Andrey A. Chernov
0a06628ab2
Comment out LDADD+=-ldescrypt, it is not yet active due to
...
missng defines for krb4encpwd and rsaencpwd and missing rsa library too.
1995-08-05 19:10:25 +00:00
Andrey A. Chernov
d2245bac95
Nuke one __FreeBSD__ left out
...
Reviewed by:
Submitted by:
Obtained from:
1995-08-04 03:02:30 +00:00
Andrey A. Chernov
ba60b431ca
Change default banner to FreeBSD, properly ifdefed by __FreeBSD__
...
Reviewed by:
Submitted by:
Obtained from:
1995-08-04 00:12:08 +00:00
Paul Traina
a98348f35c
Update manual page to reflect "empty password" usage.
1995-08-03 16:23:12 +00:00
Paul Traina
4a1842c971
Null password should ask for random
1995-08-02 23:15:12 +00:00
Paul Traina
278022fad4
Make the DB/DBM routines generic (ifdef FreeBSD considered evil), and
...
also fix a string allocation bug.
Submitted by: Havard Eidnes
1995-08-02 23:08:18 +00:00
Paul Traina
f97a38cd65
Program to receive and process a new kerberos database (this is run on
...
the slave server).
NOTE: This code should not be built, there is no documentation, and this
method of database transfer is highly suboptimal. It's here just
for those of us who actually have multiple K4 servers and want
something more secure than the other distribution mechanisms.
Obtained from: MIT Project Athena
1995-08-02 22:14:27 +00:00
Paul Traina
fa84c42025
Import an updated revision of the MIT kprop program for distributing
...
kerberos databases to slave servers.
NOTE: This method was abandoned by MIT long ago, this code is close to
garbage, but it is slightly more secure than using rdist.
There is no documentation available on how to use it, and
it should -not- be built by default.
Obtained from: MIT Project Athena
1995-08-02 22:11:44 +00:00
Justin T. Gibbs
e0deda6676
Make kadmind safe to run on multi-homed machines.
...
Reviewed by: Garrett A. Wollman (wollman@FreeBSD.org )
1995-08-02 18:31:08 +00:00
Andrey A. Chernov
9ed77b336f
Final cleanup pass through Makefiles, now this stuff
...
autodetect kerberos/eBones and work even with eBones,
but with reduced functionality (don't pick up des/krb stuff
in this case)
1995-07-24 22:55:59 +00:00
Andrey A. Chernov
dbd07ffcc0
Add -ldescrypt, or wrong crypt version can be picked from libc
...
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 22:01:01 +00:00
Andrey A. Chernov
6b370f4c7e
Add LDADD+= -ldescrypt
...
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 21:57:58 +00:00
Andrey A. Chernov
b6c080f6bc
Move -ldes under kerb stuff, my fault
...
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 21:49:06 +00:00
Andrey A. Chernov
e74d115547
Since this stuff not works with eBones, ifdef kerberos stuff
...
with MAKE_KERBEROS to allow other things to live
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 21:47:30 +00:00
Andrey A. Chernov
3b901a0b79
Since this stuff not works with eBones, ifdef kerberos stuff
...
with MAKE_KERBEROS to allow other things to live
Submitted by:
Obtained from:
1995-07-24 21:38:32 +00:00
Andrey A. Chernov
4109d6bfef
Add comment about new_rnd_key.c module needed from original
...
libdes (and not present in eBones libdes)
1995-07-24 21:12:57 +00:00
Andrey A. Chernov
7170827e21
Add comment about new_rbd_key.c module needed from
...
original libdes
1995-07-24 21:10:47 +00:00
Andrey A. Chernov
f8e556c37d
Fix dependances, typing errors, etc.
...
Note: this thing need original libdes not Eric Young libdes from eBones
Submitted by:
Obtained from:
1995-07-24 20:40:03 +00:00
Andrey A. Chernov
bfdd0041fc
Fix many bogus things, typing error, dependance errors, etc.,
...
now it compiles.
Note: this stuff requires original libdes, not libdes from
Eric Yang which we have in eBones.
1995-07-24 20:29:12 +00:00
Rodney W. Grimes
4b6cee4dd6
date: 1995/07/12 13:10:58; author: jkh; state: Exp; lines: +3 -2
...
Sync with Mark M's latest suggestions.
Submitted by: markm
[This is being pulled from RELENG_2_0_5, it was commited there after the
release, and we need it here and in RELENG_2_1_0, it will be cvs admin -o'ed
off the RELENG_2_0_5 branch after this commit.]
1995-07-22 04:24:05 +00:00
Paul Traina
4a0834a5a2
When hostname len > 8, name replaced with dot notation when -u flag
...
not specified (default case).
Use _PATH_* for utmp/wtmp.
Support for >32 PTYs.
>Submitted by: Heikki Suonsivu <hsu@cs.hut.fi>
Plug already known security hole. (Brought over from 1.1.5):
Fixed security problem with telnetd, which allowed
telnet -l -hcert.org localhost
to change the user's host in utmp.
Thanks to Matthew Green <mrgreen@@mame.mu.oz.au> for showing me this one.
