summaryrefslogtreecommitdiff
path: root/libexec/login_passwd
AgeCommit message (Expand)Author
2021-11-16fix an accidental NULL deref introduced last year, found by patrick.Theo de Raadt
2021-01-02Check auth_mkvalue(3) return value for NULL (malloc failure).Todd C. Miller
2020-05-15Fix handling of passwd entries with an empty password.Todd C. Miller
2019-12-24Merge two missed fixes from login.c to login_passwd.c.Todd C. Miller
2019-12-21Replace modular version with origin BSDi version with our updates.Todd C. Miller
2019-12-14Return BI_SILENT not BI_AUTH if the challenge service is requested.Todd C. Miller
2019-01-25I am retiring my old email address; replace it with my OpenBSD one.Todd C. Miller
2018-09-30Remove the hopefully last remnants of kerberos in there: arg_login,Antoine Jacoutot
2018-06-13Call pledge(2) earlier before opening the auth channel and readpassphrase()Reyk Floeter
2018-06-13Remove #ifdef PASSWD, it was always enabled and is a leftover from krb5 days.Reyk Floeter
2016-09-03set password to return of readpassphrase(), not always the buffer.Ted Unangst
2016-09-03convert to use readpassphrase() instead of DEPRECATED/getpass()Gleydson Soares
2016-09-02krb5 bits should rest in peaceGleydson Soares
2016-08-16remove unneeded castsTed Unangst
2015-11-19Call syslog() if login_* pledge fails; OK deraadt@Todd C. Miller
2015-11-18use _shadow getpw functions. these utilities obviously deal with hashes.Ted Unangst
2015-10-24Don't compile pwd_gensalt, it's not needed since we use crypt_checkpass.Antoine Jacoutot
2015-10-14pledge "stdio rpath" is good enough for these mainline BSD auth loginTheo de Raadt
2015-10-05Use explicit_bzero() instead of memset() for zeroing out secrets.Todd C. Miller
2015-09-11add some missing .Cm macros and drop some redundant .Bk while hereIngo Schwarze
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2014-09-16use crypt_checkpass function to make things simpleTed Unangst
2012-06-01add a krb5-noverify option for login.conf that disables verificationDavid Gwynne
2012-02-01improve synopsis markup of login_* utilities; use a more standardIgor Sobrado
2007-05-31convert to new .Dd format;Jason McIntyre
2006-04-02a FALLTHROUGH and one size_t castTheo de Raadt
2006-03-09Foil potential timing attacks by using the correct password hashTodd C. Miller
2005-04-14drop some krb4 stuffBjorn Sandell
2004-05-12login_passwd needs to be setuid root after all for "secure" YP maps.Todd C. Miller
2004-03-10More checking for a NULL return value from getpass(). otto@ OKTodd C. Miller
2003-07-29spacesTheo de Raadt
2003-06-17Sync with share/misc/license.template and add missing DARPA creditTodd C. Miller
2003-06-03Use an ISC-tyle license for all my code; it is simpler and more permissive.Todd C. Miller
2003-03-28login_passwd is now setgid _shadow instead of setuid root.Todd C. Miller
2003-03-17incorrect string length matching; ianm@cit.uws.edu.auTheo de Raadt
2002-09-06ansi; ok millert pvalchevTheo de Raadt
2002-08-28o) start new sentence on a new line;Mike Pechkin
2002-06-02minor KNFTheo de Raadt
2002-03-19Only accept the empty string for users with no password.Todd C. Miller
2001-12-06Do not set handler for SIGINT and SIGQUIT to SIG_IGN since it preventsTodd C. Miller
2001-11-13o) fix bogus .Xr usage;Mike Pechkin
2001-08-12some KNFTodd C. Miller
2001-08-09o wheel and lastchance are -v args (variable), not -s (service)Todd C. Miller
2001-07-08Remove extraneous .Pp after .ShTodd C. Miller
2001-06-29uglyTheo de Raadt
2001-06-26Cleanup and unify login_passwd, login_krb4, login_krb4-or-pwd, login_krb5 andHans Insulander
2001-06-25Remove instance stuff now that su uses an explicit option to specifyTodd C. Miller
2001-06-25Don't do the root instance handling stuff; su no longer does it.Hans Insulander
2000-12-12passwd login script; authenticates the user via passwd/ypTodd C. Miller