Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt | |
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | |||
2014-11-21 | change prototype for crypt_newhash. the login_cap_t is a holdover from its | Ted Unangst | |
pwd_gensalt origins, but a string argument works equally work and is more friendly to consumers beyond local user accounts. ok deraadt | |||
2014-11-20 | switch to using crypt_newhash interface. ok deraadt | Ted Unangst | |
2014-11-11 | use crypt_checkpass instead of crypt/strcmp | Ted Unangst | |
2014-11-02 | update documentation regarding localcipher only | Ted Unangst | |
2014-11-01 | remove support for creating any password style that's not blowfish. | Ted Unangst | |
this also effectively retires the ypcipher cap. it's time for DES crypt to die (especially over network traffic!) and a multi stage rollout of upgrading login.conf first would take too long. one cipher standard is good enough. this doesn't prevent auth yet, just new passwords. ok deraadt millert | |||
2014-09-17 | Increase number of blowfish rounds to 8 by default when not specified in | Kent R. Spillner | |
login.conf. ok deraadt@ doug@ millert@ "please commit" tedu@ | |||
2014-05-19 | no more -K; | Jason McIntyre | |
2014-05-19 | kerberos leftovers | Ted Unangst | |
2014-04-24 | no more kinit(1); | Jason McIntyre | |
2014-04-22 | Remove KERBEROS5 from the Makefiles (except ssh for now, where it is | Reyk Floeter | |
already manually disabled). ok deraadt@ | |||
2014-04-15 | Remove workarounds for ld reaching MAXDSIZ on vax, now that MAXDSIZ is | Miod Vallat | |
more comfortable. Reminded by brad@ | |||
2014-02-16 | fix bibliographical references; from Jan Stary <hans at stare dot cz> | Ingo Schwarze | |
feedback and ok jmc@ | |||
2013-08-06 | Switch vax to gcc 3.3.6. | Miod Vallat | |
2013-06-23 | Stop using deprecated functions from Kerberos. | Antoine Jacoutot | |
input from and ok millert@ | |||
2013-06-19 | don't link to hx509, pthread and ntlm related libraries | Robert Nagy | |
2013-06-18 | Shuffle library link order to appease the static arch deities. | Miod Vallat | |
2013-06-17 | link to the new kerberos libraries | Robert Nagy | |
2013-04-20 | Xr encrypt(1) to give people a hint if they just want a password string | Ted Unangst | |
2013-03-02 | When using an external password quality check program, do not run the | Antoine Jacoutot | |
patterns checks which may contradict the rules set by the external helper. ok millert@ | |||
2013-01-18 | Use open(O_CLOEXEC) instead of a separate fcntl(FD_CLOEXEC) call. | Philip Guenther | |
Nudged by David Hill | |||
2012-06-20 | Correct English just like jsing@ did it in passwd/local_passwd.c rev. 1.38 | Ingo Schwarze | |
on April 27, 2008. While here, fix a typo and drop an obsolete BUGS section. "my typo so OK millert@ :-)" and OK jmc@ | |||
2012-06-19 | sync the descriptions of /etc/passwd; | Jason McIntyre | |
issue spotted by f5b help/ok schwarze | |||
2010-10-15 | Switch the remaining users of libdes in src to libcrypto, | Jonathan Gray | |
telnet portion partially from the latest heimdal. ok mikeb@ | |||
2010-07-11 | bcrypt_gensalt is already declared in pwd.h | David Hill | |
"sure" deraadt@ | |||
2009-10-28 | rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and | Theo de Raadt | |
unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms | |||
2008-11-06 | -Wall -Wshadow clean, no binary change | Damien Miller | |
2008-07-04 | fix compilation for !YP case; ok millert@ | Damien Miller | |
2008-06-24 | implement getpwnam_r() and getpwuid_r() -- very nearly a rewrite of the | Theo de Raadt | |
entire file. much help from kurt, and tested by many | |||
2008-04-27 | Correct English. | Joel Sing | |
ok jmc@ | |||
2008-01-02 | remove unused file | Charles Longeau | |
unused function initially spotted by tobias@, then I realized the whole file was unused. ok millert@ tobias@ | |||
2007-09-08 | Fix lint warning about unreachable code. | Chad Loder | |
OK deraadt@ | |||
2007-08-14 | error out, instead of producing a warning and displaying that the YP | Alexandre Anriot | |
password has changed, when the rpc.yppasswdd daemon is unreachable. ok deraadt@ | |||
2007-07-26 | Remove the space after "Password:" in password prompts where echo is | Todd C. Miller | |
turned off. This is consistent with historic UNIX behavior. | |||
2007-07-06 | dont inlucde <sys/syslimits.h> directly. | Thordur I. Bjornsson | |
no binary change ok millert@ | |||
2007-05-31 | convert to new .Dd format; | Jason McIntyre | |
2007-03-20 | remove some bogus *p tests from charles longeau | Ted Unangst | |
ok deraadt millert | |||
2006-04-02 | oops, to64() is shared. | Theo de Raadt | |
2006-04-02 | avoid lvalue cast by making local function be unsigned to begin with | Theo de Raadt | |
2006-03-30 | minimal lint happiness, round 1 | Theo de Raadt | |
2006-01-22 | - drop privs before running krb5 code | Bjorn Sandell | |
- avoid calling krb5_get_init_creds_password(3) with principal == NULL - try to change the kerberos password if there is a ticket file help from millert@, ok beck@ | |||
2005-12-18 | Indicate that the flags are exclusive, mention realm in the description | Bjorn Sandell | |
for K and remove an error case for kerberos that doesn't apply nowdays. with jmc@ | |||
2005-12-12 | sync usage(); | Jason McIntyre | |
from david leonard (pr #4939); | |||
2005-12-12 | - simplify synopsis | Jason McIntyre | |
- remove some .Bk/.Ek clutter - sort options list | |||
2005-09-28 | pull in protos from rpcsvc/ypclnt.h; issue noted by leonardo@iken.com.br | Theo de Raadt | |
2005-05-01 | spacing | Theo de Raadt | |
2005-05-01 | knf | Theo de Raadt | |
2005-05-01 | _yp_check() is a non-standard API. it leaves the domain bound, and the | Theo de Raadt | |
fd use for that too. We are only using it to check if YP is alive, so, unbind YP right after... this removes the reserved port socket fd in the child.. | |||
2005-05-01 | run password strength checking regexes as user; ok deraadt@ | Damien Miller | |
2005-03-07 | simplify macro calls; | Jason McIntyre | |