acb9ab6be4
The majority of these patches were inspired from FreeBSD's ports. FreeBSD, along with at least Debian, have removed Kerberos4 due to secuity concerns. From: http://web.mit.edu/kerberos/krb4-end-of-life.html : "Serious protocol flaws[2] have been found in Kerberos 4. These flaws permit attacks which require far less effort than an exhaustive search of the DES key space. These flaws make Kerberos 4 cross-realm authentication an unacceptable security risk and raise serious questions about the security of the entire Kerberos 4 protocol. The known insecurity of DES, combined with the recently discovered protocol flaws, make it extremely inadvisable to rely on the security of version 4 of the Kerberos protocol. These factors motivate the MIT Kerberos Team to remove support for Kerberos version 4 from the MIT implementation of Kerberos." This end-of-life announcement is dated 19 October 2006. I think it's a good question to ask why this package and the packages that depend on it are still in pkgsrc.
31 lines
902 B
Text
31 lines
902 B
Text
$NetBSD: patch-appl_ftp_ftpd_ftpcmd.y,v 1.1 2011/11/28 19:33:13 marino Exp $
|
|
|
|
--- appl/ftp/ftpd/ftpcmd.y.orig 2001-08-05 06:39:29.000000000 +0000
|
|
+++ appl/ftp/ftpd/ftpcmd.y
|
|
@@ -103,7 +103,7 @@ static int yylex (void);
|
|
UMASK IDLE CHMOD
|
|
|
|
AUTH ADAT PROT PBSZ CCC MIC
|
|
- CONF ENC
|
|
+ CNFX ENC
|
|
|
|
KAUTH KLIST KDESTROY KRBTKFILE AFSLOG
|
|
LOCATE URL
|
|
@@ -695,7 +695,7 @@ rcmd
|
|
mec($3, prot_safe);
|
|
free($3);
|
|
}
|
|
- | CONF SP STRING CRLF
|
|
+ | CNFX SP STRING CRLF
|
|
{
|
|
mec($3, prot_confidential);
|
|
free($3);
|
|
@@ -984,7 +984,7 @@ struct tab cmdtab[] = { /* In order def
|
|
{ "PROT", PROT, STR1, 1, "<sp> prot-level" },
|
|
{ "CCC", CCC, ARGS, 1, "" },
|
|
{ "MIC", MIC, STR1, 1, "<sp> integrity command" },
|
|
- { "CONF", CONF, STR1, 1, "<sp> confidentiality command" },
|
|
+ { "CONF", CNFX, STR1, 1, "<sp> confidentiality command" },
|
|
{ "ENC", ENC, STR1, 1, "<sp> privacy command" },
|
|
|
|
/* RFC2389 */
|