summaryrefslogtreecommitdiffstats
path: root/src/appl
Commit message (Collapse)AuthorAgeFilesLines
...
* * login.c (login_get_kconf): Also test whether *kconf_val is nullGeoffrey King1998-11-162-1/+8
| | | | | | | | rather than just kconf_val before passing *kconf_val to conf_affirmative (where strcasecmp will choke on it if it is in fact null). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11039 dc483132-0cff-0310-8789-dd5450dbe970
* Fix broken thisconfdir and mydir lines in Makefile.in's. Forgot toTheodore Tso1998-11-138-16/+16
| | | | | | adjust them after consildating the configure.in scripts. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11034 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Set the myfulldir and mydir variables (which are relativeTheodore Tso1998-11-132-0/+7
| | | | | | to buildtop and thisconfigdir, respectively.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11033 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Set the myfulldir and mydir variables (which are relativeTheodore Tso1998-11-133-2/+39
| | | | | | | | | | | | to buildtop and thisconfigdir, respectively.) Add a MY_SUBDIRS definition to control the directories which are recursively descended by the Makefile. configure.in: Fold the autoconf tests from the sample, simple, gss-sample, and user_user directories into this higher-level configure.in file. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11032 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Set the myfulldir and mydir variables (which are relativeTheodore Tso1998-11-138-0/+42
| | | | | | | | to buildtop and thisconfigdir, respectively.) Add a MY_SUBDIRS macro set to '.' to indicate that there are no subdirectories to be processed by the Makefile. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11031 dc483132-0cff-0310-8789-dd5450dbe970
* configure.in: Removed and tests moved up to appl/configure.inTheodore Tso1998-11-1312-38/+48
| | | | | | | | | Makefile.in: Set the myfulldir and mydir variables (which are relative to buildtop and thisconfigdir, respectively.) Add a MY_SUBDIRS macro set to '.' to indicate that there are no subdirectories to be processed by the Makefile. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11030 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Set the myfulldir and mydir variables (which are relativeTheodore Tso1998-11-1314-0/+49
| | | | | | to buildtop and thisconfigdir, respectively.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11029 dc483132-0cff-0310-8789-dd5450dbe970
* pull up 3des implementation from the marc-3des branchMarc Horowitz1998-10-3015-1427/+1875
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970
* Add -A (require authentication but not necessarily authorization) andDan Winship1998-10-265-160/+381
| | | | | | | | | | -C (user wants local credentials) flags to ftpd. If -C is set, write out forwarded credentials to disk and use krb524 to get krb4 tickets as well. If user doesn't forward credentials, require a password even if auth was successful and use that to get credentials. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10993 dc483132-0cff-0310-8789-dd5450dbe970
* * ftp.M: Add documentation for new ccc and cprotect commands.Geoffrey King1998-10-263-23/+77
| | | | | | | | | | Also, add previously omitted command line options -u and -t and "passive" command to the man page. * main.c (main): Print out a usage message instead of just "unknown option." git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10992 dc483132-0cff-0310-8789-dd5450dbe970
* ftpd.c (pass): Wait 5 seconds before returning "passwordTheodore Tso1998-10-243-10/+36
| | | | | | | | | | | | incorrect", and only allow three bad passwords. Then return an 421 reply code before closing the connection and going away. ftpcmd.y (cmd): Don't allow the PORT command to accept a port number lower than 1024; this prevents some nasty ftp "bounce attacks" to SMTP ports, etc. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10990 dc483132-0cff-0310-8789-dd5450dbe970
* update ftpd man page to fully match reality (-a, -c, -u, CCC)Dan Winship1998-10-202-6/+24
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10973 dc483132-0cff-0310-8789-dd5450dbe970
* * telnet.c (telnet): Cosmetic change: Put a newline after "WaitingGeoffrey King1998-10-102-1/+8
| | | | | | | | for encryption to be negotiated..." so that the response "[ Kerberos V5 accepts you as ``gjking@ATHENA.MIT.EDU'' ]" doesn't run off the end of the line. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10972 dc483132-0cff-0310-8789-dd5450dbe970
* krshd.c (doit): Apply ghudson's patch so that rshd passes the portTheodore Tso1998-10-083-4/+30
