Permalink
Browse files

This commit was manufactured by cvs2svn to create tag

'SECURE_11_EA_1'.

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/SECURE_11_EA_1@4412 dc483132-0cff-0310-8789-dd5450dbe970
  • Loading branch information...
1 parent 3a6a28f commit f59539ca6fac748176deef3b4bd993c8f7593d8b (no author) committed Sep 30, 1994
Showing 1,468 changed files with 0 additions and 284,091 deletions.
View
81 README
@@ -1,81 +0,0 @@
-Beta test distribution READ-ME file.
------------------------------------
-
-THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
-IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
-WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
-
-Now, with that out of the way, let me point you to a few things:
-
-The file doc/TREE-GRAPH is a graphical representation of the source
-directory tree you should receive with this distribution.
-
-The file doc/SOURCE-TREE describes what's in each directory.
-
-The file doc/HOW_TO_BUILD gives instructions on how to start build
-Kerberos.
-
-We used the ISODE release 8.0 ASN.1 compiler for the code we have run
-and tested here at MIT. If you are using ISODE 6.8, you will need to
-apply the patches found in the file tools/pepsy-diffs to fix some bugs
-in the PEPSY compiler which have caused us problems. I believe that
-ISODE 8.0 should work without any problems. However, I have not had a
-chance to try it out.
-
->> <<
->> Please report any problems/bugs/comments to 'krb5-bugs@athena.mit.edu' <<
->> <<
-
-Appreciation Time!!!! There are far too many people to try to thank
-them all; many people have contributed to the development of Kerberos
-V5. This is only a partial listing....
-
-Thanks to Mark Eichin at Cygnus for writing the new autoconf
-configuration system, for making the code much more portable, and for
-serving as pre-release testers.
-
-Thanks to Marc Horowitz, Barry Jaspan, and Jonathan Kamens (and
-others) at Openvision, Inc. for providing us with an GSS-API library,
-for serving as pre-release testers, and for finding and fixing many
-bugs (some of them at the last minute!).
-
-Thanks to Cybersafe for providing patches to fix bugs with inter-realm
-authentication.
-
-Thanks to Ari Medivnsky and Cliff Neumann for writing a ksu client.
-
-Thanks to Jim Miller from Suite Software for contributing many detailed
-bug reports, most of them by doing desk checks over the code!
-
-Thanks to Prasad Upasani from ISI for porting the Berkeley
-rlogin/rsh/rcp suite and for testing out our distribution on the Sun.
-
-Thanks to Glenn Machin and Bill Wrahe from Sandia National Labs for
-contributing the kadmin server, plus lots of bugfixes.
-
-Thanks to Bill Sommerfeld from HP for commenting on early Kerberos
-interface drafts, suggesting improvements in later coding interfaces,
-and finding and fixing many bugs.
-
-Thanks to Paul Borman from Cray for writing the Kerberos v4 to v5 glue
-layer and the Kerberos v5 subroutines for telnet.
-
-Thanks to Dan Bernstein, for providing the replay cache code.
-
-Thanks to the members of the Kerberos V5 development team at MIT, both
-past and present: Jay Berkenbilt, John Carr, Don Davis, Nancy Gilman,
-Barry Jaspan, John Kohl, Cliff Neuman, Jon Rochlis, Jeff Schiller, Ted
-Ts'o, Tom Yu.
-
-
-Note:
-
-Project Athena, Athena, Athena MUSE, Discuss, Hesiod, Kerberos, Moira, and
-Zephyr are trademarks of the Massachusetts Institute of Technology (MIT). No
-commercial use of these trademarks may be made without prior written
-permission of MIT.
-
-FYI, "commercial use" means use of a name in a product or other for-profit
-manner. It does NOT prevent a commercial firm from referring to the MIT
-trademarks in order to convey information (although in doing so, recognition
-of their trademark status should be given).
View
@@ -1,131 +0,0 @@
-In the Beta 4 distribution, we have included a new build system, which
-was built using the Free Software Foundation's autoconf program. This
-system will hopefully make Kerberos V5 much simpler to build for most
-people, and reduce the amount of effort required in porting Kerberos V5
-to a new platform.
-
-The imake system has been removed from this patch release, as most of
-the tree is now under autoconf control.
-
-HOW TO BUILD KERBEROS V5
-========================
-
-A) Find about 65 meg free; untar the krb5 sources. For example,
- we will assume that you've untar'ed the sources into /u1/krb5,
- so that the top of the source tree is /u1/krb5/src.
-
