Add newgrp(1) to SEE ALSO cross-reference list.

Use Nm instead of Xr to itself, remove reference to uucp(1), fix casing
of Kerberos.

Reference login.conf.

Prefer mdoc markup to roff.

Remove trailing whitespace.

Update documentation for pam, and don't accept flags that we don't support
anymore.

Remove some whitespace.

Add a -a option to pass the host address of the host we logged in from in
addition to the host name. This option is needed by programs suchs as
telnetd, because at the point they invoke login, they already have opened
a pty, and the stdin of login is no longer the socket connected to the
remote host. In addition don't chop the hostname up to the first dot if
the domain matches. These practices are 70's fashion and they only serve
to lose information. These days we have long enough fields in utmpx and
wtmpx to store the full names.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

facilty->facility, from Igor Sobrado in PR 19670

Sort SEE ALSO section, and correct section for kerberos (1 -> 8).

Xr passwd.conf

branches: 1.18.4;
Clean up changes a bit.

Kerberos5 changes to login -- now supports forwarded TGTs.

More and more .Os cleanups. .Os is defined in the tmac.doc-common file,
so we shouldn't override it with versions in the manpages. Many more to
come.

Build domestic login on domestic systems.
Incorporated (minor) diff from domestic man page.

Correct documentation of /etc/nologin to note that it does not
apply to the superuser, per PR#6328.
Correct some nroff nits in the process.

Execute ttyaction on termination of rlogind/telnetd sessions.
Also, say a little bit about ttyaction in the getty and login manpages.

Add .Xr ttyaction 3 per PR#4647

branches: 1.11.2;
fix .Nm usage

Several things:
* Change the semantics of the `-s' option somewhat. If specified, allow
either Kerberos or S/Key login, but not a plain password.
* Eliminate the special `s/key' password; just type it at the prompt.
* Remove the root instance special case. This is a serious security hole
waiting to happen, and no other system works this way.
* Don't force a password change if Kerberos was used. Also, don't call
/bin/passwd at all if the password change isn't required.

Apply [bin/3270] from Simon J. Gerraty <sjg@quick.com.au>, with fixes by me:
* if the user has an s/key, provide a reminder in the password prompt
* if '-s' is given once, force a user that has an s/key to use it
* if '-s' is given more than once, only permit s/key logins

alternate -> alternative, per PR 2643

Sync with 4.4lite2

Fix typo, noted by Masanobu Saitoh in PR #1272

Merged with 4.4lite.
Changed to conform to NetBSD's new RCS Id convention.

add s/key support

Fix spelling errors.

Add RCS indentifiers.

branches: 1.1.1;
Initial revision