| | | | | | | | | | | | numbers for the local and foreign addresses so that the V4 encrypted RCP will work correctly. [krb5-appl/638] v4rcp.c (answer_auth): Apply ghudson's patch so that if KRB5LOCALPORT and KRB5REMOTEPORT are set, use them to set the foreign and local ports so that encrypted rcp for the same machine. [krb5-appl/638] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10971 dc483132-0cff-0310-8789-dd5450dbe970
* * ftpd.c: Add support for restricted users, as requested inGeoffrey King1998-10-082-16/+59
| | | | | | | | [krb5-appl/481]. Users that appear in /etc/ftpusers, followed by the keyword "restrict" will be granted access, but a chroot() will be done to their home directory. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10970 dc483132-0cff-0310-8789-dd5450dbe970
* cmdtab.c: Update help message for passive mode so that itTheodore Tso1998-10-023-2/+9
| | | | | | | | indicates that the "passive" command toggles passive mode. main.c (main): Make passive mode off by default. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10956 dc483132-0cff-0310-8789-dd5450dbe970
* Don't use h_errno, it's not fully portable, and it's not worth itTheodore Tso1998-09-292-2/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10949 dc483132-0cff-0310-8789-dd5450dbe970
* Don't use h_errno at all; it doesn't work on all platforms (forTheodore Tso1998-09-292-6/+8
| | | | | | | example HPUX), and it's just not worth the effort to disambiguate between the different reasons why gethostbyname() might have failed. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10948 dc483132-0cff-0310-8789-dd5450dbe970
* Of course, the following sentence actually refers to the login function,Geoffrey King1998-08-291-4/+3
| | | | | | | | | | | not the pass function: Don't reply 230 "User logged in" if the user didn't send a PASS command; this causes the client to get a bit confused. ChangeLog: git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10900 dc483132-0cff-0310-8789-dd5450dbe970
* * ftpd.c (login): New function. Essentially, the old passGeoffrey King1998-08-292-21/+74
| | | | | | | | | | | | | | | | | | | function has been split into its two logical components, pass and login. (pass): If auth_ok is true, reply with code 202 to tell the user that a PASS command is not necessary. Also, don't reply 230 "User logged in" if the user didn't send a PASS command; this causes the client to get a bit confused. (auth_ok): New function that returns true if either gss_ok or kerb_ok is true (all the #ifdefs were beginning to clutter things, and it's a good abstraction in case other auth types are ever added in the future). (user): If GSSAPI or Kerberos v4 authentication succeeds, call login immediately, instead of waiting for the client to send "PASS dummy." Also, use #ifdef PARANOID instead of "some paranoid sites may wish to uncomment this" git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10899 dc483132-0cff-0310-8789-dd5450dbe970
* * cmds.c (user): Replace "oldlevel" with the more descriptiveGeoffrey King1998-08-283-6/+25
| | | | | | | | | | "oldclevel". Also, replace all occurrences of "dlevel" in this function with "clevel". * ftp.c (login): Test whether or not the server actually requires "PASS dummy" by first sending "PWD" and checking the return value. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10898 dc483132-0cff-0310-8789-dd5450dbe970
* Add optional support for the CCC (Clear Command Channel) command.Geoffrey King1998-08-193-14/+55
| | | | | | | | | | | | | | | | | | | This command is dangerous, since it allows commands to be transmitted without integrity checking, so the default behavior without the -c option is still for the server to refuse to accept unprotected commands. * ftpd.c: Add a new command line option, -c, which tells the server to accept the CCC command. * ftpcmd.y: If the -c option was given, check to make sure the CCC command itself was integrity protected, and then set ccc_ok to allow future commands to be transmitted as cleartext. (getline): Now that CCC is potentially allowed, we must check to see if we are parsing an unprotected command even if a security context is established (i.e. auth_type is set). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10846 dc483132-0cff-0310-8789-dd5450dbe970
* main.c (main): Declare dst_realm_sz as extern int instead of externGeoffrey King1998-08-172-1/+10
| | | | | | | | char, to agree with its definition in libtelnet/kerberos.c. This was causing dst_realm_sz to be zero unexpectedly, and so strncpy was not copying the -k realm argument into dest_realm. [krb5-appl/616] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10837 dc483132-0cff-0310-8789-dd5450dbe970
