Permalink
Browse files

This commit was manufactured by cvs2svn to create tag 'HAGGARD_DUMP'.

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/HAGGARD_DUMP@5322 dc483132-0cff-0310-8789-dd5450dbe970
  • Loading branch information...
(no author)
(no author) committed Mar 31, 1995
1 parent 72db273 commit 157167164ec58380a3cae8d866d534b43c5cf685
Showing 1,371 changed files with 0 additions and 255,132 deletions.
View
81 README
@@ -1,81 +0,0 @@
-Beta test distribution READ-ME file.
------------------------------------
-
-THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
-IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
-WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
-
-Now, with that out of the way, let me point you to a few things:
-
-The file doc/TREE-GRAPH is a graphical representation of the source
-directory tree you should receive with this distribution.
-
-The file doc/SOURCE-TREE describes what's in each directory.
-
-The file doc/HOW_TO_BUILD gives instructions on how to start build
-Kerberos.
-
-We used the ISODE release 8.0 ASN.1 compiler for the code we have run
-and tested here at MIT. If you are using ISODE 6.8, you will need to
-apply the patches found in the file tools/pepsy-diffs to fix some bugs
-in the PEPSY compiler which have caused us problems. I believe that
-ISODE 8.0 should work without any problems. However, I have not had a
-chance to try it out.
-
->> <<
->> Please report any problems/bugs/comments to 'krb5-bugs@athena.mit.edu' <<
->> <<
-
-Appreciation Time!!!! There are far too many people to try to thank
-them all; many people have contributed to the development of Kerberos
-V5. This is only a partial listing....
-
-Thanks to Mark Eichin at Cygnus for writing the new autoconf
-configuration system, for making the code much more portable, and for
-serving as pre-release testers.
-
-Thanks to Marc Horowitz, Barry Jaspan, and Jonathan Kamens (and
-others) at Openvision, Inc. for providing us with an GSS-API library,
-for serving as pre-release testers, and for finding and fixing many
-bugs (some of them at the last minute!).
-
-Thanks to Cybersafe for providing patches to fix bugs with inter-realm
-authentication.
-
-Thanks to Ari Medivnsky and Cliff Neumann for writing a ksu client.
-
-Thanks to Jim Miller from Suite Software for contributing many detailed
-bug reports, most of them by doing desk checks over the code!
-
-Thanks to Prasad Upasani from ISI for porting the Berkeley
-rlogin/rsh/rcp suite and for testing out our distribution on the Sun.
-
-Thanks to Glenn Machin and Bill Wrahe from Sandia National Labs for
-contributing the kadmin server, plus lots of bugfixes.
-
-Thanks to Bill Sommerfeld from HP for commenting on early Kerberos
-interface drafts, suggesting improvements in later coding interfaces,
-and finding and fixing many bugs.
-
-Thanks to Paul Borman from Cray for writing the Kerberos v4 to v5 glue
-layer and the Kerberos v5 subroutines for telnet.
-
-Thanks to Dan Bernstein, for providing the replay cache code.
-
-Thanks to the members of the Kerberos V5 development team at MIT, both
-past and present: Jay Berkenbilt, John Carr, Don Davis, Nancy Gilman,
-Barry Jaspan, John Kohl, Cliff Neuman, Jon Rochlis, Jeff Schiller, Ted
-Ts'o, Tom Yu.
-
-
-Note:
-
-Project Athena, Athena, Athena MUSE, Discuss, Hesiod, Kerberos, Moira, and
-Zephyr are trademarks of the Massachusetts Institute of Technology (MIT). No
-commercial use of these trademarks may be made without prior written
-permission of MIT.
-
-FYI, "commercial use" means use of a name in a product or other for-profit
-manner. It does NOT prevent a commercial firm from referring to the MIT
-trademarks in order to convey information (although in doing so, recognition
-of their trademark status should be given).
View
@@ -1,5 +0,0 @@
-Wed Feb 22 18:56:06 1995 John Gilmore (gnu at toad.com)
-
- * install.texi: Minor corrections. Add info about bare source
- trees (without configure scripts).
