| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14623 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
kcmd.c. Use getnameinfo and sockaddr_storage more.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14572 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14567 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14257 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14256 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
setenv.c, v4rcp.c: Signed v.s unsigned int cleanup.
* defines.h: rcmd_stream_{read,write} take size_t as length argument.
* kcmd.c: Use GETSOCKNAME_ARG3_TYPE instead of assuming int. input
and output handler take size_t as length argument instead of
int. Other signed vs. unsigned fixes.
* configure.in: Add KRB5_GETSOCKNAME_ARGS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14050 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* configure.in: Creare a new variable KRSHDLIBS which differs from
LOGINLIBS by not including libkrb524.a. Test for getenv.
* krcp.c: Prototype lostconn().
* krlogind.c: Provide prototype for signal handler cleanup. Implied
need to add extra argument to function - ensure consistant
calling.
* krsh.c: Provide prototype for signal handler sendsig.
* krshd.c: Rewrite error() to use stdargs/varargs.
(doit): When creating a tty name using getpid. Ensure that does
not overflow tty string buffer.
* login.c: Provide prototype for signal handler timedout.
* setenv.c: Do not define getenv() unless needed.
* v4rcp.c: Rewrite error() to use stdargs/varargs. Add signal
number argument to lostconn(), include prototype, and ensure
called consistantly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13567 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
* configure.in: Test if prototype for daemon necessary.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13496 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
* krlogind.c (main): Change sin to sock_in.
* krshd.c: Change sin to sock_in to not shadow global. Change
some local variables to not shadow others.
2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13487 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
define NEED_SETENV as well as linking in local sources.
* defines.h: Include prototype for setenv() if NEED_SETENV defined.
* krlogin.c (prf): Declare as void. Used only with one argument -
get rid of pseudo-varargs behaviour.
* krlogind.c (recvauth): Include k5-util.h for
krb5_compat_recvauth_version() prototype. Declare sendoob() void.
* krshd.c: Include k5-util.h for krb5_compat_recvauth_version()
prototype.
* login.c: Include setenv prototype if NEED_SETENV defined. Cast
arguments to printf to match format string.
* v4rcp.c (source): Cast argument to sprintf() to match format string.
* krcp.c (rsource): Likewise.
* forward.c (rd_and_store_for_creds): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13334 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
conditionals. Include krb524.h if KRB4_CONVERT defined.
* krlogind.c (main): Cleanup unused variables.
(protocol): Cleanup ambiguous if-if-else warning.
* krshd.c (main): Cleanup unused variables.
* krlogin.c (setsignal): Declare as void.
(server_message): Cleanup unused variables.
* setenv.c (setenv): Declare as returning int and clean up
assignments in conditionals.
* kcmd.c (kcmd, rcmd_stream_init_krb5, v5_des_read): Clean up
unused variables and assignments in conditionals.
* forward.c (rd_and_store_for_creds): Likewise.
* krcp.c (rsource): Likewise.
* v4rcp.c (answer_auth): Likewise.
* krsh.c (main): Declare as retuning int.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13257 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
ptys, even if there is a TIOCPKT, since it may result in hangs on
some systems where BSD packet mode is (presumably) not implemented
properly, such as AIX 4.3.3. Should get cleaned up at some later
point to actually I_PUSH "pckt" or equivalent and do translation
between STREAMS and BSD style packet mode.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13245 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
rcmd_stream_init_krb4(), strsave() and rd_and_store_for_creds()
* Makefile.in: Add dependency of forward.o on defines.h
* forward.c: Include defines.h for prototypes.
* kcmd.c, krcp.c, krlogin.c, krlogind.c, krsh.c: Provide full prototype
for local functions and move include of kerberosIV/krb.h before
defines.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13077 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12883 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
* krlogind.c (recvauth): Don't complain about a subkey sent for KCMDV0.1 if
HEIMDAL_FRIENDLY is defined, just quietly ignore it.
* krshd.c (recvauth): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12646 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12470 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
* krlogind.c: Rework flags for hostname logging.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11220 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
options controlling hostname manipulation.
* krlogind.c: Make use of pty_make_sane_hostname() for purposes of
manipulating hostname to pass to login. Also unconditionally
syslog IP address and full hostname of remote host. Add command
line options to control such behavior.