>Reviewed by: karl, guido
>Submitted by: mrgreen@mame.mu.oz.au
Obtained from: FreeBSD insecure telnetd
1995-07-20 12:35:01 +00:00
Paul Traina
4fd39f708a
The final negotiation of DO_BINARY in the LINEMODE portion of the telnetd code
...
causes some clients that do not support linemode to mis-interpret the return
key (i.e. double returns).
The fix is to only do the state check for binary options if linemode will
be used.
Closes PR#505.
Submitted by: Charles Henrich
Obtained from: FreeBSD insecure telnetd
1995-07-20 12:32:40 +00:00
Paul Traina
9809ff32f6
Update telnet to the 95.05.31 release.
...
Obtained from: Dave Borman <dab@cray.com>
1995-07-20 11:40:06 +00:00
Rodney W. Grimes
d3628763db
Merge RELENG_2_0_5 into HEAD
1995-06-11 19:33:05 +00:00
Rodney W. Grimes
7799f52a32
Remove trailing whitespace.
1995-05-30 06:41:30 +00:00
Rodney W. Grimes
5ebc7e6281
Remove trailing whitespace.
1995-05-30 06:12:45 +00:00
Garrett Wollman
2b50c84ac1
Make certain that random keys havethe correct parity, for interoperation with
...
MIT v4 implementations.
Submitted by: Reece R. Pollack <reece@eco.twg.com>
1995-05-09 18:05:15 +00:00
Dima Ruban
399e5b4411
Security fixes.
...
CERT Advisory CA-95:03.telnet.encryption
Obtained from: CERT
1995-02-17 03:57:00 +00:00
Andrey A. Chernov
3d70f09304
Build kpasswd from normal passwd sources now
...
Submitted by: mark@grondar.za
1995-02-11 18:25:38 +00:00
Jordan K. Hubbard
2b6645c034
Various documentation changes.
...
Submitted by: Mark Murray <mark@grondar.za>
1995-02-08 10:54:30 +00:00
Andrey A. Chernov
ac6802b11c
Fix database deletion, we don't have .dir & .pag, use .db instead
1995-01-25 19:57:27 +00:00
Andrey A. Chernov
06b1dd511a
Fix database rename, we don't have .dr & .pag, use .db instead
1995-01-25 19:45:25 +00:00
Justin T. Gibbs
8d4b2d911c
Less expensive fix for the freeing of uninitialized fields in the hostdata
...
struct. Simply test the "no_host" variable, which if true implies that
the hostdata contains bogus data, and act accordingly.
1995-01-25 06:37:33 +00:00
Justin T. Gibbs
33ac11112d
bzero hostdata in send_to_kdc so that if we immediately jump to the
...
cleanup routine, we don't look at bogus data to determine wheter or not
to free the fields of the hostdata struct. This cures the "klogin segfaults
when no kerberos servers are availible" problem.
1995-01-25 05:40:00 +00:00
Andrey A. Chernov
5ba6fadf2f
Add missing newline (or messages concatenated)
1995-01-25 02:27:00 +00:00
Garrett Wollman
745bdc24b4
Print out error messages from libkadm correctly (i.e., using com_err).
1995-01-23 22:54:08 +00:00
Garrett Wollman
422c275a72
Add ksrvutil.
1995-01-20 22:40:02 +00:00
Garrett Wollman
8c5c9f2577
Add last piece in fully-functional Kerberos implementation: ksrvutil,
...
a program to manage /etc/srvtab.
1995-01-20 22:38:30 +00:00
Garrett Wollman
218a5dcf33
Added Kerberized passwd.
1995-01-20 22:16:47 +00:00
Garrett Wollman
788c8e2ea4
Password-changing program with Kerberos support via the `kadmin'
...
protocol. Replaces passwd(1) when eBones is installed. As before, HOW-TO
explains the gory details.
1995-01-20 22:14:14 +00:00
Garrett Wollman
01ae44681d
Fix bonehead /usr/lib -> /usr/bin.
1995-01-20 22:08:14 +00:00
Garrett Wollman
4ed9828579
Add kadmind.
1995-01-20 03:13:48 +00:00
Garrett Wollman
acfdd75a53
Add kadmind. HOW-TO documents how to get here from raw eBones.
1995-01-20 03:13:00 +00:00
Garrett Wollman
703273c507
Add kadmin.
1995-01-20 02:49:47 +00:00
Garrett Wollman
516345750a
The user side of the kadmin protocol. HOW-TO describes how to recreate
...
this based just on the eBones distribution.
1995-01-20 02:47:50 +00:00
Garrett Wollman
a15e22a637
Add the library used by kadmin' and
kadmind'. Oddly enough, this
...
little library is actually exportable (we think) even though it's pretty
useless iwithout the (non-exportable) clients.
1995-01-20 02:02:54 +00:00
Garrett Wollman
1c8f305817
Don't install kadm.h from here; it's done by the libkadm directory.
1995-01-20 02:01:11 +00:00
Garrett Wollman
51c716bd1c
Do all libraries first. Don't do `include' twice.
1995-01-20 02:00:34 +00:00
Garrett Wollman
35042b3093
Don't break existing users of libkrb.so.2.0 who aren't using libcom_err.
1995-01-20 01:44:47 +00:00
Garrett Wollman
bf836b9a51
Kill more bogus man pages. (The correct ones are with their programs.)
1995-01-20 01:26:53 +00:00