From owner-freebsd-questions@freebsd.org Tue Feb 2 15:48:54 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D52F8A975C2 for ; Tue, 2 Feb 2016 15:48:54 +0000 (UTC) (envelope-from vrwmiller@gmail.com) Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7134CD1 for ; Tue, 2 Feb 2016 15:48:54 +0000 (UTC) (envelope-from vrwmiller@gmail.com) Received: by mail-wm0-x232.google.com with SMTP id l66so29170958wml.0 for ; Tue, 02 Feb 2016 07:48:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:message-id:subject:from:to:content-type; bh=k/rhzfR/29xvXgnH1JBzzRtE2tTMJTgwOrAY9iHb7g4=; b=Xdn9iuNADbWJrjzOWHvPGPqLzB75siepx2uozV2f4lyRFTxpjS/fgYuXADYY/S4hof vSSruXg/aIBJMPmSruVXF0EgalxquhRnzlv5l7hqRVKodXV7JvflxUwC/qeDBA2GoX+m Eol/0N2blJn9FdHBYZg178mh3hRJvVUAs1VuAlKd6x37WSNmFAlXZNZ9Kv2X+ZfZbWIL I3J1c+25+U7mRCv4yz2Gs11ueQa4PO74e8Aa63Q8rOE0VyU80kcuq1KyYV9hyE2WpUbW L9goB9jZiCxToDBLFsPTmBNlRyirmha3KwtyWg5j8WURyreyNovIlymQPNOhvyqlugWo Wv8g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:date:message-id:subject:from :to:content-type; bh=k/rhzfR/29xvXgnH1JBzzRtE2tTMJTgwOrAY9iHb7g4=; b=EQoZaBF3n9nr+poW5YdBGzQ5mC6oovUnBgiLx/fv/GeZtUSxvNVTS/3kt6T2/cPsl8 SceCLEV1yfqghXh/U4pa5yJOyYa7lGqRShIXCM7zhAD2xTT2UKw7uLdrqyzt0DQWAQfg RXIVRMGj+oU0JyW5uTVG2WIsuS3Gd1AghAl+gzYmODPqGmDEGVD5Yxtiemn3uqJXjQh8 lvtrTq9qJo1Yw1mpBaNjxY3C+gWkTOW92KdXDQ+6c+EVYNro4WNkV4rZ2d1DH3+f+ehe iSuPCV/4eLkixNvuyzuLwlFt6uiGbdHxNNa6BjXwDpgoaF91tu5WhsADA+7Dfi54INyy DsJw== X-Gm-Message-State: AG10YOQ+nyXhszid8k1LntuMF+p10XHe3MyFaRWf5ZnX+DjCDJ5HzyFuBsduzGeVCGfAAoga/5HDH/Mvs1JhIA== MIME-Version: 1.0 X-Received: by 10.194.192.71 with SMTP id he7mr34483889wjc.82.1454428132931; Tue, 02 Feb 2016 07:48:52 -0800 (PST) Sender: vrwmiller@gmail.com Received: by 10.194.142.203 with HTTP; Tue, 2 Feb 2016 07:48:52 -0800 (PST) Date: Tue, 2 Feb 2016 10:48:52 -0500 X-Google-Sender-Auth: wftQfsFAhhTo2nvSqT9dqknMseE Message-ID: Subject: Heimdal Kerberos Installed? From: Rick Miller To: FreeBSD Questions Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Feb 2016 15:48:55 -0000 Hi all, I've discovered kerberos binaries in /usr/bin and /usr/sbin that had been presumed not installed as the build system utilizes NO_KERBEROS=YES in make.conf that built the resulting distribution based on the releng/10.0 branch. It had been presumed that kerberos bits would not be included outside of /usr/local where security/krb5 is being installed. Consider that /usr/bin and /usr/sbin contain binaries for kadmin, kpasswd, kinit, klist, etc while /usr/sbin/ktutil is also present. Additionally, ldd reports these binaries linking against /usr/lib/libkrb5.so.11 vs. /usr/local/lib/libkrb5.so.3.3 installed by security/krb5. Conversely, the kerberos bits install in /usr/local do link against the appropriate libraries. The problem is that it appears Heimdal Kerberos appears to be installed despite the presence of NO_KERBEROS=YES in make.conf. Are there base kerberos bits that do get installed regardless of the existence of this knob? Is there an expectation that this knob notation (as opposed to WITHOUT_KERBEROS) works with releng/10.0? -- Take care Rick Miller