aboutsummaryrefslogtreecommitdiff
path: root/libexec/rshd
Commit message (Collapse)AuthorAgeFilesLines
* Whitespace-only to sync with -stable.Ruslan Ermilov2000-12-071-2/+0
| | | | Notes: svn path=/head/; revision=69707
* mdoc(7) police: use the new features of the Nm macro.Ruslan Ermilov2000-11-201-2/+2
| | | | Notes: svn path=/head/; revision=68949
* remove trailing periods from SEE ALSO.Ben Smithurst2000-11-151-1/+1
| | | | Notes: svn path=/head/; revision=68756
* Removed broken PAM support from rshd(8) and rlogind(8). rshd doesRuslan Ermilov2000-10-122-28/+1
| | | | | | | | | | not allocate a pty(4) so it is not suitable at all for interactive PAM modules. rlogind calls login(1) which is already PAM enabled. Approved by: markm Notes: svn path=/head/; revision=67001
* Plug the hole where rshd would bypass a proper .rhosts check if theBrian S. Dean2000-07-051-3/+2
| | | | | | | | | password was empty. Reviewed by: Warner Losh <imp@freebsd.org> Notes: svn path=/head/; revision=62643
* Remove dead debug code.Jeroen Ruigrok van der Werven2000-04-291-8/+0
| | | | | | | This also removes a dependency/reference on COMPAT_43. Notes: svn path=/head/; revision=59748
* Use libcrypto instead of libdes.Mark Murray2000-02-241-1/+1
| | | | Notes: svn path=/head/; revision=57453
* sync iruserok() extension API with other BSDsYoshinobu Inoue2000-02-011-8/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some of rcmd related function is need to be updated to support IPv6. Some of them are already updated as standard document. But there is also several de-facto functions and they are not listed in standard documents. They are, iruserok() (used by rlogind, rshd) ruserok() (used by kerberos, etc) KAME package updated those functions in original way. iruserok_af() ruserok_af() But recently there was discussion on IETF IPng mailing list about how to sync those API, and it is decided, -Those function is not standard and not documented. -But let BSDs sync their API as de-facto. And after some discussion, it is announced that -add update to iruserok() as iruserok_sa() -no ruserok() API change(it is only updated internaly) So I sync those API before 4.0 is released. The changes are, -prototype changes -ruserok() internal update (use iruserok_sa() inside) -removal of ruserok_af() -change iruserok_af() as static functioin, and also prefix the name with __. -add iruserok_sa() (Just call __iruserok_af() inside) -adding flag AI_ALL to getipnodebyaddr() called from __icheckhost(). This is necessary to support IPv4 communication via AF_INET6 socket could be correctly authenticated via iruserok_sa() -irusreok_af() call is replaced to iruserok_sa() call in rlogind, and rshd. Approved by: jkh Notes: svn path=/head/; revision=56939
* Fix rshd coredump when AF_INET socket is used.Yoshinobu Inoue2000-01-281-1/+1
| | | | | | | Confirmed by: F. Heinrichmeyer <fritz.heinrichmeyer@fernuni-hagen.de> Notes: svn path=/head/; revision=56758
* several tcp apps IPv6 updateYoshinobu Inoue2000-01-253-24/+64
| | | | | | | | | | | | | | | -inetd -rshd -rlogind -telnetd -rsh -rlogin Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project Notes: svn path=/head/; revision=56590
* . mdoc(7)'fyAlexey Zelkin2000-01-071-4/+12
| | | | | | | | | | | . add Xrs to hosts.equiv(5), auth.conf(5), services(5) to some pages . sort Xrs in SEE ALSO sections Patches based on PR: docs/15680 Submitted by: Christian Weisgerber <naddy@mips.rhein-neckar.de> Notes: svn path=/head/; revision=55562
* Fix for new Kerberos4. Make a fist cut at PAM-ising while I'm here.Mark Murray1999-09-192-153/+66
| | | | Notes: svn path=/head/; revision=51433
* Fix more Common Error brokenness.Mark Murray1999-09-061-2/+2
| | | | Notes: svn path=/head/; revision=51036
* $Id$ -> $FreeBSD$Peter Wemm1999-08-283-3/+3
| | | | Notes: svn path=/head/; revision=50476
