From owner-freebsd-questions@FreeBSD.ORG Sun Jan 22 20:26:09 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8D7B516A41F for ; Sun, 22 Jan 2006 20:26:09 +0000 (GMT) (envelope-from chrcoluk@gmail.com) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id E4DF343D45 for ; Sun, 22 Jan 2006 20:26:06 +0000 (GMT) (envelope-from chrcoluk@gmail.com) Received: by wproxy.gmail.com with SMTP id i31so774172wra for ; Sun, 22 Jan 2006 12:26:06 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=fVC/jk+CY65BQXx1822GtayFQHpRSlJ26sf4pjH9CjMYf2DcW/1GdLBnLlQlMBGvUsnoTCcoENMiuvRMohiw4taLBKa6rkJvJ05EHsBGidv74oo7PolblFOu5wjFU5y/NvXDOLwRtdx6E0j7OWgAiyUySy/blTMK7wOwHWvyyvk= Received: by 10.54.123.3 with SMTP id v3mr4777500wrc; Sun, 22 Jan 2006 12:26:06 -0800 (PST) Received: by 10.54.122.17 with HTTP; Sun, 22 Jan 2006 12:26:06 -0800 (PST) Message-ID: <3aaaa3a0601221226q9e46660x@mail.gmail.com> Date: Sun, 22 Jan 2006 20:26:06 +0000 From: Chris To: Adam Stroud In-Reply-To: MIME-Version: 1.0 References: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-questions@freebsd.org Subject: Re: make.conf Question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Jan 2006 20:26:09 -0000 On 22/01/06, Adam Stroud wrote: > > All: > > I have been playing around with make.conf and I see that it is possible t= o > to use the "NO_OPENSSH" variable to not build openssh when updating fbsd > from source. I also noticed in the /etc/defaults/rc.conf file that there > is > a "sshd_program" entry that can be used to adjust where the installation > of > sshd is. I am assuming that this means that I can install openssh from > the > ports exclusively and use the rc.conf file to launch the ports sshd on > startup. Here are my questions about this: > > 1. Is my assumption correct? > 2. Does this also apply to things like kerberos and openssl > 3. Does this impose any notable side effects to the system (possibly wit= h > stability/security)? > > Thanks > A > _______________________________________________ Yes it should be fine I use it but I keep kerberos and openssl base enabled since it is used by various things within the base system, make sure prior to doing this if you are remote administrating the system you already have the ports version of openssh installed enabled and configured. Chris