Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt | |
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | |||
2014-09-16 | use crypt_checkpass function to make things simple | Ted Unangst | |
2012-06-01 | add a krb5-noverify option for login.conf that disables verification | David Gwynne | |
of the server against a local host keytab file when you're authing users with login_krb5. useful for when you need to auth users but dealing with the domain admins is painful... ok sthen@ jj@ millert@ | |||
2012-02-01 | improve synopsis markup of login_* utilities; use a more standard | Igor Sobrado | |
phrasing when listing flags; add missing arguments to flags in the DESCRIPTION section of the manual page. use of .Li (literal text) macros and standard wording suggested by jmc@ ok jmc@ | |||
2007-05-31 | convert to new .Dd format; | Jason McIntyre | |
2006-04-02 | a FALLTHROUGH and one size_t cast | Theo de Raadt | |
2006-03-09 | Foil potential timing attacks by using the correct password hash | Todd C. Miller | |
instead of "xx". In practice this means bcrypt() will be used for non-existent users instead of DES crypt(). Adapted from a patch by Peter Philipp. OK deraadt@ | |||
2005-04-14 | drop some krb4 stuff | Bjorn Sandell | |
ok beck@ | |||
2004-05-12 | login_passwd needs to be setuid root after all for "secure" YP maps. | Todd C. Miller | |
2004-03-10 | More checking for a NULL return value from getpass(). otto@ OK | Todd C. Miller | |
2003-07-29 | spaces | Theo de Raadt | |
2003-06-17 | Sync with share/misc/license.template and add missing DARPA credit | Todd C. Miller | |
where applicable. | |||
2003-06-03 | Use an ISC-tyle license for all my code; it is simpler and more permissive. | Todd C. Miller | |
2003-03-28 | login_passwd is now setgid _shadow instead of setuid root. | Todd C. Miller | |
2003-03-17 | incorrect string length matching; ianm@cit.uws.edu.au | Theo de Raadt | |
2002-09-06 | ansi; ok millert pvalchev | Theo de Raadt | |
2002-08-28 | o) start new sentence on a new line; | Mike Pechkin | |
o) don't use .Nm w/o argument in .SYNOPSIS; I waste time, when fixing already cleaned pages. :( one man ok@ | |||
2002-06-02 | minor KNF | Theo de Raadt | |
2002-03-19 | Only accept the empty string for users with no password. | Todd C. Miller | |
Previously, any password was accepted (that's how crypt() behaves). | |||
2001-12-06 | Do not set handler for SIGINT and SIGQUIT to SIG_IGN since it prevents | Todd C. Miller | |
getpass()/readpassphrase() from being able to restore the tty mode on keyboard interrupt. Along with the recent readpassphrase.c commit this means that if you ^C things that use login scripts (like su(1)) with a non-CBREAK shell your tty mode will be restored nicely. TODO: The various login scripts need to install handlers to avoid leaving turd files or otherwise ending in a bad state. It would also be nice to send BI_REJECT to the back channel. | |||
2001-11-13 | o) fix bogus .Xr usage; | Mike Pechkin | |
o) start new sentence on a new line; o) don't use .Xr instead of .Pa tag; o) minimal -mdoc design fixes; millert@ ok; | |||
2001-08-12 | some KNF | Todd C. Miller | |
2001-08-09 | o wheel and lastchance are -v args (variable), not -s (service) | Todd C. Miller | |
o an unknown service is a fatal error o some KNF | |||
2001-07-08 | Remove extraneous .Pp after .Sh | Todd C. Miller | |
2001-06-29 | ugly | Theo de Raadt | |
2001-06-26 | Cleanup and unify login_passwd, login_krb4, login_krb4-or-pwd, login_krb5 and | Hans Insulander | |
login_krb5-or-pwd. | |||
2001-06-25 | Remove instance stuff now that su uses an explicit option to specify | Todd C. Miller | |
the invoking user. | |||
2001-06-25 | Don't do the root instance handling stuff; su no longer does it. | Hans Insulander | |
2000-12-12 | passwd login script; authenticates the user via passwd/yp | Todd C. Miller | |
will be used when BSD authentication is enabled |