summaryrefslogtreecommitdiff
path: root/usr.bin/passwd
AgeCommit message (Collapse)Author
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
2014-11-21change prototype for crypt_newhash. the login_cap_t is a holdover from itsTed Unangst
pwd_gensalt origins, but a string argument works equally work and is more friendly to consumers beyond local user accounts. ok deraadt
2014-11-20switch to using crypt_newhash interface. ok deraadtTed Unangst
2014-11-11use crypt_checkpass instead of crypt/strcmpTed Unangst
2014-11-02update documentation regarding localcipher onlyTed Unangst
2014-11-01remove support for creating any password style that's not blowfish.Ted Unangst
this also effectively retires the ypcipher cap. it's time for DES crypt to die (especially over network traffic!) and a multi stage rollout of upgrading login.conf first would take too long. one cipher standard is good enough. this doesn't prevent auth yet, just new passwords. ok deraadt millert
2014-09-17Increase number of blowfish rounds to 8 by default when not specified inKent R. Spillner
login.conf. ok deraadt@ doug@ millert@ "please commit" tedu@
2014-05-19no more -K;Jason McIntyre
2014-05-19kerberos leftoversTed Unangst
2014-04-24no more kinit(1);Jason McIntyre
2014-04-22Remove KERBEROS5 from the Makefiles (except ssh for now, where it isReyk Floeter
already manually disabled). ok deraadt@
2014-04-15Remove workarounds for ld reaching MAXDSIZ on vax, now that MAXDSIZ isMiod Vallat
more comfortable. Reminded by brad@
2014-02-16fix bibliographical references; from Jan Stary <hans at stare dot cz>Ingo Schwarze
feedback and ok jmc@
2013-08-06Switch vax to gcc 3.3.6.Miod Vallat
2013-06-23Stop using deprecated functions from Kerberos.Antoine Jacoutot
input from and ok millert@
2013-06-19don't link to hx509, pthread and ntlm related librariesRobert Nagy
2013-06-18Shuffle library link order to appease the static arch deities.Miod Vallat
2013-06-17link to the new kerberos librariesRobert Nagy
2013-04-20Xr encrypt(1) to give people a hint if they just want a password stringTed Unangst
2013-03-02When using an external password quality check program, do not run theAntoine Jacoutot
patterns checks which may contradict the rules set by the external helper. ok millert@
2013-01-18Use open(O_CLOEXEC) instead of a separate fcntl(FD_CLOEXEC) call.Philip Guenther
Nudged by David Hill
2012-06-20Correct English just like jsing@ did it in passwd/local_passwd.c rev. 1.38Ingo Schwarze
on April 27, 2008. While here, fix a typo and drop an obsolete BUGS section. "my typo so OK millert@ :-)" and OK jmc@
2012-06-19sync the descriptions of /etc/passwd;Jason McIntyre
issue spotted by f5b help/ok schwarze
2010-10-15Switch the remaining users of libdes in src to libcrypto,Jonathan Gray
telnet portion partially from the latest heimdal. ok mikeb@
2010-07-11bcrypt_gensalt is already declared in pwd.hDavid Hill
"sure" deraadt@
2009-10-28rcsid[] and sccsid[] and copyright[] are essentially unmaintained (andTheo de Raadt
unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms
2008-11-06-Wall -Wshadow clean, no binary changeDamien Miller
2008-07-04fix compilation for !YP case; ok millert@Damien Miller
2008-06-24implement getpwnam_r() and getpwuid_r() -- very nearly a rewrite of theTheo de Raadt
entire file. much help from kurt, and tested by many
2008-04-27Correct English.Joel Sing
ok jmc@
2008-01-02remove unused fileCharles Longeau
unused function initially spotted by tobias@, then I realized the whole file was unused. ok millert@ tobias@
2007-09-08Fix lint warning about unreachable code.Chad Loder
OK deraadt@
2007-08-14error out, instead of producing a warning and displaying that the YPAlexandre Anriot
password has changed, when the rpc.yppasswdd daemon is unreachable. ok deraadt@
2007-07-26Remove the space after "Password:" in password prompts where echo isTodd C. Miller
turned off. This is consistent with historic UNIX behavior.
2007-07-06dont inlucde <sys/syslimits.h> directly.Thordur I. Bjornsson
no binary change ok millert@
2007-05-31convert to new .Dd format;Jason McIntyre
2007-03-20remove some bogus *p tests from charles longeauTed Unangst
ok deraadt millert
2006-04-02oops, to64() is shared.Theo de Raadt
2006-04-02avoid lvalue cast by making local function be unsigned to begin withTheo de Raadt
2006-03-30minimal lint happiness, round 1Theo de Raadt
2006-01-22- drop privs before running krb5 codeBjorn Sandell
- avoid calling krb5_get_init_creds_password(3) with principal == NULL - try to change the kerberos password if there is a ticket file help from millert@, ok beck@
2005-12-18Indicate that the flags are exclusive, mention realm in the descriptionBjorn Sandell
for K and remove an error case for kerberos that doesn't apply nowdays. with jmc@
2005-12-12sync usage();Jason McIntyre
from david leonard (pr #4939);
2005-12-12- simplify synopsisJason McIntyre
- remove some .Bk/.Ek clutter - sort options list
2005-09-28pull in protos from rpcsvc/ypclnt.h; issue noted by leonardo@iken.com.brTheo de Raadt
2005-05-01spacingTheo de Raadt
2005-05-01knfTheo de Raadt
2005-05-01_yp_check() is a non-standard API. it leaves the domain bound, and theTheo de Raadt
fd use for that too. We are only using it to check if YP is alive, so, unbind YP right after... this removes the reserved port socket fd in the child..
2005-05-01run password strength checking regexes as user; ok deraadt@Damien Miller
2005-03-07simplify macro calls;Jason McIntyre