Re: Kerberos 5, how to build whole system including X11R6 with it ?

1999-08-01 Thread Amancio Hasty


Fine , take it  up with the kerberos group over at MIT -- it is hard
to believe that they would not have patches for X11R6 and 
proper protocol.




> Amancio Hasty <[EMAIL PROTECTED]> writes:
> > I would starrt by looking at the api and making the mods to X11R6 
> 
> No, the protocol used in the X11R6 code is wrong.  You would need to
> design and implement a new one.
> 
> > and if you can do a net search on xdm and kerberos -- there is an 
> > X11R6 xdm for kerberos 5 floating around.
> 
> That's quite different.
> 
> /assar

-- 

 Amancio Hasty
 [EMAIL PROTECTED]




To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: Kerberos 5, how to build whole system including X11R6 with it ?

1999-08-01 Thread Assar Westerlund

Amancio Hasty <[EMAIL PROTECTED]> writes:
> I would starrt by looking at the api and making the mods to X11R6 

No, the protocol used in the X11R6 code is wrong.  You would need to
design and implement a new one.

> and if you can do a net search on xdm and kerberos -- there is an 
> X11R6 xdm for kerberos 5 floating around.

That's quite different.

/assar


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: Kerberos 5, how to build whole system including X11R6 with it ?

1999-08-01 Thread Amancio Hasty

I would starrt by looking at the api and making the mods to X11R6 
and if you can do a net search on xdm and kerberos -- there is an 
X11R6 xdm for kerberos 5 floating around.




-- 

 Amancio Hasty
 [EMAIL PROTECTED]




To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: Kerberos 5, how to build whole system including X11R6 with it ?

1999-08-01 Thread Assar Westerlund

Mark Murray <[EMAIL PROTECTED]> writes:
> far as I know, X11R6.n K5 is broken, as it is based on a very
> early beta of MIT K5.

To many knowledge, the code that's in X11R6 is still based on a really
old beta of MIT k5 and it would take some work to get it to work with
some modern code.  And besides, the protocol doesn't do what you want
(IMNSHO), because it only authenticates the initial connection and
doesn't do anything to authenticate or protect the X session after
that.  If somebody is working on adding some better mechanism of using
K5 in X11 I would be interested.

/assar


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: Kerberos 5, how to build whole system including X11R6 with it ?

1999-08-01 Thread Andreas Klemm

On Sun, Aug 01, 1999 at 09:55:56PM +0200, Mark Murray wrote:
> I have kerberos5 waiting in the wings for a compatible version
> (Heimdal will be coming out Real Soon Now).
> 
> In the meanwhile - Kerberos 5 is available as a port, and as
> far as I know, X11R6.n K5 is broken, as it is based on a very
> early beta of MIT K5.

Ok, then a good strategy would be to use version 4 now, try it
with Cisos and wait for some time ...

Thanks !

Have a nice day (or evening)

Andreas ///

-- 
Andreas Klemm   http://www.FreeBSD.ORG/~andreas
  http://www.freebsd.org/~fsmp/SMP/SMP.html
powered by Symmetric MultiProcessor FreeBSD
Latest song from our band: http://www.freebsd.org/~andreas/mp3/schaukel.mp3


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: Kerberos 5, how to build whole system including X11R6 with it ?

1999-08-01 Thread Mark Murray

I have kerberos5 waiting in the wings for a compatible version
(Heimdal will be coming out Real Soon Now).

In the meanwhile - Kerberos 5 is available as a port, and as
far as I know, X11R6.n K5 is broken, as it is based on a very
early beta of MIT K5.

M

> Hi !
> 
> Have a Cisco Router and want to play a bit with Kerberos support.
> As far as I know Cisco router support Kerberos 5 and I'm not sure,
> if it works with Kerberos 4 as well.
> 
> So I though that it might perhaps be a good idea to re-build my 
> FreeBSD 4.0 system and X11 with Kerberos5 support.
> 
> Is it possible, to replace Kerberos4 support in FreeBSD with
> Kerberos 5 by simply defining
>   KRB5_HOME=/usr
> in /etc/make.conf ?
> 
> Would a make world then use Kerberos5 for FreeBSD ?
> 
> Are the Kerberos 4 patches included in the XFree86 port
> Kerberos 4 specific or is there any chance to get it compiled
> and running with Kerberos 5 Support ???
> 
> What would you suggest ??? Try to replace systems Kerberos 4
> with Kerberos 5 or build Kerberos 5 in /usr/local/krb5 like
> prepared in /etc/make.conf and then only link XFree86 with
> Kerberos 5 under /usr/local/krb5 (which surely make some
> patches necessary) ?!
> 
> Thanks for any help
> 
>   Andreas ///
> 
> -- 
> Andreas Klemm   http://www.FreeBSD.ORG/~andreas
>   http://www.freebsd.org/~fsmp/SMP/SMP.html
> powered by Symmetric MultiProcessor FreeBSD
> Latest song from our band: http://www.freebsd.org/~andreas/mp3/schaukel.mp3
--
Mark Murray
Join the anti-SPAM movement: http://www.cauce.org


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message