summaryrefslogtreecommitdiff
path: root/usr.bin/skeyinit
AgeCommit message (Collapse)Author
2005-08-03improve description of -a and -s a little;Jason McIntyre
2005-07-14add skey(5) to SEE ALSO;Jason McIntyre
2005-07-06- tidy up SYNOPSISJason McIntyre
- sort options - sync usage() - more minor tweaks
2004-12-27spacingTheo de Raadt
2004-09-14delete unused functionTheo de Raadt
2004-06-07Allow -a to specify an alternative auth method, even if secure modeOtto Moerbeek
is used. Only bail out if the user has no skey entry and requests secure mode without specifying an alternative auth method. ok hshoexer@ millert@
2004-06-07Use -a skey to use S/Key for initial authentication in normal mode.Otto Moerbeek
ok hshoexer@ millert@
2004-06-06- skeyprune is section 8, not 1Jason McIntyre
- kill whitespace - -offset for display
2004-06-06First sequence number should be 100, as promised by man page.Otto Moerbeek
ok hshoexer@ millert@
2004-06-06Explain the the usage of the first key printed by skeyinit; addOtto Moerbeek
example and .Xr's. ok hshoexer@ millert@
2004-06-04Consistently use "secret passphrase" for the passphrase made up by the userOtto Moerbeek
and "one-time password" for the generated passwords. ok jmc@ millert@
2003-11-26multi-line literals are not ANSI C. And gcc3 complains about them.Marc Espie
2003-06-10- section reorderJason McIntyre
- COMPATIBILITY merge - macro cleanup - kill whitespace at EOL - new sentence, new line ssh pages ok markus@
2003-05-07bounds were sizeof(pointer) rather than size of the object; found withTheo de Raadt
anil's gcc bounds checker mod
2003-04-07replace strcpy calls that got inlined by gcc; ↵Theo de Raadt
Hans-Joerg.Hoexer@yerbouti.franken.de
2003-04-06strlcpy; ok millertTheo de Raadt
2002-12-09Correct typo. 'accessable' -> 'accessible'Chad Loder
2002-11-16Give a sensible error message when a user who has no entry in /etc/skeyTodd C. Miller
specifies the -s flag. Also improve the error message when S/Key is disabled.
2002-06-23uid_t and gid_t are unsignedTheo de Raadt
2002-06-07The code to append the last 5 digits of the time in Unix format toTodd C. Miller
the default seed was lost in the flat file -> directory structure conversion. Instead of reinstating that, use arc4random() to get some noise and append the last 5 digits to the seed.
2002-06-07Instead of passing seed and defaultseed to normal_mode() andTodd C. Miller
secure_mode() just pass in a single default seed. Only secure_mode() needs to actually change the seed and it can use its own temporary buffer. Fix zeroing of the secrete passphrase. Instead of useing multiple password buffers, crunch the key each time and compare the crunched values.
2002-06-06Zero out memory filled in by readpassphrase(3). Also fix a spelling error;Aaron Campbell
markus@ ok.
2002-05-19 o Fix some fallout from argv handling changes.Todd C. Miller
o Use ANSI function headers o When creating a new user record cope with the fact that there may be an existing zero-length userrecord. o Replace -z with -r in usage()
2002-05-17Replace -z option (zero) with -r option (remove).Todd C. Miller
2002-05-17Call enable_db() from convert_db() so the dir creation as well asTodd C. Miller
mode/user/group setting is done in one place.
2002-05-16Add missing chown(2) call.Todd C. Miller
2002-05-16Xr skeyinfo(1)Todd C. Miller
2002-05-16Change S/Key stuff from using a flat file (/etc/skeykeys) to a directoryTodd C. Miller
where each user gets their own file, which is owned by that user. An old S/Key database may be converted by running "skeyinit -C" as root. Programs that need to access the S/Key database no longer need to be setuid root. They must now be setgid auth instead.
2002-02-16Part one of userland __P removal. Done with a simple regexp with some minor ↵Todd C. Miller
hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.
2001-11-01printf() format string fix.Miod Vallat
2001-06-23skeyzero() now takes 1 argTodd C. Miller
2001-06-20o When converting from a different hash type, if there is room on the lineTodd C. Miller
we don't need to comment out the existing entry since the key almost never takes up as much room as is allocated for it. o Do per-record locking (and timeout) now that libskey does. o Rearrange the code into functions. o Use readpassphrase()
2001-01-26It is pronounced S/KeyTodd C. Miller
2001-01-26Fix stupid bug in last commit that caused the hostname not toTodd C. Miller
be used as part of the seed for first time users.
2000-11-16When building default seed from the hostname, only use alphanumericTodd C. Miller
characters and make things lower case. Also sanity check the existing seed in skeykeys since we can't be sure it is completely sane. Problem noted by wozz@wookie.net
2000-11-09Change all option list specifications to ".Bl -tag -width Ds". Most manAaron Campbell
pages just needed their -width parameter tweaked to "Ds", which provides a nice width of 6 constant characters. For consistency more than anything.
2000-07-06Insert more missing .El directives. Our troff really should identify these andAaron Campbell
spit out a warning.
2000-03-23More pedantic man page formatting insanity, lalalaAaron Campbell
2000-03-23Fix some formatting problems I missed before.Aaron Campbell
1999-09-10Don't unlock the skeykeys file before the fclose since stdio may still have ↵Todd C. Miller
some data buffered. Closing the file is enough to unlock it.
1999-08-17missing flags in SYNOPSISTodd C. Miller
1999-03-02do not crash if -n has no arg; spotted by weingartTheo de Raadt
1998-11-04be really pedantic about punctuation following -mdoc macro'd textAaron Campbell
1998-09-27english -> EnglishAaron Campbell
1998-09-27usr.bin/ man page cleanups, n-sAaron Campbell
1998-08-22Changed warning message from "... keyinit -s" to "... skeyinit -s".dgregor
1998-07-09say "s/key disabled" if skeykeys file does not exist. I thought I committed ↵Todd C. Miller
this ages ago.
1998-02-24Allow superuser to disable skey by unlnking /etc/skeykeys.Todd C. Miller
1997-09-21$OpenBSD$Theo de Raadt
1997-07-27- Do coarse locking on /etc/skeykeys so we don't clobberTodd C. Miller
an entry that is being updated.