Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
68,749 Commits 606 Branches 0 Tags 3.1 GiB
Commit Graph

1691 Commits

Author SHA1 Message Date
lukem 5007ab036b - sshd has a pid file, so take advantage of it 
- support `reload' arg (using default of SIGHUP)
 2000-08-10 22:49:43 +00:00
thorpej 690a071d43 Need bsd.own.mk 2000-08-10 22:02:07 +00:00
lukem 0b1677de5f - provide sshd not ssh 
- don't start until after LOGIN (after NETWORK is way too early)
- KNF (as such :)
 2000-08-10 01:41:09 +00:00
mrg 64fe1807a8 remove xy & xd support. 2000-08-09 10:54:20 +00:00
thorpej 26aeddad0c Add `swat' (Samba Web Administration Tool) services at 901/tcp. 2000-08-08 03:10:50 +00:00
thorpej 81958d9213 Add kdc/kdc_flags variables. 2000-08-06 21:34:17 +00:00
thorpej f0c5d26a40 Startup script glue for the Heimdal KDC. 2000-08-06 21:32:56 +00:00
thorpej 6636b19ffd Add (commented out) hprop service, along with a short explanation 
of when to enable it and why.
 2000-08-06 20:35:13 +00:00
thorpej eb8931bc84 Add `hprop' service (754/tcp). 2000-08-06 20:12:19 +00:00
fvdl 4ed8b47725 Do not create the binary/security directory, there is no seperate 
security set anymore.
 2000-08-06 18:10:48 +00:00
thorpej 4bfab7fc50 /var/krb5kdc -> /var/heimdal 2000-08-06 17:15:47 +00:00
nonaka 7a41932873 for make snapshot 2000-08-06 16:11:32 +00:00
thorpej ac1bd4275a Remove the (not supported) krbupdate service, and add (commented out) 
kerberos-adm.
 2000-08-05 00:48:15 +00:00
thorpej 75713daa92 Add ISAKMP. 2000-08-03 22:58:37 +00:00
kleink a8c7e91153 As discussed with Hubert Feyrer in private mail, install UTC as the default 
time zone; while amounting to the same offset, the time zone 'name' of
Factory violates the prinicple of least surprise.
 2000-08-03 13:00:02 +00:00
hubertf 343777f0d3 Change default timezone from US/Pacific to Factory: 
Before:
    Wed Aug  2 06:53:04 PDT 2000

After:
    Wed Aug  2 13:52:52 Local time zone must be set--see zic manual page 2000
 2000-08-02 14:40:45 +00:00
itojun e9b5e5d87c fix comment on DAD wait 2000-08-02 13:59:11 +00:00
hubertf dcefdf7722 Adjust comment to what's actually being done 2000-08-02 11:07:51 +00:00
itojun 8451f00774 we need to sleep for IPv6 DAD period, before and after rtsol. 
(they are for stability in boot-time configuration)
comment from perry.
 2000-08-01 20:49:11 +00:00
jwise d6662ec62f Change name of precmd from start_precmd to sshd_precmd. While it worked 
fine as was, the result was the line `start_precmd=start_precmd' which
looked odd.  Pointed out by Bernd Ernesti.

While here, add NetBSD RCS Id.

BTW, to clarify, as people have asked:  this script does not support
pkgsrc/security/sshd -- that package comes with a perfectly fine rc script
which in addition to supporting /etc/rc.d can also be used with 1.4.X.

This script will not trivially work with the ssh package as it a.) calls
the ssh commands at the pathnames they will be installed at by usr.bin/ssh,
and b.) generates a DSA key as well as an RSA key.
 2000-08-01 14:28:32 +00:00
jlam f3983ea4df Correct apparent past-o: RSA -> DSA 2000-07-31 21:43:52 +00:00
jwise 5da8f604df Add $sshd and $sshd_flags for use by both usr.bin/sshd and pkgsrc/security/{open,}ssh 
As a precedent, note the presence of $gated, even though we do not distribute
gated outside of pkgsrc.
 2000-07-31 20:47:41 +00:00
jwise 5cfec6f11d An sshd startup script for use with usr.bin/sshd. Installation is conditional 
on ${SSHDIST}, as with usr.bin/ssh itself.

