summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
1999-02-19Be a little more verbose about dodgy looking authenticationbrian
packets before dropping them in the bit-bucket.
1999-02-18Build correctly when -DNOCRYPT is used.brian
1999-02-18Don't expect a chap response if we haven't negotiatedbrian
chap 0x80.
1999-02-18Fully support both NT and LANMan CHAP type 0x80 as bothbrian
authenticator and authenticatee.
1999-02-17Nuke any remaining auth timers when datalinks come back downbrian
to DATALINK_LCP.
1999-02-17re-enable the bind() for non-superusers so normal users cannot set the ↵Todd C. Miller
source address to be a non-local address
1999-02-16handle sa_len being 0 in SIOCGIFCONFTheo de Raadt
1999-02-16indentTheo de Raadt
1999-02-16Wait by default for one second after the login scriptbrian
is complete before checking carrier. If it's there, the device supports carrier. If it's not it doesn't. Add the ``set cd'' command for deciding how soon to check for carrier, and for deciding if carrier is REQUIRED. The default has changed: Pre 2.0 versions of ppp waited for 1 second. Version 2 didn't wait, but this causes problems with some (few?) modems that don't assert carrier immediately on reporting CONNECT. The one second delay is back now and can be removed with ``set cd 0''. Bump the ppp version number in case this needs to be changed again....
1999-02-15fix building without make dependArtur Grabowski
1999-02-14Describe manual dialing in greater detail.brian
Mention more rfc numbers. Don't ``.Nm Ppp'' (just use ``.Nm'').
1999-02-12do not go past end of packet; abs@netbsdTheo de Raadt
1999-02-12When executing a command as part of a dial/login/hangupbrian
script, expand words in the same way as !bg does.
1999-02-11ship lease time in network order; cas@trans-nt.comTheo de Raadt
1999-02-11tweakTheo de Raadt
1999-02-11print ppp; from isdn4bsd package by Hellmuth Michaellis <mh@hcs.de>Michael Shalayeff
1999-02-11When resending chap challenges, resend the same challengebrian
each time rather than making up a new one. Increase the authname/authkey max sizes to 100 characters. Allow ``authkey'' specifications beginning with ``!''. When a challenge is received, the text following the ``!'' is executed as a program (expanding stuff in the same way that ``sh'' and ``!bg'' do). The program is passed the peer name, peer challenge and local ``authname'' on standard input and is expected to output the name/key combination that should be used to build the CHAP response. This provides support for Secure ID cards (guess what I was given at work recently!) using CHAP. Examples will follow.
1999-02-10Xr repairsTheo de Raadt
1999-02-07Correct server-side chap authentication comparisonbrian
(broken with last commit).
1999-02-07Remove forgotten diagnosticsbrian
1999-02-06Support RADIUSbrian
While I'm in there, validate pap & chap header IDs if ``idcheck'' is enabled (the default) for other FSM packet types. NOTE: This involved integrating the generation of chap challenges and the validation of chap responses (and commenting what's going on in those routines). I currently have no way of testing ppps ability to respond to M$Chap CHALLENGEs correctly, so if someone could do the honours, it'd be much appreciated (it *looks* ok!). Sponsored by: Internet Business Solutions Ltd., Switzerland
1999-02-05sendmail 8.9.3Todd C. Miller
1999-02-05ipf 3.2.10; work by kjellTheo de Raadt
1999-02-04allow higher uids.Niels Provos
1999-02-04Change the timer routines so that they interrupt when the nextbrian
item is scheduled rather than interrupting 10 times per second and finding that there's nothing to do most of the time. This change reduces interrupt overheads but will expose any (previously small) latency problems. Be more careful about building VJ compression requests - we can't htonl/ntohl the entire four bytes ! Also, when we get a NAK, try to get as close as possible to what the peer NAKs with when sending our next REQ. Similarily when we send a NAK, pick values as close as possible to what the peer REQd. Fix a couple of man page typos (compliments of billf@FreeBSD.org)
1999-02-04Use ether_ntoa() instead of doing the equivalent by handTodd C. Miller
1999-02-03Add more debugging info via -d; m4@umn.eduTodd C. Miller
1999-02-03The necessary defs are in paths.h now.Angelos D. Keromytis
1999-02-02Don't allow root to specify non-existent labels onbrian
the command line. Revise the error diagnostics so that invalid labels are reported immediately.
1999-02-02Reimplement the previous fix (no response to PAP requests)brian
at the authentication layer rather than at the PAP layer so that it also applies to CHAP (no response to CHAP challenges).
1999-02-01Hmmm... why not fixed before?Per Fogelstrom
1999-02-01If we receive no answer from the server when sending PAPbrian
requests, give up (don't sit there indefinitely).
1999-01-31Mention the error when we fail to connect().brian
1999-01-25Don't SEGV when ``set proctitle'' is used in the defaultbrian
section. Submitted by: Dan Lukes <dan@obluda.cz>
1999-01-24-q was not in usage()Bruno Rohee
1999-01-21official fix for sendmail header length DoSTodd C. Miller
1999-01-21this was missed in the 8.9.2 updateTodd C. Miller
1999-01-20Recurse when we've switched state via LoginDone(). If we'vebrian
got an open link, we want it to be select()d on - otherwise we get a freeze when ``openmode'' is passive.
1999-01-19Change the maximum number of filters from 20 to 40.brian
Increase requested by: "Clement T. Cole" <clemc@echo.ccc.com>
1999-01-19Suggest that ``set proctitle'' is used in ppp.linkup whenbrian
USER is expected to be expanded.
1999-01-19Send the peer-decided PSTN address with the CBCP Ack,brian
otherwise windows clients will keep resending the response :-/ It'd be nice if M$ would document this sort of thing ! Problem reported by: Andrzej Tobola <san@tmp.iem.pw.edu.pl>
1999-01-19Avoid a DoS caused by messages containing a huge number of mail header ↵Todd C. Miller
lines; lcamtuf@IDS.PL
1999-01-19Retry sane probe ordering, i.e. ordered like the attachmentsNiklas Hallqvist
found in the various config files.
1999-01-18add 'old' as a synonym for 'des'Todd C. Miller
1999-01-16Fix PR# 692. evanc@concer.toTobias Weingartner
1999-01-13If we've configured CBCP *and* another not-so-importantbrian
CALLBACK protocol and end up agreeing CBCP, DTRT and go into CBCP phase rather than mistakenly terminating as if CBCP wasn't agreed. Problem reported by: Alexander Dubinin <alex@nstl.nnov.ru>
1999-01-11Correct some formatting errors (one is a groff bug)brian
Noted & partially submitted by: Peter Jeremy <peter.jeremy@auss2.alcatel.com.au>
1999-01-10Only call isatty() when we open our descriptor, and rememberbrian
the answer. If we later get a descriptor exception from select(), we know that it's a tty (isatty() returns 0 after the exception on a tty) and remember to call modem_LogicalClose(). The upshot of it all is that descriptor exceptions dont leave the tty locked any more.
1999-01-10If we can't open alias.log, don't try to write to thebrian
resulting NULL FILE *.
1999-01-08Don't use the next phone number after the ``|'' if thebrian
dial & login are successful. Submitted by: Toshiomi Moriki <Toshiomi.Moriki@ma1.seikyou.ne.jp>
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-01 03:46:55 +0000