Commit Graph

7852 Commits

Author SHA1 Message Date
ginsbach
efcf0fc8a1 Whitespace fix-ups. 2005-01-13 23:02:28 +00:00
jmc
2afa8931db Now that tools/compat provides a check, make sure st_birthtimensec exists
before using it
2005-01-13 00:53:14 +00:00
thorpej
c829edc516 Test USE_PAM, not MKPAM. 2005-01-13 00:13:33 +00:00
lukem
f851795088 Fix ftp url reget when globs are being used.
Provided by Mathieu Arnold <mat@FreeBSD.org>.
2005-01-12 22:37:41 +00:00
xtraeme
80a3a0790b * Kill __P()
* ANSIfy
* Remove main() prototype
2005-01-12 17:19:23 +00:00
xtraeme
ea13a7dd7d ANSIfy another function missed in previous. 2005-01-12 17:10:05 +00:00
xtraeme
5c1d419d06 * Kill __P()
* ANSIfy
* No parenthesis are needed around the return value
2005-01-12 17:04:35 +00:00
xtraeme
b363f90b86 WARNS=3 2005-01-12 16:42:45 +00:00
xtraeme
4ed1105b0d WARNS=3 2005-01-12 14:45:26 +00:00
xtraeme
2abf3ae985 WARNS=3 2005-01-12 14:41:29 +00:00
xtraeme
1ac55ee68a Kill __P(), ANSIfy, WARNS=3 2005-01-12 14:35:56 +00:00
christos
cef96160f5 more cleanups, WARNS=3 2005-01-12 05:45:23 +00:00
xtraeme
61ae8d8c7b Kill __P() and ANSIfy, ok christos. 2005-01-12 05:34:23 +00:00
christos
28e33dbb3b Use pw_gensalt() instead of using the cipher functions directly. Simplifies
the code a lot.
2005-01-12 03:35:34 +00:00
christos
5b5b914e5a adapt to pw_gensalt() changes. 2005-01-12 03:34:58 +00:00
christos
b2f0c10f07 undo accidental commit with MKPAM=yes 2005-01-12 01:46:03 +00:00
christos
f8b8ae274a Always print pam error in messages 2005-01-12 01:45:32 +00:00
christos
6c0f1bcc27 :x 2005-01-12 01:45:31 +00:00
christos
68e7a6e2e1 SRCS is not needed. 2005-01-12 01:21:14 +00:00
christos
59bf3abf20 gc unused file. 2005-01-12 00:38:17 +00:00
christos
911a82af6b - use the gensalt functions from libcrypt instead of rolling our own. 2005-01-11 22:56:19 +00:00
christos
19917e71c5 use pw_gensalt() and don't dig into libcrypt. 2005-01-11 22:42:30 +00:00
wiz
86eb0864bd We have 2005 now. 2005-01-11 09:46:17 +00:00
wiz
36cdbd4840 Bump date for recent changes. 2005-01-11 09:39:12 +00:00
christos
81b53d0cfa - make LOGIN_CAP mandatory
- eliminate global pamh
- use setusercontext() properly (ideas borrowed from FreeBSD)
- remove stray debugging.

