INSTALL instructions for krb5-1.2.1 with smartcard

Everything has been tested on Linux and OpenBSD.

Please send all bug reports, platform questions, etc to
smartcards@umich.edu.
--------

You need:
    kerberos-1.2.1		[1]
    slb cyberflex access	[2]
    citi-apps			[3]
    sc7816			[3]

host-side:
    - install sc7816 and citi-apps [1]
	(or, buy slb's cyberflex linux starter's kit [2])
    - patch
    - run `util/reconf && ./configure --with-sc7816 && make`
	- openbsd caveat: remove the #include <net/if.h> in kdc/network.c
	  before making
    - edit krb5.conf [ see below ]

	Tell kerberos to use md5.  Put the following two lines for default
	enctypes in the [libdefaults] section.

		default_tkt_enctypes = des-cbc-md5,des-cbc-crc
		default_tgs_enctypes = des-cbc-md5,des-cbc-crc

	We've provided a sample krb5.conf file that we use at CITI to get
	both CITI and UMICH tickets.

    - make install
	(or, minimally, install kinit, k524init, and krb5.conf)
    - install ksc

card-side:
    - we've provided the pre-built Krb.bin.  If you don't trust us, you
      can get a java compiler and compile our source, Krb.java.  For that,
      you will need a java compiler, and mksolo [2].  Otherwise, ...
    - insert cyberflex access javacard 2.0 into reader [2]
    - run `kinit -K` to find out your password in bytecode
    - run kscinit.sh

[1] http://web.mit.edu/kerberos/www/
[2] http://www.cardstore.slb.com/
[3] http://www.citi.umich.edu/projects/smartcard/sc7816.tar.gz

