NO_KERBEROS (was Re: cvs commit: src/kerberos5 ...)

[Jacques A. Vidrine]

On Mon, May 05, 2003 at 12:58:44AM -0700, Mark Murray wrote:
>   Log:
>   Turn MAKE_KERBEROS5 into NO_KERBEROS by negating the logic. Some extra
>   cleanups were necessary in release/Makefile, and the tinderbox code
>   was syntax checked, not run checked.

Hi, Mark!

Thanks so much!  This takes care of many issues which were bothering
me.  First and foremost, now we no longer have the bad situation where
the Kerberos bits were installed by default, but they were not rebuilt
by default during `make world'.  This was leaving stale Kerberos
libraries and utilities in many situations.  Now the Kerberos bits are
treated more like the other (in theory) `optional' components of `make
world'.

Getting rid of the separate Kerberos 4 and Kerberos 5 distributions
makes applying fixes, regression testing, and package building
significantly simpler (at least from the security-officer
perspective).  This also removes some misgivings I had about enabling
Kerberos support in more parts of the base system --- with separate
distributions, each Kerberos-enabled utility became a fork and a
support issue.

Binary patches (such as those occassionally issued by the SO team and
those by 3rd parties such as Colin's updater) will be more widely
applicable now.

This should cut make release times a wee bit, since we don't have to
build telnet and ssh quite so many times.  (Now if we could only
dispatch the `crypto' distribution :-)

Finally, this brings us in line with the other BSDs (NetBSD, OpenBSD,
and Mac OS X), which all have Kerberos built-in.

Thanks again!
Cheers,
-- 
Jacques Vidrine   . NTT/Verio SME      . FreeBSD UNIX       . Heimdal
nectar at celabo.org . jvidrine at verio.net . nectar at freebsd.org . nectar at kth.se