This now works.
2005-01-10 23:33:53 +00:00
christos
6b47b9b52a LOGIN_CAP is mandatory for PAM. 2005-01-10 23:31:34 +00:00
christos
2ef14ae88a Restore su.c to version 1.58, plus minor prototyping. Split pam
into su_pam.c, and turn it off by default in the Makefile until it
is tested and actually works. The current pam version does not set ruid
properly anymore.
2005-01-10 03:11:50 +00:00
lukem
1e281ed227 Only #define HAVE_IPV6 if ${USE_INET6} != "no". 2005-01-10 03:11:17 +00:00
lukem
7157011597 Only compile in IPv6 support if ${USE_INET6} != "no"
MKINET6 is for providing IPv6 infrastructure.
USE_INET6 is for compiling IPv6 support into the programs (needs MKINET6).
2005-01-10 02:58:58 +00:00
manu
d37a5aac85 Rewrite PAMification of su.
- don't try to fallback to plain old authentication. It could lead to unix
  authentication to be used while the administrator wanted to forbid it.
  Moreover, a broken PAM setup can be fixed by just rebooting in single user.
- In order to make the code more readable, make two main(), with and aithout
  PAM.
- Outstanding issues that seem impossible to fix:
  The -K flag die with PAM.
  -c cause PAM credentials to be ignored.
2005-01-09 21:32:38 +00:00
christos
089038b4a1 Allow -c argument now. 2005-01-09 17:47:45 +00:00
christos
fcda42cd46 - remove left over debugging code.
- centralize pointer to the head of the list casts by introducing a new var.
2005-01-09 01:27:47 +00:00
manu
02a0830983 Don't fallback to plain old authentication on "normal" errors such as
authentication failure.
2005-01-08 22:16:23 +00:00
christos
e52488f22f if we are using pam and it succeeded, don't re-initialize kerberos needlessly. 2005-01-08 18:12:35 +00:00
lukem
ed83e0847a add DPADD 2005-01-08 09:54:36 +00:00
christos
68adb09d42 - avoid calling pam_end twice if pam failed in fatal
- make fatal proper macros
- fix typos in comments
- fix logical error initializing pam
XXX: Seems to work now, but the whole process is awkward.
Asking for an ssh passphrase and using this to do unix authentication is wrong.
Falling back to the old style auth is awkward. We should really provide a
pam_rootauth module if we want to support that.
2005-01-08 08:45:53 +00:00
kim
61f9450361 Make -w flag apply to the WHAT field also (command and args).
Use at most half of ttywidth for WHERE field (hostname) instead
of a hardcoded maximum width.  (XXX: this is still not a good
default for displays under 80 columns.  Should probably count
the width of all the other columns, using 8 for the WHAT field.)
2005-01-08 05:08:53 +00:00
kim
2bb4a74034 Line up "days" style output in the IDLE field. 2005-01-08 05:04:34 +00:00
kim
ee64b0d712 The w command does not display a CPU time, so don't talk about it. 2005-01-08 04:58:08 +00:00
yamt
075d5146c6 correct examples. 2005-01-08 03:46:05 +00:00
ginsbach
02d2680603 getuid() returns a uid_t not int, so make uid uid_t. 2005-01-08 03:23:15 +00:00
manu
e628e84aaa Add PAM support to su 2005-01-07 22:34:20 +00:00
lukem
9683394bbb fix copyright year 2005-01-04 23:59:11 +00:00
fredb
6eda52d041 Invoke "join" using POSIX syntax. Should fix a problem cross-building from
Linux reported to tech-toolchain by Jesse Off.
2005-01-04 18:09:33 +00:00
lukem
b918fc0803 Forbid filenames returned from mget that aren't in (or below) the
current directory.
The previous behaviour (of trusting the remote server's response when
retrieving the list of files to mget with prompting disabled) has been
in ftp ~forever, and has been a "known issue" for a long time.
Recently an advisory was published by D.J. Bernstein on behalf of
Yosef Klein warning of the problems with the previous behaviour, so
to alleviate concern I've fixed this with a sledgehammer.

Remember the local cwd after any operation which may change it.
Use "remotecwd" instead of "remotepwd".
2005-01-03 09:50:09 +00:00
lukem
4d41fe6044 Style/consistency cleanup:
* libcrypto & libz are provided by ../Makefile.inc
* <bsd.own.mk> isn't required by most of these
* be consistent in the layout
2005-01-03 06:05:50 +00:00
lukem
ecfeee924b Use the public libssh that's now available. 2005-01-03 06:04:08 +00:00
wiz
59461d12f9 Add RCS Id, bump date for when it appeared in NetBSD, mention
NetBSD appearance in HISTORY section, fmt a paragraph.
2005-01-02 18:41:23 +00:00
christos
5f325e6da0 Shift assignment operators were handled incorrectly. On 64 bit machines,
unsigned long x, y;
	x <<= y;
always produces a warning because y is casted to int. Handle them instead
the same way as regular shifts.
2005-01-02 17:59:47 +00:00
thorpej
7ec7b5b2f6 Add a getextattr(1)/setextattr(1)/rmextattr(1)/lsextattr(1) utility
that gets, sets, removes, and lists file system extended attributes.

From FreeBSD.
2005-01-02 17:55:48 +00:00