diff options
author | Andrew Bartlett <abartlet@samba.org> | 2001-11-11 10:42:07 +0000 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2001-11-11 10:42:07 +0000 |
commit | 7de42a4faf74678c35b2013200466e75b1430524 (patch) | |
tree | 3a64d84033aa6deb8208e6b0b000bf0f633ae143 /source3/configure.in | |
parent | 5d152d24a39386a7b595f9fc157d86dff38c39dc (diff) | |
download | samba-7de42a4faf74678c35b2013200466e75b1430524.tar.gz samba-7de42a4faf74678c35b2013200466e75b1430524.tar.bz2 samba-7de42a4faf74678c35b2013200466e75b1430524.zip |
Remove built-in support for clear-text kerberos authentication.
This should remove some confusion from the ./configure, but does not affect the
'real' kerberos support currently residing in smbd/sesssetup.c.
This code is vunerable to a spoofed KDC, and is best replaced by --with-pam and
the pam_krb5 module. This module includes measures to prevent such spoofing.
Andrew Bartlett
(This used to be commit 3235880b41ee5dd5ef171195489fb9254f5d89b0)
Diffstat (limited to 'source3/configure.in')
-rw-r--r-- | source3/configure.in | 43 |
1 files changed, 10 insertions, 33 deletions
diff --git a/source3/configure.in b/source3/configure.in index 134b7ec6af..39a0a97c6e 100644 --- a/source3/configure.in +++ b/source3/configure.in @@ -1542,10 +1542,10 @@ AC_ARG_WITH(smbwrapper, ) ################################################# -# check for the AFS filesystem -AC_MSG_CHECKING(whether to use AFS) +# check for AFS clear-text auth support +AC_MSG_CHECKING(whether to use AFS clear-text auth) AC_ARG_WITH(afs, -[ --with-afs Include AFS support (default=no) ], +[ --with-afs Include AFS clear-text auth support (default=no) ], [ case "$withval" in yes) AC_MSG_RESULT(yes) @@ -1560,10 +1560,10 @@ AC_ARG_WITH(afs, ################################################# -# check for the DFS auth system -AC_MSG_CHECKING(whether to use DFS auth) +# check for the DFS clear-text auth system +AC_MSG_CHECKING(whether to use DFS clear-text auth) AC_ARG_WITH(dfs, -[ --with-dce-dfs Include DCE/DFS support (default=no)], +[ --with-dce-dfs Include DCE/DFS clear-text auth support (default=no)], [ case "$withval" in yes) AC_MSG_RESULT(yes) @@ -1576,41 +1576,18 @@ AC_ARG_WITH(dfs, AC_MSG_RESULT(no) ) -################################################# -# check for Kerberos IV auth system -AC_MSG_CHECKING(whether to use Kerberos IV) -AC_ARG_WITH(krb4, -[ --with-krb4=base-dir Include Kerberos IV support (default=no)], -[ case "$withval" in - yes) - AC_MSG_RESULT(yes) - AC_DEFINE(KRB4_AUTH) - LIBS="$LIBS -lkrb -ldes" - CFLAGS="$CFLAGS -I$withval/include" - LDFLAGS="$LDFLAGS -L$withval/lib" - AC_DEFINE_UNQUOTED(KRB4_DIR, ${withval}) - ;; - *) - AC_MSG_RESULT(no) - ;; - esac ], - AC_MSG_RESULT(no) -) - - ################################################# # check for location of Kerberos 5 install AC_MSG_CHECKING(for kerberos 5 install path) AC_ARG_WITH(krb5, -[ --with-krb5=base-dir Include Kerberos 5 support (default=no)], +[ --with-krb5=base-dir Locate Kerberos 5 support (default=/usr)], [ case "$withval" in no) AC_MSG_RESULT(no) ;; *) AC_MSG_RESULT(yes) - AC_DEFINE(KRB5_AUTH) LIBS="$LIBS -lkrb5" CFLAGS="$CFLAGS -I$withval/include" LDFLAGS="$LDFLAGS -L$withval/lib" @@ -1680,11 +1657,11 @@ AC_ARG_WITH(smbmount, ################################################# -# check for a PAM password database +# check for a PAM clear-text auth, accounts, password and session support with_pam_for_crypt=no -AC_MSG_CHECKING(whether to use PAM password database) +AC_MSG_CHECKING(whether to use PAM) AC_ARG_WITH(pam, -[ --with-pam Include PAM password database support (default=no)], +[ --with-pam Include PAM support (default=no)], [ case "$withval" in yes) AC_MSG_RESULT(yes) |