Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-01-23 | Move a closefrom(2) into the block that execs su(1) where it can do the | Todd C. Miller | |
most good. There is already another closefrom(2) for the normal code path. Also remove a bogus comment. Discussed with deraadt@ | |||
2004-01-23 | Use closefrom(); ok millert tedu | Theo de Raadt | |
2003-11-09 | Typos in comments from Jared Yanovich <jjy2+ at pitt dot edu> | Otto Moerbeek | |
2003-08-12 | Clean up obsolete kerberos 4 stuff | Hans Insulander | |
ok millert@ | |||
2003-06-17 | Sync with share/misc/license.template and add missing DARPA credit | Todd C. Miller | |
where applicable. | |||
2003-06-10 | - section reorder | Jason McIntyre | |
- COMPATIBILITY merge - macro cleanup - kill whitespace at EOL - new sentence, new line ssh pages ok markus@ | |||
2003-06-03 | Remove the advertising clause in the UCB license which Berkeley | Todd C. Miller | |
rescinded 22 July 1999. Proofed by myself and Theo. | |||
2003-06-03 | Use an ISC-tyle license for all my code; it is simpler and more permissive. | Todd C. Miller | |
2003-03-11 | files with dead .Xr's; | Jason McIntyre | |
left .Xr, but removed man page number as suggested by mpech@ more help and ok millert@ | |||
2002-10-16 | Remove the setuid bit from /usr/bin/login. If login is run by a user | Todd C. Miller | |
with a non-zero euid, it will now exec "su -L -l". The only things that need to do this are shells with a "login" builtin and the emulation that su(1) now does is good enough for this purpose. | |||
2002-07-02 | Kill setjmp/longjmp from a signal handler. All we really need is | Todd C. Miller | |
to use sigaction() w/o SA_RESTART to allow ^C to interrupt motd(). deraadt@ OK. | |||
2002-07-02 | KNF and signal race fixes; millert ok | Theo de Raadt | |
2002-05-06 | Kill/adjust r(login|exec)d? references now that those are no longer in | Todd C. Miller | |
the tree. | |||
2002-03-30 | warn -> warnx, because we put the strerror() manually. | Vincent Labrecque | |
ok millert | |||
2002-02-16 | Part one of userland __P removal. Done with a simple regexp with some minor ↵ | Todd C. Miller | |
hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically. | |||
2002-01-24 | fix the history refs | Michael Shalayeff | |
2002-01-06 | Do not allow root to login via an insecure tty even if the auth method | Todd C. Miller | |
does not use plaintext passwords due to the possibility of connection hijacking. This restores the pre-3.0 behavior and closes PR 2299. | |||
2001-08-20 | Powered by @mantoya. | Mike Pechkin | |
o) fix bogus .Xr usage; millert@ ok. | |||
2001-08-12 | Sync usage message to man page | Todd C. Miller | |
2001-07-09 | correct type on last arg to execl(); nordin@cse.ogi.edu | Theo de Raadt | |
2001-07-06 | missing prototypes; ok millert | Peter Valchev | |
2001-06-28 | '/' can also be an instance separator (e.g. kerb5) | Todd C. Miller | |
2001-06-28 | No longer used now that we do BSD auth | Todd C. Miller | |
2001-06-25 | Add a "login" option to allow differentiation between authentication | Todd C. Miller | |
that creates a login session vs. a simple identity check. Gets passed as a -v option to the login scripts. To be used by kerberos to know when to create new tickets. | |||
2001-06-25 | The need to to statically link this on alpha seemed to be | Artur Grabowski | |
some kind of transient problem. | |||
2001-06-24 | When setting uid, set to 0 if rootlogin flag is set, regardless of | Todd C. Miller | |
pw_uid. Fixes problem with user.root instances not haveing uid 0 in kerberos. | |||
2001-06-19 | If we timeout during login and the user tried to login call badlogin() | Todd C. Miller | |
before exit. SUggested by <vii@users.sourceforge.net> Add some new login.conf variables: o login-timeout - login prompt timeout o login-tries - max login tries o login-backoff - number of attempts before backing off (and sleeping) | |||
2001-06-13 | Link login(1) static for now until a dynamic linking bug is fixed. | Todd C. Miller | |
2001-05-29 | Don't want -Wall | Todd C. Miller | |
2001-05-29 | BSD auth support. k5login.c and klogin.c are no longer used but will | Todd C. Miller | |
remain for the time being until Kerberos support is up to snuff. | |||
2001-05-25 | Correct and comment out krb5. This is not working at the moment, but we want | Hans Insulander | |
to use bsd_auth instead. | |||
2000-12-02 | Check for symlinks before overwriting kerberos ticket files. | Hans Insulander | |
While i'm at it, make sure not to use Kerberos at all if there is no local srvtab. Based on patch from Todd Miller. Reported by <jouko@solutions.fi>. | |||
2000-11-29 | document -u flag and environment variables | Todd C. Miller | |
2000-10-14 | Make empty passwords work again when login is compiled with kerberos support. | Miod Vallat | |
2000-09-15 | check return value for setenv(3) for failure, and deal appropriately | Theo de Raadt | |
2000-09-04 | Check for account expiration before password expiration; | Todd C. Miller | |
sigh@kuzirabekon.econ.nagasaki-u.ac.jp | |||
2000-09-03 | Boring... Add :L modifier to all tweakable variables tests. | Marc Espie | |
Closes PR 1246 | |||
2000-08-24 | Last change inadvertantly broke non-kerberos logins. It's not clear | Todd C. Miller | |
that the authok flag is really meaningful but keep it for now. | |||
2000-08-24 | Fix non-root kerberos logins broken after rev 1.29. That change was | Todd C. Miller | |
correct but it uncovered a bug that had thusfar stayed hidden due more to serendipity than anything else. Problem found by danh@openbsd.org | |||
2000-08-20 | Add calls to setusercontext() and login_get*(). We basically call | Todd C. Miller | |
setusercontext() in most places where previously we did a setlogin(). Add default login.conf file and put root in the "daemon" login class. | |||
2000-07-17 | o use strlcpy() where sensible | Todd C. Miller | |
o when trying to login as root on a non-secure tty always say "login refused" regardless of whether the password is correct or not | |||
2000-03-24 | Correct the HISTORY section to note that this command appeared in Version 5 | Aaron Campbell | |
of AT&T UNIX, not Version 6. Verified by strings(1)'ing a .dsk file (PDP-11 executable) containing the v5 sources, obtainable at gatekeeper.dec.com in the directory /pub/DEC/sim/software. Idea from NetBSD PR/4790. | |||
2000-03-08 | Various cleanups and improvements. | Aaron Campbell | |
2000-03-02 | count is unsigned (size_t) so cast to u_long, not long | Todd C. Miller | |
2000-03-01 | order kerberos libraries properly | Theo de Raadt | |
2000-03-01 | Wall | Theo de Raadt | |
1999-12-30 | login already decleared in util.h | Eric Jackson | |
1999-11-24 | We won't have the tickets in shared memory, remove dead code | Artur Grabowski | |
1999-11-11 | Use snprintf instead of sprintf and sizeof(foo) instead of hardcoded sizes. | Artur Grabowski | |
1999-08-17 | More <sys/file.h> vs. <fcntl.h> and open() flags fixes. | Todd C. Miller | |