* * krcp.c (error): Don't call rcmd_stream_write if iamremote is notGeoffrey King1998-08-152-10/+9
| | | | | | | set, because it expects a valid file descriptor [krb5-appl/359]. Also, remove mistakenly duplicated comment above the function. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10826 dc483132-0cff-0310-8789-dd5450dbe970
* * ftpcmd.y, ftpd.c: Replace global variable level with clevel andGeoffrey King1998-08-123-21/+30
| | | | | | | dlevel to allow independence of command and data channel protection levels. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10805 dc483132-0cff-0310-8789-dd5450dbe970
* * ftp.c, cmds.c, cmdtab.c, main.c, secure.c, ftp_var.h: ReplaceGeoffrey King1998-08-127-69/+166
| | | | | | | | | | | | | | | global variable level with separate variables clevel and dlevel for the control channel and data channel protection levels, respectively, so that the user may specify separate protection levels for each channel. Similarly, functions such as getlevel and setlevel are now getclevel/getdlevel, and setclevel/setdlevel. * cmdtab.c: Add new FTP commands "cprotect" to allow the user to set the control channel protection level (similar to "protect"), and "ccc" (Clear Command Channel) which sets the control channel protection level to clear (per the RFC). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10804 dc483132-0cff-0310-8789-dd5450dbe970
* Wed Aug 12 00:17:09 1998 Matthew D Hancher <mdh@mit.edu>Matthew Hancher1998-08-122-1/+7
| | | | | | | | * Makefile.in (AUTH_DEF): Undefine LOGIN_CAP_F so that telnetd runs login with -f rather than -F for preauthenticated login, following the changes in appl/bsd/. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10803 dc483132-0cff-0310-8789-dd5450dbe970
* Tue Aug 11 04:30:59 1998 Matthew D Hancher <mdh@mit.edu>Matthew Hancher1998-08-112-7/+55
| | | | | | | | * ftpd.c: Add support for extended logging as per PR#481. Using the 'l' command line option twice now logs the major file commands, and using it thrice logs bytecounts for RETR and STOR as well. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10801 dc483132-0cff-0310-8789-dd5450dbe970
* Fri Aug 7 00:56:30 1998 Matthew D Hancher <mdh@mit.edu>Matthew Hancher1998-08-082-6/+9
| | | | | | | * ftpcmd.y: Replace old KERBEROS #ifdef's with KRB5_KRB4_COMPAT so that K4 compatibility support actually gets compiled in. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10792 dc483132-0cff-0310-8789-dd5450dbe970
* Forgot to check in the ChangeLog. :)Matthew Hancher1998-08-081-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10791 dc483132-0cff-0310-8789-dd5450dbe970
* Fri Aug 7 22:39:47 1998 Matthew D Hancher <mdh@mit.edu>Matthew Hancher1998-08-081-2/+2
| | | | | | | * ftp.c (do_auth): Make verbosity not disappear if GSSAPI fails. (getreply): Move 'S:' and 'P:' from verbose to debug. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10790 dc483132-0cff-0310-8789-dd5450dbe970
* * ftp.c (getreply): Restore proper setting of safe. This variableTom Yu1998-08-072-1/+9
| | | | | | | | | was previously being set to the value of code rather than to the boolean expression (code == 631), which it had been previously. The bug resulted in all replies from the server being parsed as krb_safe messages even when they were krb_priv messages. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10788 dc483132-0cff-0310-8789-dd5450dbe970
* Fri Aug 7 00:56:30 1998 Matthew D Hancher <mdh@mit.edu>Matthew Hancher1998-08-072-15/+38
| | | | | | | | | | * ftpd.c: (pass): Make daemon not lose for homedirs on root-squashing filesystems. (auth_data): Fix that godawful "error: No error" message when gss_acquire_cred() fails. (user): Fix getusershell() code so it works more than once. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10785 dc483132-0cff-0310-8789-dd5450dbe970
* Apply ghudson's patch so that rlogin -a no longer dumps core.Geoffrey King1998-07-272-4/+9
| | | | | | [krb5-appl/612] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10750 dc483132-0cff-0310-8789-dd5450dbe970
* Preliminary fixes for AIX4.3:Sam Hartman1998-07-124-2/+10
| | | | | | | | | | | * Fix static libs on platforms using .a for shared libs * Fix utmp handling for non-hpux platforms with ut_exit different from utmpx. * Include librarymacros in ss configure.in * Remove declarations of h_errno git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10632 dc483132-0cff-0310-8789-dd5450dbe970
* logwtmp.c: Include paths.h if present, and use _PATH_WTMP to determineTheodore Tso1998-05-272-1/+14
| | | | | | WTMPFILE. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10594 dc483132-0cff-0310-8789-dd5450dbe970