* Ensure that things returned by gethostname() andBrian Somers1999-04-071-6/+5
| | | | | | | | | | | | | friends are terminated and allow for a maximum host name length of MAXHOSTNAMELEN - 1. Put parenthesis around sizeof args. Make some variables static. Fix telnetd -u (broken by my last commit) Prompted by: bde Notes: svn path=/head/; revision=45422
* Use realhostname() rather than various combinations ofBrian Somers1999-04-061-42/+14
| | | | | | | | | gethostbyaddr() & gethostbyname(). Remove brokeness in ftpd for hosts of MAXHOSTNAMELEN length. Notes: svn path=/head/; revision=45393
* Oops, I missed a few more /etc/nologin references yesterday. It appearsSatoshi Asami1999-01-121-3/+3
| | | | | | | | | my check of the tree was incomplete. Sorry guys. Reported by: Ben Smithurst <ben@scientia.demon.co.uk> Notes: svn path=/head/; revision=42587
* As previously threatened, clean up the rshd -a option and make it defaultPeter Wemm1998-12-162-64/+29
| | | | | | | | | | | | | | | | | | | on rshd and rlogind. However, note that: 1: rshd used to drop a connection with -a if the hostname != ip address. This is unneeded, because iruserok() does it's own checking. It was also wrong if .rhosts had an explicit IP address in it, connections would be dropped from that host solely because the DNS was mismatched even though it was explicitly intended to work by IP address. 2: rlogind and rshd check the hostname mappings by default now because that is what goes into the utmp/wtmp and logs. If the hostname != ip address, then it uses the IP address for logging/utmp/wtmp purposes. There isn't much point logging ficticious hostnames. 3: rshd -a is now accepted (but ignored) for compatability. If you really want to make life miserable for people with bad reverse DNS, use tcpd in paranoid mode (which is questionable anyway, given DNS ttl tweaking). Notes: svn path=/head/; revision=41860
* Fixed long line in previous commit.Bruce Evans1998-12-031-2/+3
| | | | Notes: svn path=/head/; revision=41480
* Added a -D option to turn on TCP_NODELAY.David Greenman1998-12-012-5/+18
| | | | Notes: svn path=/head/; revision=41445
* Add -lcrypt when building kerberos.John Birrell1998-09-051-3/+3
| | | | Notes: svn path=/head/; revision=38827
* Fix LIBDIR (for aout/ELF).Mark Murray1998-08-061-2/+2
| | | | Notes: svn path=/head/; revision=38149
* Replace _exit() with exit()Robert Nordier1998-05-051-2/+2
| | | | | | | Pointed out by: Nathan Torkington <gnat@prometheus.frii.com> PR 5585 Notes: svn path=/head/; revision=35728
* Typo.Philippe Charnier1997-12-181-2/+2
| | | | Notes: svn path=/head/; revision=31837
* No \n in syslog() strings. Add man page to Xrefs. Change null byte to NUL byte.Philippe Charnier1997-12-022-23/+37
| | | | Notes: svn path=/head/; revision=31490
* Changes for the new KTH Kerberos4.Mark Murray1997-09-282-16/+21
| | | | | | | Also make -Wall a bit quieter Notes: svn path=/head/; revision=29917
* Rshd print to much information if a user does not exists.Wolfram Schneider1997-07-182-8/+7
| | | | Notes: svn path=/head/; revision=27516
* login_getclass() -> login_getpwclass().David Nugent1997-05-101-2/+2
| | | | Notes: svn path=/head/; revision=25674
* Added login.conf support.David Nugent1997-04-233-8/+71
| | | | Notes: svn path=/head/; revision=25099
* Be a bit more careful about what port number we are using for thePeter Wemm1997-03-291-3/+7
| | | | | | | | second socket. If we're going to check for reserved ports, we should do it properly. Notes: svn path=/head/; revision=24379
* compare return value from getopt against -1 rather than EOF, per the finalWarner Losh1997-03-281-2/+2
| | | | | | | posix standard on the topic. Notes: svn path=/head/; revision=24349
* Revert $FreeBSD$ to $Id$Peter Wemm1997-02-223-3/+3
| | | | Notes: svn path=/head/; revision=22989
* Some patches for source routed packets from OpenBSD.Warner Losh1997-02-091-13/+16