-B) If you don't want separate build trees for each architecture, then
-use the following abbreviated procedure.
- 1) cd /u1/krb5/src
- 2) ./configure
- 3) make
-
-If you have a make that supports VPATH (GNU make, for example), you
-can keep your source tree pure by making a build directory, e.g.
-/u1/krb5/pmax.
-
- 1) cd /u1/krb5/pmax
- 2) ../src/configure
- 3) make
-
-That's all there is to it!
-
-It is possible to pass compiler flags to to configure by using, for
-example, the "--with-ccopts=FLAGS" option. Please take note that if
-you use the native Ultrix compiler on a DECstation you are likely to
-lose if you pass no flags to cc; md4.c takes an estimated 33 million
-years to compile if you provide neither the "-g" flag nor the "-O"
-flag to cc.
-
-It is also possible to explicitly specify a compiler to configure,
-e.g. "--with-cc=gcc".
-
-By default, Kerberos will expect its configuration files to be in
-/krb5. This can be changed by passing the
-"--with-krb5-root=/KRB5_ROOT_DIR" option to configure, where
-/KRB5_ROOT_DIR should be replaced with the appropriate pathname.
-
-If you want Kerberos V4 backwards compatibility, pass the
-"--with-krb4=/KRB4_DIRECTORY" option to configure. This requires that
-the V4 include files be available in /KRB4_DIRECTORY/include, and that
-the V4 Kerberos library be available in /KRB4_DIRECTORY/lib.
-
-If, for some reason, you want to build with isode-based ASN.1 encoders
-and decoders rather than our hand-coded ones, use the "--enable-isode"
-flag to configure. This has not been thoroughly tested, so beware.
-
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-
-include/krb5/stock/osconf.h:
----------------------------
-There are several defaults you may wish to adjust in osconf.h:
-
-DEFAULT_CONFIG_FILENAME The pathname to the file which defines
- the known realms and their KDCs. Same
- format as V4 krb.conf
-DEFAULT_TRANS_FILENAME The pathname to the file which a priori
- assigns hosts to realms. Same format as
- V4 krb.realms
-DEFAULT_LNAME_FILENAME The pathname to the database mapping
- authentication names to local account names.
- See kdb5_anadd(8).
-DEFAULT_KEYTAB_NAME The type and pathname to the default
- server keytab file (the equivalent of v4
- /etc/srvtab).
-DEFAULT_KDC_ETYPE The default encryption type for the KDC.
-DEFAULT_KDC_KEYTYPE The default keytype for the KDC.
-KDCRCACHE The name of the replay cache used by
- the KDC.
-RCTMPDIR The directory which stores replay
- caches.
-
-include/krb5/stock/config.h
-----------------------------
-You might wish to adjust these flags as well:
-
-KRBCONF_VAGUE_ERRORS If defined, give vague and unhelpful
- error messages to the client... er,
- attacker. (Needed to meet silly
- government regulations; most other
- sites will want to keep this
- undefined.)
-
-KRBCONF_KDC_MODIFIES_KDB Define this if you want to allow the
- KDC to modify the Kerberos database;
- this allows the last request
- information to be updated, as well as
- the failure count information.
-
- Note that this doesn't work if you're
- using slave servers!!! It also causes
- the database to be modified (and thus
- need to be locked) frequently.
-
-
-
-NOTE for building Kerberos for multiple platforms
-=================================================
-
-This is how we build Kerberos for multiple platforms here at MIT:
-
-Use the synctree program to build a symlink tree. The .rconf files
-included in the distribution are for use with synctree. You can find
-the synctree program in the same directory as you found this release,
-athena-dist.mit.edu.
-
-Assuming you have a directory hierarchy which looks something like this:
-
-
- |-decmips-
- |-hpux----
-|-krb5-|-linux---
- |-solaris-
- |-src-----
-
-A typical build using synctree might be:
-
- cd XXX/krb5
- mkdir decmips; cd decmips
- synctree -s ../src -d .
- ./configure
- make
View
@@ -1,19 +0,0 @@
-Incompatibility notes:
-======================
-
-Currently, all of the MIT implementations of the Kerberos protocol are
-not fully compliant with the Kerberos RFC --- specifically, we do not
-implement the DES w/ MD5 checksum which is required by the RFC. This
-includes the Beta 4 release, although I expect to have this fixed in a
-patch release as soon as possible. I believe that we can fix this with
-minimal compatibility impacts; vendors contemplating shipment of this
-code as product should wait for the patch release or contact us for
-futher details.
-
-MIT implementations release Beta 2 and earlier are buggy in that they
