Home | History | Annotate | Download | only in login
History log of /src/usr.bin/login/k5login.c
RevisionDateAuthorComments
 1.33  24-Apr-2012  christos no more KRB5_DEPRECATED
 1.32  24-Apr-2012  christos last commit before I nuke the old code.
 1.31  24-Apr-2012  christos move more of the compat code in the compat block.
 1.30  23-Apr-2012  christos make kerberos work again:
1. make notickets external
2. don't use the tty as part of the credential cache, since pts/1 will not work.
3. Attempt to use the newer functions, but punt for now since it does not work yet.
 1.29  23-Apr-2012  christos centralize error function processing.
 1.28  22-Apr-2012  christos make krb5 compile again. XXX: one function left that is deprecated, what's
the new equivalent?
 1.27  23-Mar-2006  wiz branches: 1.27.44; 1.27.46;
Get rid of more Kerberos 4 code.
 1.26  20-Jan-2005  xtraeme Kill __P(), ANSIfy, remove main() prototype, whitespace; WARNS=2
 1.25  22-Dec-2004  lha Only include Kerberos 4 headers when compiling in a Kerberos enviroment

From Jukka Salmi in NetBSD PR misc/28727
 1.24  07-Aug-2003  agc Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.
 1.23  15-May-2003  itojun simplify by asprintf/strdup
 1.22  20-Feb-2002  joda when creating a v4 ticket file, name it after the users uid, not our
current (should finally fix bin/13040)
 1.21  17-Sep-2001  assar update infrastructure for krb4 1.1 and heimdal 0.4e
 1.20  10-Sep-2001  assar implement 5to4 (getting v4 tickets from the v5 ones)
from the patch in bin/13040 by lha@stacken.kth.se (slightly modified)
 1.19  19-Jan-2001  pk * Use krb5_warn() instead of non-functional com_err().
* knf patrol
* De-__P()
 1.18  10-Jan-2001  lukem don't need to specify facility LOG_AUTH as it's the default
 1.17  05-Dec-2000  wiz Don't strcpy the contents of an environment variable into a fixed-size
buffer, use strlcpy instead. Should fix security/11550.
 1.16  28-Oct-2000  aidan Replace all calls to 'error_message()' with 'krb5_get_err_text()', since
error_message() does not seem to display meaningful information, under
Heimdal.
 1.15  01-Sep-2000  aidan Check retrieved TGT against local keytab, if it exists.
 1.14  09-Aug-2000  thorpej krb5_get_in_tkt() (called by krb5_get_in_tkt_with_password()) may
eventually call krb5_free_principal() via krb5_free_creds_contents(),
(when it succeeds, in particular). Check for the creds.server
already being freed, and don't free it again.
 1.13  02-Aug-2000  thorpej If neither Kerberos IV or Kerberos V are configured, don't
issue "Warning: no Kerberos tickets issued."
 1.12  30-May-2000  aidan branches: 1.12.2;
Allow krb5 and krb4 to be compiled in to the same login binary at once,
krb5 can request a forwardable TGT,
can get both krb4 and krb5 tickets, if explicitely configured to do so
by the krb5.conf.
 1.11  14-Feb-2000  aidan branches: 1.11.2;
Patch from assar@netbsd.org to make k5login.c work with both MIT and Heimdal
kerberos trees.
 1.10  26-Dec-1999  aidan Fixed 'login in free' warning in kdestroy().
 1.9  05-Dec-1999  aidan Made login continue without kerberos when there is no krb5.conf present
(and KERBEROS5 is defined).
 1.8  25-Aug-1999  christos branches: 1.8.4;
make this compile....
 1.7  12-Jul-1999  aidan Kerberos5 changes to login -- now supports forwarded TGTs.
 1.6  12-Oct-1997  mycroft Get rid of special cases for `s/key' password.
 1.5  19-Aug-1997  mycroft Various changes to keep up with krb5, mostly addition of the kcontext
structure. From PR 3826, by Chris Jones.
 1.4  16-Aug-1997  lukem * add functionality to `force password change at next login'. to use,
set the pw_change field of the user to -1 (defined in <pwd.h> as
_PASSWORD_CHGNOW). based on [bin/936] by Simon Gerraty <sjg@quick.com.au>
* clean up for WARNS?=1
 1.3  11-Feb-1997  mrg remove dangerous sprintf calls.
 1.2  23-Dec-1994  jtc Merged with 4.4lite.
Changed to conform to NetBSD's new RCS Id convention.
 1.1  25-Jul-1994  brezak Add support for Kerberos5 authentication.
 1.8.4.1  27-Dec-1999  wrstuden Pull up to last week's -current.
 1.11.2.1  23-Jun-2000  minoura Sync w/ netbsd-1-5-base.
 1.12.2.5  14-Dec-2000  he Pull up revision 1.17 (requested by wiz):
Use strlcpy() to copy environment variable into a fixed-length
buffer. Fixes PR#11550.
 1.12.2.4  14-Nov-2000  tv Pullup 1.16 [aidan]:
Replace all calls to 'error_message()' with 'krb5_get_err_text()', since
error_message() does not seem to display meaningful information, under
Heimdal.
 1.12.2.3  11-Sep-2000  aidan Pull up revision 1.15 (requested by aidan):
Make login check the returned TGT against the local keytab, when using krb5
for authentication. This closes a potential man-in-the-middle attack, where
an intruder can forge a response to login's AS-request, and gain access to
the host.
 1.12.2.2  09-Aug-2000  thorpej Pull up rev. 1.14:
krb5_get_in_tkt() (called by krb5_get_in_tkt_with_password()) may
eventually call krb5_free_principal() via krb5_free_creds_contents(),
(when it succeeds, in particular). Check for the creds.server
already being freed, and don't free it again.
 1.12.2.1  02-Aug-2000  thorpej Update from trunk (approved by jhawk):
If neither Kerberos IV or Kerberos V are configured, don't
issue "Warning: no Kerberos tickets issued."
 1.27.46.1  07-May-2012  riz Pull up following revision(s) (requested by christos in ticket #215):
usr.bin/login/login.c: revision 1.100
usr.bin/login/login.c: revision 1.101
usr.bin/login/login.c: revision 1.102
usr.bin/login/common.c: revision 1.4
usr.bin/login/common.h: revision 1.2
usr.bin/login/k5login.c: revision 1.28
usr.bin/login/k5login.c: revision 1.29
usr.bin/login/login.c: revision 1.99
usr.bin/login/login_pam.c: revision 1.21
usr.bin/login/Makefile: revision 1.53
usr.bin/login/Makefile: revision 1.54
usr.bin/login/Makefile: revision 1.55
usr.bin/login/k5login.c: revision 1.30
usr.bin/login/k5login.c: revision 1.31
usr.bin/login/k5login.c: revision 1.32
usr.bin/login/k5login.c: revision 1.33
make krb5 compile again. XXX: one function left that is deprecated, what's
the new equivalent?
centralize error function processing.
fix the USE_KERBEROS=no USE_PAM=no build.
remove obsolete comment.
make kerberos work again:
1. make notickets external
2. don't use the tty as part of the credential cache, since pts/1 will not work.
3. Attempt to use the newer functions, but punt for now since it does not work
yet.
don't abuse the instance variable
move more of the compat code in the compat block.
last commit before I nuke the old code.
no more KRB5_DEPRECATED
 1.27.44.1  23-May-2012  yamt sync with head.

RSS XML Feed