* configure.in: Add arpa/nameser.h to CHECK_HEADERS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11176 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
not EOF.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10547 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
compatibility. [krb5-appl/483]
* krcp.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
* krlogin.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
* krlogind.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
* krsh.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
* krshd.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10472 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
bytes long, rather than 1024. Fixes an Irix bug. [krb5-appl/527]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10354 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
* krshd.c:
* login.c:
* v4rcp.c: Don't include netdb.h or sys/socket.h if krb.h is
included; this works around an Ultrix bug where those headers
aren't protected against multiple inclusion.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10331 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
rd_and_store_for_creds. [krb5-appl/502]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10301 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
[krb5-appl/488]
* krlogin.c (main): Fix up potential buffer overrun.
* krcp.c (hosteq): Fix up potential buffer overrun.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10267 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
operation. Use the "-f" flag to enable. This automagically
figures out which port to bind to if you don't specify it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10189 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
krlogin.c: Fixed 8bit flow control (Solaris)
krlogind.c: Whitespace cleanup
krshd.c: No need to set lport before calling getport(&lport)
Also, changed all occurrences of krb5_xfree to use something else.
[kcmd.c still needs one free() fixed when a routine exists to replace the
realm component]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9908 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
Implement krb5_free_data & krb5_free_data_contents to cleanup krb5_data
structures and data contents allocated by the krb5 library.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9904 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
of creating a new krb5 context for no good reason.
krshd.c (main):
krsh.c (main):
krlogind.c (main):
krlogin.c (main):
krcp.c(main): Check the error return from krb5_init_context(),
and print an error message if necessary.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9317 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
* Remove tab3 from initial terminal settings. We don't really care
about horizontal tab delays, do we? This was breaking on NetBSD.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9282 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
* Allow login.krb5 -f to authorize root login.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9135 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
and length as one packet, not with two calls to write.
This should also happen to rsh, rcp, and possibly telnet.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9020 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
* Fix so login.krb5 compiles with Athena Kerberos libs (needed
for rsaix build)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8540 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
Use the default service principal as the basis for the rcache name.
login.c:
SVR4 systems typically do not do mail/motd checks in login; they
do it in the profiles (/etc/profile). Follow that convention...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7951 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Provenzano and me:
* Makefile.in (install): Install correct set of man pages, and check for
failures.
* kshd.M, klogind.M: Renamed from kr*.M versions.
* login.M: New file. Man page for login with some description of new features.
* rlogin.M: Remove references to using program with target hostname as argv[0].
* rsh.M: Ditto. Also document -f, -F, -x options.
* login.c: Massive changes. Split much functionality out of main and into
separate file sections: terminal flag settings, Kerberos 4 and 5 support, UNIX
password support, mail check, signal handler handling, some other support
routines. Revamp controlling tty and process group handling. For AFS
configuration, use setpag and run aklog. Try validating password using krb5.
Always set tty flags, not just for rlogin session. When validating tickets,
treat an existing key file that doesn't contain the key we think we want
(possibly because DNS was spoofed) as an error condition.
* Makefile.in (LOGINLIBS): List libkrb524.a here.
(LIBOBJS): Not here.
(login.krb5): Reverse the order of LIBOBJS and LOGINLIBS.
* configure.in: Check for --with-afs. Add AFS libs and define SETPAG if
supplied.
* login.c (KRB5_GET_TICKETS, KRB4_GET_TICKETS, KRB_RUN_AKLOG): new macros
selecting single signon options. krb5.conf profile support for control over
authentication options, above the compile time selection.
(conf_affirmative): new function, recognize yes/no in profile value.
(login_get_kconf): new function, look for all [login] flags and set them in
appropriate globals (via login_conf_set array.)
(main, sleepexit, destroy_tickets): Check the new login_* flags.
(main): rename KRB4_USE_524 to KRB4_CONVERT.
* configure.in: Added checks for tcsetpgrp, tcgetpgrp, setpgid.
* krlogind.c (control): Use tcgetpgrp if it's available.
* loginpaths.h (RPATH, LPATH, LPATH_root): Define HP/UX 9.04 versions,
conditionalized on __hpux and !hpux.
* login.c and configure.in: instead of checking _IBMR2 and __sgi__, write
configure tests to check for the existence of /etc/environment and
/etc/TIMEZONE files, respectively.
