • Re: Attn : Dave Jones Re: I just want one more option in the FC Kernels (Dave Jones)
    ... The point is that you install a packaged distribution and it comes up ... distribution is just a matter of some duplicated work in the packaging ... > CentOS/RHEL base totally makes more sense to me than Fedora Core 3 as it ...
    (Fedora)
  • Re: linux on a old laptop
    ... it was on a 5x86/133 with 32MB RAM. ... but if you're careful about what you install and run it ... just puts all of it's limited selection on the drive. ... that I sure would have included in a distribution). ...
    (comp.os.linux.setup)
  • Re: Checkbox for "Install Everything"
    ... A little marketing and customer service savvy is all ... packages that they decide to include with their distribution. ... If you just click each of the general groups when you install you instead ...
    (Fedora)
  • Re: [poll] Is the megafreeze development model broken?
    ... and for which it takes years to respond to bug reports in any case ... that problems with distribution packaged software should be reported ... Assuming your "stable base systems" contains the Linux kernel, ... Noone forces any users to install the software their distribution ...
    (Linux-Kernel)