| 1 | <sect2>
|
|---|
| 2 | <title>Introduction to <application>Heimdal</application></title>
|
|---|
| 3 |
|
|---|
| 4 | <para>
|
|---|
| 5 | <application>Heimdal</application> is a free implementation of Kerberos
|
|---|
| 6 | 5, that aims to be compatible with <acronym>MIT</acronym> Kerberos and
|
|---|
| 7 | is backwards compatible with Kerberos 4. Kerberos is a network
|
|---|
| 8 | authentication protocol. Basically it preserves the integrity of
|
|---|
| 9 | passwords in any untrusted network (like the Internet). Kerberized
|
|---|
| 10 | applications work hand-in-hand with sites that support Kerberos to
|
|---|
| 11 | ensure that passwords cannot be stolen. A Kerberos installation will
|
|---|
| 12 | make changes to the authentication mechanisms on your network and will
|
|---|
| 13 | overwrite several programs and daemons from the Coreutils, Inetutils,
|
|---|
| 14 | Qpopper and Shadow packages.
|
|---|
| 15 | </para>
|
|---|
| 16 |
|
|---|
| 17 | <sect3><title>Package information</title>
|
|---|
| 18 | <itemizedlist spacing='compact'>
|
|---|
| 19 | <listitem><para>Download (HTTP): <ulink url="&heimdal-download-http;"/></para></listitem>
|
|---|
| 20 | <listitem><para>Download (FTP): <ulink url="&heimdal-download-ftp;"/></para></listitem>
|
|---|
| 21 | <listitem><para>Download size: &heimdal-size;</para></listitem>
|
|---|
| 22 | <listitem><para>Estimated Disk space required: &heimdal-buildsize;</para></listitem>
|
|---|
| 23 | <listitem><para>Estimated build time: &heimdal-time;</para></listitem></itemizedlist>
|
|---|
| 24 | </sect3>
|
|---|
| 25 |
|
|---|
| 26 | <sect3><title>Additional downloads</title>
|
|---|
| 27 | <itemizedlist spacing='compact'>
|
|---|
| 28 | <listitem><para>Required patch: <ulink
|
|---|
| 29 | url="&patch-root;/heimdal-&heimdal-version;-fhs-compliance-1.patch"/></para>
|
|---|
| 30 | </listitem>
|
|---|
| 31 | <listitem><para>Required patch for cracklib: <ulink
|
|---|
| 32 | url="&patch-root;/heimdal-&heimdal-version;-cracklib-1.patch"/></para>
|
|---|
| 33 | </listitem>
|
|---|
| 34 | </itemizedlist>
|
|---|
| 35 |
|
|---|
| 36 | </sect3>
|
|---|
| 37 |
|
|---|
| 38 | <sect3><title><application>Heimdal</application> dependencies</title>
|
|---|
| 39 | <sect4><title>Required</title>
|
|---|
| 40 | <para>
|
|---|
| 41 | <xref linkend="openssl"/> and
|
|---|
| 42 | <xref linkend="db"/>
|
|---|
| 43 | </para></sect4>
|
|---|
| 44 | <sect4><title>Optional</title>
|
|---|
| 45 | <para>
|
|---|
| 46 | <xref linkend="readline"/>,
|
|---|
| 47 | <xref linkend="Linux_PAM"/>,
|
|---|
| 48 | <xref linkend="xorg"/> or
|
|---|
| 49 | <xref linkend="xfree86"/>,
|
|---|
| 50 | <xref linkend="openldap"/>,
|
|---|
| 51 | <xref linkend="cracklib"/> and
|
|---|
| 52 | <ulink url="http://www.pdc.kth.se/kth-krb/">krb4</ulink>
|
|---|
| 53 | </para>
|
|---|
| 54 |
|
|---|
| 55 | <note><para>
|
|---|
| 56 | Some sort of time synchronization facility on your system (like <xref
|
|---|
| 57 | linkend="ntp"/>) is required since Kerberos won't authenticate if the
|
|---|
| 58 | time differential between a kerberized client and the
|
|---|
| 59 | <acronym>KDC</acronym> server is more than 5 minutes.</para></note>
|
|---|
| 60 | </sect4>
|
|---|
| 61 |
|
|---|
| 62 | </sect3>
|
|---|
| 63 |
|
|---|
| 64 | </sect2>
|
|---|