This script includes a `keygen' target for regenerating RSA and DSA host keys,
and invokes this if these keys are not present when sshd is started up.
 2000-07-31 20:39:41 +00:00
chuck fcf381833d actually make use of new features introduced in man.c (rev 1.23): 
allow to specify relative paths for sections in man.conf - they are used
          similarily to _subdir, but only when appropriate
 2000-07-31 00:26:48 +00:00
chuck c438e69177 if update_motd is set, do not gratuitously force it to have an empty line 
in it.  also be a bit smarter about deleting stuff from motd during
update.  it is now possible to have a one line motd just like in SunOS.
 2000-07-31 00:17:05 +00:00
veego ea8a88f609 syslog requires databases from sysdb which creates /var/run/utmp. 2000-07-29 21:50:20 +00:00
soren d13496d33e md0c -> md0d. 2000-07-29 10:56:19 +00:00
christos 023a7f381f add back check to .rhosts cat -f avoids the security hole. 2000-07-28 21:38:43 +00:00
mason 2ff2883ec7 pty{0,1} created more than once for "floppy" target. Corrected. 2000-07-27 19:16:09 +00:00
veego 3e53e60091 Really, we don't need a 2nd pty0 in the floppy target. 2000-07-27 19:09:57 +00:00
mason 12fa1acae3 As before, make 64 PTYs default. Forgot to move updated version back after 
moving it aside to commit fix to previous version, prior to larger commit.
 2000-07-27 18:46:15 +00:00
mason db8e04e0f8 Move to a default of 64 PTYs in "all" targets. Normalize "floppy" and 
"minimal" targets to use 16 PTYs.
 2000-07-27 18:43:14 +00:00
mason d123ebaad1 Correct typo - missing $0. 2000-07-27 18:41:34 +00:00
lukem 392130e304 move recreating /var/run/utmp from mountcritlocal (where /var/run is 
purged but /usr/bin/install is not available) to sysdb.
problem noted by Matthias Drochner.
 2000-07-27 13:58:49 +00:00
itojun 0e416c083c add usr.bin/{hoststat,purgestat}, which are new argv[0] hack 
for sendmail 8.10.x and beyond.  sorry that i forgot to add this one.

From: Andrew Brown <atatat@atatdot.net>
 2000-07-26 16:35:33 +00:00
lukem 48b9eee5e1 * add new dummy dependancy `NETWORK' to be REQUIREd by services which need 
networking to be operational before starting, and use as appropriate.
  NETWORK depends upon network and dhclient.
* move the guts of systemfs into mountcritlocal
* replace the dependancy on systemfs with mountcritremote, and remove the
  former.
* SERVERS now also depends upon ppp

Notes:
* dhclient (and others) needs /var to be a $critical_filesystem_beforenet
* dhclient now starts before syslogd (because the latter needs /usr, and
  /usr might need dhclient to be mounted)

Should fix PRs:
    [install/9853] [bin/10002] [misc/10349] [port-i386/10633] [misc/10641]
 2000-07-26 00:11:48 +00:00
thorpej fe54e81eb3 Also do ../usr.bin/ssh for the `distribution' target. 2000-07-25 19:07:39 +00:00
jdolecek 1bf05ae3b1 the format without netmask is supported for compatibility only and not 
specifying it is discouradged, actually
also add comments about this fact to etc/rc.d/network, for people who
don't read manpages :)
 2000-07-25 18:47:28 +00:00
drochner 6c44b52470 add usr/share/wscons/{fonts,keymaps} 2000-07-25 17:20:13 +00:00
drochner 8ba3198bec the pcvt fonts are in /usr/share/wscons/fonts now 2000-07-25 17:14:58 +00:00
itojun 674467bac8 add "start" argument to sshd.sh. 
- sshd.sh comes with pkgsrc/security/openssh requires "start" argument
- sshd.sh comes with pkgsrc/security/{ssh,ssh6} does not care about argument
- it seems to me, from license twists, openssh installation will get
  more popular
 2000-07-24 10:10:05 +00:00
briggs a2c0644e20 Add a Makefile.inc with snap_md_post to build and install release notes 
for a make release or make snapshot.
 2000-07-22 02:33:53 +00:00
briggs 5d1a00b125 Add a snap_md_post to build release notes and boot floppies on a make 
release or make snapshot.
 2000-07-22 02:33:06 +00:00
lukem 1a54e63fe1 match reality WRT rc.d... 2000-07-22 01:50:30 +00:00
lukem e15f7a2a6f clarify the difference between $critical_filesystems_beforenet and 
$critical_filesystems, and why `/var' should be in the former (or
implied as part of `/' which is already mounted).
 2000-07-22 01:09:44 +00:00
joda d3f42e569d add some kerberos related ports 2000-07-22 00:26:42 +00:00
lukem 1a29746222 - fix typo; the first ipsec_start() should be ipsec_prestart() 
- if ipsec.conf isn't readable and the system is booting directly to multiuser,
  send SIGTERM to the parent (/etc/rc) so that init(8) aborts the boot.
 2000-07-21 01:16:07 +00:00
lukem 262e4b1975 if ipf.conf isn't readable and the system is booting directly to multiuser, 
send SIGTERM to the parent (/etc/rc) so that init(8) aborts the boot.
 2000-07-21 01:14:23 +00:00
lukem 9c7a535df6 - be consistent in formatting sentences 
- note that xdm might need wscons for local X servers (c.f. [install/9967])
 2000-07-21 00:25:31 +00:00
lukem 31e7834913 reword description 2000-07-20 23:36:56 +00:00