* forward.c (rd_and_store_for_creds) : If chown fails then only pass failure
back if owner is different than intended owner. This is to make rsh.exp test
work without requiring root privlidges.
* login.c (main): Don't set TERM to an empty value.
(stypeof) [__hpux]: Return null if unknown.
* krlogin.c (catchild): remove hp/ux kludge because of aclocal.m4 fix.
(speeds): test __hpux for hpux speed list.
(main): test __hpux for use of FIOSSAIOSTAT and FIOSSAIOOWN
(USE_TERMIO): test __hpux for bsdtty/ptyio headers.
* krlogind.c: test __hpux for bsdtty/ptyio headers.
(doit): test __hpux for use of setpgrp2.
* krcp.c (main): test __hpux as well for remsh vs. rsh.
* krcp.c (des_write): Make sure the buffer for the encrypted data is large
enough. Only return an error in malloc fails.
* krsh.c (main): Always turn on anyport -A option.
* krlogind.c (ptsname): Declare if it's going to be used.
* krshd.c (main): Use basename of argv[0] for progname.
* login.c (dofork): On linux, TIOCNOTTY causes us to die on a SIGHUP, so don't
even try it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7881 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
from its name, because it doesn't any more. Same for kshd.
* Document and implement -i option to ignore checksums. Restore
default mode to accept and process checksums if provided.
* Bring back the warning about only using -c with Kerberos5. The
documentation (both install.texi and the man pages) clearly state that
the -c option shouldnot be used in conjunction with Kerberos4, so warn
users if they try.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7849 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7845 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
with vendor logins and packet mode on systems that don't
support it.
Also, clean up spaces in Makefile.in, replacing with tabs.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7844 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
longer necessary.
krcp.c (verifydir, allocbuf, rsource, source, sink): Don't use
sys_errlist[]; just call error_message() instead, since we depend on
com_err anyway.
krshd.c (recvauth):
krlogind.c (recvauth): Don't actually check the checksum unless it is
required. Old (pre-beta 5) clients sent a checksum of random garbage
(such as their pid) which is impossible to actually check on the
server side. (Grad student stupidity strikes again.)
(fatalperror): Don't use sys_errlist[] to get the right error
message; just depend on com_err instead, since we're using it anyway.
krshd.c (doit):
krlogind.c (do_krb_login): Fix logic so that if checksums are
required, and the checksum is valid, don't syslog the stupid warning
message about "Checksums are only required for v5 clients...."
krcp.c, krshd.c, krlogind.c: Miscellaneous -Wall cleanups
krlogind.c (getpty): Removed dead code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7823 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7817 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
as libpty deals.
Use setsid() instead of setpgrp() in krshd
if possible.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7812 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
an unusual location, so they are not likely to be reused by other sessions.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7810 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
* krlogind.c, krshd.c: Allow the recvauth routine to find any key
in the keytab for which the user is trying to login. The host may
be known as many names. Additionally, for krlogind, clean up the
error handling for bad authentication (potential null dereference
and a misleading message because of the wrong authentication system
being used)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7791 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
zero bytes are returned. Since we are using blocking
read calls, and the net_read function deals with
interrupted/resumed reads, consider zero bytes to be
be a terminated connection, so as not to spin.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7749 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7698 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
Also, import the ops changes to do with enable-athena.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7545 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
v5 authenticator checksums when v4 is being used.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7466 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
cleaner.
* forward.c: give caller handle to ccache so it can be destroyed.
* krshd: destroy the ccache if it is non-null.
* krlogind: Fix call, but don't destroy cache, as
login.krb5 should do that any year now.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7422 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
cannot be replayed against unencrypted connections.
* Updated checksumming in kshd to be compatible with klogind so they
use the same client code. CVS:
* Fixed Makefile to install kshd and klogind not kr*d
* Updated option process in krlogind and kshd per messages to c.p.k.
----------------------------------------------------------------------
automatically CVS: CVS: Committing in . CVS: CVS: Modified Files:
----------------------------------------------------------------------
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7372 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
* Fix utmp handling on Solaris for wtmpx records
* Replace krlogin's SIGURG handler with a call to select squashing Solaris ctrl-c bug
* Fix utmp on systems without pututline so ttyslot is only used when it works
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7338 dc483132-0cff-0310-8789-dd5450dbe970
|