Add information about how to actually install Kerberos before talking

about its functionality.  Remove (last?) reference to FreeBSD 1.1.5.1.
This commit is contained in:
Murray Stokely 2001-10-10 19:18:35 +00:00
parent 309e20e7da
commit 057de2aa0b
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=10912

View file

@ -1,7 +1,7 @@
<!-- <!--
The FreeBSD Documentation Project The FreeBSD Documentation Project
$FreeBSD: doc/en_US.ISO8859-1/books/handbook/security/chapter.sgml,v 1.83 2001/10/02 19:04:56 chern Exp $ $FreeBSD: doc/en_US.ISO8859-1/books/handbook/security/chapter.sgml,v 1.84 2001/10/08 12:53:06 tom Exp $
--> -->
<chapter id="security"> <chapter id="security">
@ -1356,14 +1356,31 @@ permit port ttyd0</programlisting>
<para>The following instructions can be used as a guide on how to set up <para>The following instructions can be used as a guide on how to set up
Kerberos as distributed for FreeBSD. However, you should refer to the Kerberos as distributed for FreeBSD. However, you should refer to the
relevant manual pages for a complete description.</para> relevant manual pages for a complete description.</para>
<indexterm><primary>4.4BSD-Lite</primary></indexterm>
<para>In FreeBSD, the Kerberos is not that from the original 4.4BSD-Lite, <sect2>
distribution, but eBones, which had been previously ported to FreeBSD <title>Installing Kerberos</title>
1.1.5.1, and was sourced from outside the USA/Canada, and was thus
available to system owners outside those countries during the era <indexterm><primary>MIT</primary></indexterm>
of restrictive export controls on cryptographic code from the USA.</para> <indexterm>
<primary>Kerberos</primary>
<secondary>installing</secondary>
</indexterm>
<para>Kerberos is an optional component of FreeBSD. The easiest
way to install this software is by selecting the 'krb4' or
'krb5' distribution in <application>sysinstall</application>
during the initial installation of FreeBSD. This will install
the 'eBones' (KerberosIV) or 'Heimdal' (Kerberos5)
implementation of Kerberos. These implementations are
included because they are developed outside the USA/Canada and
were thus available to system owners outside those countries
during the era of restrictive export controls on cryptographic
code from the USA.</para>
<para>Alternatively, the MIT implementation of Kerberos is
available from the ports collection as
<port>security/krb5</port>.</para>
</sect2>
<sect2> <sect2>
<title>Creating the Initial Database</title> <title>Creating the Initial Database</title>