-
View
@@ -1,131 +0,0 @@
-In the Beta 4 distribution, we have included a new build system, which
-was built using the Free Software Foundation's autoconf program. This
-system will hopefully make Kerberos V5 much simpler to build for most
-people, and reduce the amount of effort required in porting Kerberos V5
-to a new platform.
-
-The imake system has been removed from this patch release, as most of
-the tree is now under autoconf control.
-
-HOW TO BUILD KERBEROS V5
-========================
-
-A) Find about 65 meg free; untar the krb5 sources. For example,
- we will assume that you've untar'ed the sources into /u1/krb5,
- so that the top of the source tree is /u1/krb5/src.
-
-B) If you don't want separate build trees for each architecture, then
-use the following abbreviated procedure.
- 1) cd /u1/krb5/src
- 2) ./configure
- 3) make
-
-If you have a make that supports VPATH (GNU make, for example), you
-can keep your source tree pure by making a build directory, e.g.
-/u1/krb5/pmax.
-
- 1) cd /u1/krb5/pmax
- 2) ../src/configure
- 3) make
-
-That's all there is to it!
-
-It is possible to pass compiler flags to to configure by using, for
-example, the "--with-ccopts=FLAGS" option. Please take note that if
-you use the native Ultrix compiler on a DECstation you are likely to
-lose if you pass no flags to cc; md4.c takes an estimated 33 million
-years to compile if you provide neither the "-g" flag nor the "-O"
-flag to cc.
-
-It is also possible to explicitly specify a compiler to configure,
-e.g. "--with-cc=gcc".
-
-By default, Kerberos will expect its configuration files to be in
-/krb5. This can be changed by passing the
-"--with-krb5-root=/KRB5_ROOT_DIR" option to configure, where
-/KRB5_ROOT_DIR should be replaced with the appropriate pathname.
-
-If you want Kerberos V4 backwards compatibility, pass the
-"--with-krb4=/KRB4_DIRECTORY" option to configure. This requires that
-the V4 include files be available in /KRB4_DIRECTORY/include, and that
-the V4 Kerberos library be available in /KRB4_DIRECTORY/lib.
-
-If, for some reason, you want to build with isode-based ASN.1 encoders
-and decoders rather than our hand-coded ones, use the "--enable-isode"
-flag to configure. This has not been thoroughly tested, so beware.
-
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-
-include/krb5/stock/osconf.h:
----------------------------
-There are several defaults you may wish to adjust in osconf.h:
-
-DEFAULT_CONFIG_FILENAME The pathname to the file which defines
- the known realms and their KDCs. Same
- format as V4 krb.conf
-DEFAULT_TRANS_FILENAME The pathname to the file which a priori
- assigns hosts to realms. Same format as
- V4 krb.realms
-DEFAULT_LNAME_FILENAME The pathname to the database mapping
- authentication names to local account names.
- See kdb5_anadd(8).
-DEFAULT_KEYTAB_NAME The type and pathname to the default
- server keytab file (the equivalent of v4
- /etc/srvtab).
-DEFAULT_KDC_ETYPE The default encryption type for the KDC.
-DEFAULT_KDC_KEYTYPE The default keytype for the KDC.
-KDCRCACHE The name of the replay cache used by
- the KDC.
-RCTMPDIR The directory which stores replay
- caches.
-
-include/krb5/stock/config.h
-----------------------------
-You might wish to adjust these flags as well:
-
-KRBCONF_VAGUE_ERRORS If defined, give vague and unhelpful
- error messages to the client... er,
- attacker. (Needed to meet silly
- government regulations; most other
- sites will want to keep this
- undefined.)
-
-KRBCONF_KDC_MODIFIES_KDB Define this if you want to allow the
- KDC to modify the Kerberos database;
- this allows the last request
- information to be updated, as well as
- the failure count information.
-
- Note that this doesn't work if you're
- using slave servers!!! It also causes
- the database to be modified (and thus
- need to be locked) frequently.
-
-
-
-NOTE for building Kerberos for multiple platforms
-=================================================
-
-This is how we build Kerberos for multiple platforms here at MIT:
-
-Use the synctree program to build a symlink tree. The .rconf files
-included in the distribution are for use with synctree. You can find
-the synctree program in the same directory as you found this release,
-athena-dist.mit.edu.
