From owner-freebsd-security@FreeBSD.ORG  Tue Jan 11 08:45:03 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 979C416A4CE
	for <freebsd-security@freebsd.org>;
	Tue, 11 Jan 2005 08:45:03 +0000 (GMT)
Received: from mx01.uunet.co.za (mx01.uunet.co.za [196.31.48.143])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 859BF43D2F
	for <freebsd-security@freebsd.org>;
	Tue, 11 Jan 2005 08:45:02 +0000 (GMT)
	(envelope-from gareth@za.uu.net)
Received: from [196.30.72.11] (helo=pixproxy.so.cpt1.za.uu.net)
	by mx01.uunet.co.za with esmtp (Exim 4.34; FreeBSD)
	id 1CoHe4-000Nmx-2I
	for freebsd-security@freebsd.org; Tue, 11 Jan 2005 10:45:01 +0200
Received: from gabba.so.cpt1.za.uu.net (gabba.so.cpt1.za.uu.net
	[196.30.72.25])
	by pixproxy.so.cpt1.za.uu.net (Postfix) with ESMTP id 83EDC57FB
	for <freebsd-security@freebsd.org>;
	Tue, 11 Jan 2005 10:44:55 +0200 (SAST)
Date: Tue, 11 Jan 2005 10:44:55 +0200 (SAST)
From: Gareth Hopkins <gareth@za.uu.net>
X-X-Sender: gareth@gabba.so.cpt1.za.uu.net
To: freebsd-security@freebsd.org
Message-ID: <20050111104421.V49931@gabba.so.cpt1.za.uu.net>
X-Cell: +27 82 929 6668
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
X-Virus-Scanner: Scanned By ClamAV
X-Spam-Score: -4.9 (----)
X-Scan-Signature: 1a007ac50ac15387d5378093bd6068b5
Subject: MIT Kerberos and OpenSSH
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Jan 2005 08:45:03 -0000


Howdie,

 	Is there a way to get the default BSD 5.3 openssh to compile against 
the MIT kerberos libraries? I have set NO_KERBEROS=yes in /etc/make.conf so
that the heimdal kerberos is not built, and rebuilt world, then installed 
/usr/ports/security/krb5 and rebuilt world again. sshd is however not being 
built against MIT at all.

[root@foobar] ~ # ldd /usr/sbin/sshd
/usr/sbin/sshd:
         libssh.so.2 => /usr/lib/libssh.so.2 (0x28098000)
         libutil.so.4 => /lib/libutil.so.4 (0x280c7000)
         libz.so.2 => /lib/libz.so.2 (0x280d3000)
         libwrap.so.3 => /usr/lib/libwrap.so.3 (0x280e3000)
         libpam.so.2 => /usr/lib/libpam.so.2 (0x280eb000)
         libcrypto.so.3 => /lib/libcrypto.so.3 (0x280f2000)
         libcrypt.so.2 => /lib/libcrypt.so.2 (0x281e7000)
         libc.so.5 => /lib/libc.so.5 (0x281ff000)

Thanks

---
Gareth Hopkins
Server Operations
UUNET South Africa