* configure.in: Add check for paths.hTheodore Tso1998-05-272-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10593 dc483132-0cff-0310-8789-dd5450dbe970
* sys_term.c: #include utmp.h if present, and use _PATH_WTMP andTheodore Tso1998-05-273-2/+23
| | | | | | | | | _PATH_UTMP if defined to determine location of the wtmp and utmp files. configure.in: Add check for utmp.h git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10592 dc483132-0cff-0310-8789-dd5450dbe970
* login.c (dolastlog): BSD 4.4 systems don't have lastlog.h, but stillTheodore Tso1998-05-275-8/+55
| | | | | | | | | | | | | | | | | | define struct lastlog somewhere. Included from Dima Ruban's FreeBSD patches. krlogin.c: Include sys/ioctl_compat.h if it is present (instead of just for 386BSD). loginpaths.h (LPATH): If the OS provides _PATH_DEFPATH, use it to define LPATH and RPATH. login.c: #include paths.h if present, and use it to set the pathnames for certain common files. configure.in (withval): Check for <sys/ioctl_compat.h> and <paths.h> git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10586 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Re-order check for setupterm to avoid lossage ifTom Yu1998-05-262-1/+6
| | | | | | setupterm is defined in libtermcap or libcurses. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10584 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c: Replace strcpy with strncpy in places. Add nulTom Yu1998-05-162-12/+31
| | | | | | termination to some existing invocations of strncpy. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10572 dc483132-0cff-0310-8789-dd5450dbe970
* telnetd.c (main):Theodore Tso1998-05-146-27/+37
| | | | | | | | | | | | | | | | | | | | | | telnetd-ktd.c (main): POSIX states that getopt returns -1 when it is done parsing options, not EOF. configure.in: Rename HAS_* to HAVE_* for the following tests: sac.h, sys/ptyvar.h, sys/filio.h, sys/stream.h, gettosbyname(), and make appropriate adjustments in the rest of the .c files. Remove tests which aren't being used anymore: vhangup, utmpx.h, utmp.h, etc. defs.h: Use HAVE_SYS_FILIO_H instead of FILIO_H sys_term.c: Use HAVE_SAC_H and HAVE_SYS_STREAM_H instead of HAS_SAC and STREAMS. telnetd.c, telnetd-ktd.c: Use HAVE_GETTOSBYNAME instead of HAS_GETTOS telnetd.c: Use HAVE_SYS_PTYVAR_H instead of HAS_PTYVAR. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10571 dc483132-0cff-0310-8789-dd5450dbe970
* main.c (main): POSIX states that getopt returns -1 when it is doneTheodore Tso1998-05-146-14/+20
| | | | | | | | | | | | | | parsing options, not EOF. configure.in: Use standard autoconf test names. Change tests to define standard autoconf CPP macro names, not the non-standard HAS_GETTOS, etc. main.c, commands.c: Use HAVE_GETTOSBYNAME instead of HAS_GETTOS ring.c, externs.h: Use HAVE_SYS_FILIO_H instead of FILIO_H git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10570 dc483132-0cff-0310-8789-dd5450dbe970
* configure.in: Change test for cgetent to use HAVE_ instead of HAS_,Theodore Tso1998-05-144-6/+15
| | | | | | | | | | and add a test for gettosbyname(). getent.c: Use HAVE_CGETENT instead of HAS_CGETENT parsetos.c: Use HAVE_GETTOSBYNAME instead of HAS_GETTOS git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10569 dc483132-0cff-0310-8789-dd5450dbe970
* ftpcmd.y (cmd): Fix Y2K problem in the MDTM commandTheodore Tso1998-05-082-3/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10554 dc483132-0cff-0310-8789-dd5450dbe970
* Add a check for the header file krb4-proto.h. Replace file existenceTheodore Tso1998-05-062-37/+6
| | | | | | tests for /etc/environment and /etc/TIMEZONE with K5_AC_CHECK_FILES. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10553 dc483132-0cff-0310-8789-dd5450dbe970
* POSIX states that getopt returns -1 when it is done parsing options,Theodore Tso1998-05-068-6/+26
| | | | | | not EOF. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10550 dc483132-0cff-0310-8789-dd5450dbe970
* POSIX states that getopt returns -1 when it is done parsing options,Theodore Tso1998-05-062-1/+6
| | | | | | not EOF. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10548 dc483132-0cff-0310-8789-dd5450dbe970
* POSIX states that getopt returns -1 when it is done parsing options,Theodore Tso1998-05-064-3/+10
| | | | | | not EOF. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10547 dc483132-0cff-0310-8789-dd5450dbe970
* Fix -n so that it doesn't disable authentication but does disable login. [38]Sam Hartman1998-04-254-2/+27
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10543 dc483132-0cff-0310-8789-dd5450dbe970
generated by cgit (git 2.34.1) at 2025-09-28 01:08:07 +0000