-
-Assuming you have a directory hierarchy which looks something like this:
-
-
- |-decmips-
- |-hpux----
-|-krb5-|-linux---
- |-solaris-
- |-src-----
-
-A typical build using synctree might be:
-
- cd XXX/krb5
- mkdir decmips; cd decmips
- synctree -s ../src -d .
- ./configure
- make
View
@@ -1,19 +0,0 @@
-Incompatibility notes:
-======================
-
-Currently, all of the MIT implementations of the Kerberos protocol are
-not fully compliant with the Kerberos RFC --- specifically, we do not
-implement the DES w/ MD5 checksum which is required by the RFC. This
-includes the Beta 4 release, although I expect to have this fixed in a
-patch release as soon as possible. I believe that we can fix this with
-minimal compatibility impacts; vendors contemplating shipment of this
-code as product should wait for the patch release or contact us for
-futher details.
-
-MIT implementations release Beta 2 and earlier are buggy in that they
-incorrectly generate the ASN.1 for a TGS request message. This was
-fixed in Beta 3, but the fix causes Beta 2 KDC's to be unable to
-respond to Beta 3 and more recent versions due to a checksum error.
-The Beta 3 KDC contains backwards compatibility code so that Beta 2
-and earlier application programs can continue to work with a Beta 3
-and more recent KDC.
View
@@ -1,73 +0,0 @@
-Operating systems notes.... this file contains notes about various
-different operating systems and some quirks that you have to be aware
-of when compiling for them.
-
---------------------------------------------------------------------------
-Alpha OSF/1 V2.0
-
-md4.c can not be compiled with the optimizer on. (Could it possibly
-be the same bug as the Dec Ultrix bug? The bug report makes it sound
-identical!)
-
-(Reported by Marc Kenig)
-
---------------------------------------------------------------------------
-
-BSDI
-
-BSDI reportedly has a bad sed which causes it to go into an infinite
-loop during the build. The workaround is to get a sed from somewhere
-else, such as GNU.
-
-------------------------------------------------------------------------
-Solaris versions 2.0 through 2.3:
-
-The gethostbyname() routine is broken; it does not return a fully
-qualified domain name, even if you are using the DNS. Since Kerberos
-V5 uses the fully qualified domain name as the second component of a
-service principal (i.e, "host/tsx-11.mit.edu@ATHENA.MIT.EDU), this
-causes problems for servers who try to figure out their own fully
-qualified domain name. (It turns out clients win because Kerberos
-calls gethostbyname() and then calls gethostbyaddr() on the address,
-and SunSoft didn't screw up gethostbyaddr() except when it is your own
-local hostname!)
-
-Workarounds:
-
-1) Supply your own resolver library.
-
-2) Upgrade to Solaris 2.4
-
-3) Make sure your /etc/nsswitch.conf has the line:
-
- hosts: files dns
-
-and then in /etc/hosts, make sure there is a line with your
-workstation's IP address and hostname, with the fully qualified domain
-name first. Example:
-
- 18.172.1.4 dcl.mit.edu dcl
-
---------------------------------------------------------------------------
-
-Solaris 2.X:
-
-You *must* compile Kerberos V5 *without* the UCB compatibility libraries.
-
-This means that /usr/ucblib must *not* be in the LD_LIBRARY_PATH
-environment variable when you compile it.
-
-Alternatively you can place the -i option on the cc line. So you can
-put --with-ccopts=-i on the configure line. (Thanks to Dan Nessett
-for this suggestion.
-
---------------------------------------------------------------------------
-
-Ultrix 4.2/3 (Decstation Mips)
-
-md4.c and md5.c can not be compiled with the optimizer set at level 1.
-(Either -O or -g will work; leaving ccopts blank won't.) The
-optimizer isn't hung; it just takes a long time, due to an exponential
-time bug. Calculations estimate around something like 4 billion
-years. :-)
-
Oops, something went wrong.

0 comments on commit 1571671

Please sign in to comment.