| | | | | | | | | | | | | | | | | | Rev 1.13 deraadt: do not warn about valid options; invalid options correctly quit Rev 1.12 deraadt: need not clear options since bad ones cause exit; provos@ws1.physnet.uni-hamburg.de Rev 1.11 deraadt: IPOPT_LSRR/IPOPT_SSRR must exit() due to tcp sequencing; pointed out by provos@wserver.physnet.uni-hamburg.de. also another 1-char buffer overflow. Reviewed by: Peter Wemm Obtained from: OpenSBD Notes: svn path=/head/; revision=22454
* Make even more copies of hostnames obtained by inet_ntoa(). iruserok()Joerg Wunsch1997-01-271-5/+18
| | | | | | | | could still clobber the static storage, yielding an error message with a wrong hostname. Notes: svn path=/head/; revision=22041
* Make the long-awaited change from $Id$ to $FreeBSD$Jordan K. Hubbard1997-01-143-3/+3
| | | | | | | | | | | This will make a number of things easier in the future, as well as (finally!) avoiding the Id-smashing problem which has plagued developers for so long. Boy, I'm glad we're not using sup anymore. This update would have been insane otherwise. Notes: svn path=/head/; revision=21673
* Sort cross references.Wolfram Schneider1997-01-131-4/+4
| | | | Notes: svn path=/head/; revision=21635
* Fixes:Marc G. Fournier1996-10-221-2/+2
| | | | | | | | | | | | | | | When an rsh is denied by rshd because the client is lacking appropriate .rhosts permission, an error message is formatted for syslog which contains the client's hostname. The hostname portion of the message relies on a pointer to a field within gethostbyname()'s internal struct hostent which changes state between when the pointer is initialized and when it is dereferenced to create th e message. Submitted by: skynyrd@opus.cts.cwu.edu Notes: svn path=/head/; revision=19108
* add forgotten $Id$Wolfram Schneider1996-09-222-0/+3
| | | | Notes: svn path=/head/; revision=18471
* Fix some compilation warnings.Paul Traina1996-09-211-1/+1
| | | | Notes: svn path=/head/; revision=18449
* consistent presentation of emphasisAdam David1996-07-231-1/+1
| | | | Notes: svn path=/head/; revision=17257
* #include <kerberosIV/des.h> -> #include <des.h>Mark Murray1996-02-111-1/+1
| | | | Notes: svn path=/head/; revision=14024
* Rename des_set_key -> des_set_key_krb. (libdes conflict)Mark Murray1996-02-031-1/+1
| | | | Notes: svn path=/head/; revision=13881
* Section FILES and SEE ALSO completedWolfram Schneider1996-01-281-1/+18
| | | | | | | Section FILES and SEE ALSO completed Notes: svn path=/head/; revision=13681
* Add missing & in des_set_key argumentAndrey A. Chernov1995-11-191-1/+1
| | | | Notes: svn path=/head/; revision=12387
* Move the setlogin() call a little earlier.. It was being done in the childPeter Wemm1995-11-121-4/+5
| | | | | | | | process - which would be no longer allowed if the setlogin() changes go through. Now the parent (the session leader, when started by inetd) does it. Notes: svn path=/head/; revision=12240
* Check for expired passwords before allowing access to the system.Mike Pritchard1995-08-281-2/+3
| | | | Notes: svn path=/head/; revision=10401
* Add distribution=krb for P-HKGarrett Wollman1994-11-201-1/+2
| | | | Notes: svn path=/head/; revision=4715
* First level of changes for bringing in eBones (kerberos).Geoff Rehmet1994-09-291-6/+10
| | | | | | | | | | | - Get rid of inverse logic (NOKERBEROS and NOEBONES) in src/makefile, and replace with MAKE_KERBEROS and MAKE_EBONES. (Far fewer contortions, and both default to off.) IF YOU WANT KERBEROS, YOU HAVE TO EXPLICITLY DEFINE ONE OF THESE. - Make Makefiles kerberos-aware. Notes: svn path=/head/; revision=3197
* Update to new make macros and disable Kerberos because we haven't got itGarrett Wollman1994-08-051-5/+5
| | | | | | | set up right yet. Notes: svn path=/head/; revision=1875
* BSD 4.4 Lite Libexec SourcesRodney W. Grimes1994-05-273-0/+1003
Notes: svn path=/vendor/CSRG/dist/; revision=1592