c4e9b61dbf
The majority of these patches were inspired from FreeBSD's ports. FreeBSD, along with at least Debian, have removed Kerberos4 due to secuity concerns. From: http://web.mit.edu/kerberos/krb4-end-of-life.html : "Serious protocol flaws[2] have been found in Kerberos 4. These flaws permit attacks which require far less effort than an exhaustive search of the DES key space. These flaws make Kerberos 4 cross-realm authentication an unacceptable security risk and raise serious questions about the security of the entire Kerberos 4 protocol. The known insecurity of DES, combined with the recently discovered protocol flaws, make it extremely inadvisable to rely on the security of version 4 of the Kerberos protocol. These factors motivate the MIT Kerberos Team to remove support for Kerberos version 4 from the MIT implementation of Kerberos." This end-of-life announcement is dated 19 October 2006. I think it's a good question to ask why this package and the packages that depend on it are still in pkgsrc.
18 lines
582 B
C
18 lines
582 B
C
$NetBSD: patch-lib_krb_rd_priv.c,v 1.1 2011/11/28 19:33:13 marino Exp $
|
|
|
|
--- lib/krb/rd_priv.c.orig 2001-09-16 22:41:58.000000000 +0000
|
|
+++ lib/krb/rd_priv.c
|
|
@@ -57,7 +57,12 @@ RCSID("$Id: rd_priv.c,v 1.30 2001/09/16
|
|
|
|
int32_t
|
|
krb_rd_priv(void *in, u_int32_t in_length,
|
|
- struct des_ks_struct *schedule, des_cblock *key,
|
|
+#if defined(__DragonFly__) || defined (__FreeBSD__)
|
|
+ des_key_schedule schedule,
|
|
+#else
|
|
+ struct des_ks_struct *schedule,
|
|
+#endif
|
|
+ des_cblock *key,
|
|
struct sockaddr_in *sender, struct sockaddr_in *receiver,
|
|
MSG_DAT *m_data)
|
|
{
|