-incorrectly generate the ASN.1 for a TGS request message. This was
-fixed in Beta 3, but the fix causes Beta 2 KDC's to be unable to
-respond to Beta 3 and more recent versions due to a checksum error.
-The Beta 3 KDC contains backwards compatibility code so that Beta 2
-and earlier application programs can continue to work with a Beta 3
-and more recent KDC.
View
@@ -1,118 +0,0 @@
-Source tree organization (15 Jun 1994):
-
-admin: administrative tools
- aname: manipulate aname/lname translation database
- convert: convert a V4 database to a V5 database
- create: create database
- destroy: destroy database
- edit: edit database [the most useful of the bunch]
- stash: store db key for unattended service
-
-autotools: Tools to allow rebuild the configure scripts; requires that
- you have GNU autoconf installed.
-
-appl: applications
- bsd: The Berkeley rlogin/rsh/rcp suite
- movemail: Emacs 18.57 'movemail' program with Kerberos
- hooks for POP support.
- popper: Berkeley POP server, with Kerberos and other
- athena mods
- gss-sample: sample client & server using the GSSAPI library
- sample: sample client & server (using byte stream sockets)
- simple: another sample client & server (using datagrams)
- telnet: telnet client (v4 & v5 kerberized, plus other goodies)
- libtelnet: support for telnet/telnetd
- telnet: the client-side
- telnetd: BSD UNIX telnet daemon
- login: a version of login(8) which has the '-f' flag
- necessary for using authenticated telnet
- connections without a password
- user-user: sample client & server using the user-to-user
- protocol features. (NOTE: the client and server
- programs are somewhat "backwards" in terms of how
- they call the Kerberos 5 routines. Don't let this
- confuse you.)
-
-clients: base-level kerberos clients
- kinit: get tickets using password
- klist: list ticket cache
- kdestroy: destroy ticket cache
- ksu: kerberized su program
-
-config: configuration control for source
- >>> look at site.def, vaxbsd.cf, ultrix.cf, ibm.cf in
- >>> particular for hints on things you might want to modify.
- >>> Ignore the comments on the X11 stuff for now.
-
-doc: documentation hierarchy
- api: The Kerberos api
-
-include: include hierarchy
- krb5: kerberos-specific includes
- kerberosIV: copies of kerberos v4 include files (used
- for some programs which support both)
-
-isode: isode hierarchy. A subset of ISODE 8.0. Used only for
- the autoconf setup.
-
-kadmin: Remote kerberos administration tools
- client: The client program
- kpasswd: User-client which allos users to change their
- passwords
- server: The server daemon
- v4server: A V4 kadmin server which updates a V5 database
-
-kdc: Kerberos Server/Key Distribution Center
-
-krb524: Program which issues krb4 tickets when handed a krb5 TGT
-
-lib: library hierarchy
- crypto: The cryptographic routines
- crc-32: CRC-32 function(s)
- des: MIT DES library
- md4: MD4 code from Internet RFC 1186B
- md5: MD5 code from Internet
- os: Operating-system or configuration-specific code
-
- kdb: database interface routines
-
- krb425: link-level compatibility library; lets you link
- v4 applications with v5 back-end code
-
- krb5: The Kerberos library
- asn.1: ASN.1 definitions & glue files
- The current set-up assumes that you
- have ISODE 7.0 (or later) installed.
- A subset of ISODE can be found in the
- same directory where you picked up the
- Kerberos distribution.
-
- ccache: credentials cache
- file: file descriptor-based ccache
- stdio: STDIO-based ccache
- error_tables: Common Error description files & headers
- free: routines to free various allocated data
- structures
- gssapi: GSSAPI implementation for Kerberos V5
- keytab: server key table routines
- file: STDIO-based keytab
- krb: Main kerberos library functions
- os: Operating-system or configuration-specific code
- posix: POSIX routines provided for systems
- that don't have them
- rcache: authenticator replay-cache code
-
-slave: Routines to propagate the Kerberos database from the
- master to the slave databases (kprop/kpropd)
-
-tests: various tests
- create: create a bunch of principals in a KDC database
- verify: verify that the principals have the right keys
- hammer: "hammer" the KDC with requests to help assure
- proper KDC operation
-
-util: Utilities
- et: The com_err library
- ss: The subsystem library
- makedepend: Program to rebuild the makefile dependencies
- unifdef: Removes #ifdef/#endif code
Oops, something went wrong.

0 comments on commit f59539c

Please sign in to comment.