Subject: Re: krb4 code in basesrc: is it used? is kadmin insecure?
To: Jeremy C. Reed <reed@reedmedia.net>
From: Jason R Thorpe <thorpej@wasabisystems.com>
List: tech-misc
Date: 10/29/2002 14:59:17
On Tue, Oct 29, 2002 at 02:41:24PM -0800, Jeremy C. Reed wrote:
> Is the basesrc/crypto/dist/krb4/kadmin/ even used?
>
> I think this code also has the security issues (exploits for kadmind).
>
> I know that heimdal version has been updated in the NetBSD basesrc. (Thank
> you Perry and joda.)
The krb4 libraries are used. The rest of the krb4 programs are not; it's
all handled by the Heimdal programs (which, in general, support krb4 and
krb5).
--
-- Jason R. Thorpe <thorpej@wasabisystems.com>