Remove svn:mergeinfo carried over from stable/9.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy stable/9 to releng/9.3 as part of the 9.3-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

MFH r236751: document sha256 / sha512 support
MFH r236892: remove mention of auth.conf from programs that don't use it
MFH r236963: remove dead code relating to auth.conf
MFH r236965 r236966 r236967 r237005 r237006 r237011: retire auth.conf

Approved by: re

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by: re (implicit)

Add __unused

Remove the advertising clause from UCB copyrighted files in usr.bin. This
is in accordance with the information provided at
ftp://ftp.cs.berkeley.edu/pub/4bsd/README.Impt.License.Change

Also add $FreeBSD$ to a few files to keep svn happy.

Discussed with: imp, rwatson

Build usr.bin/ with WARNS=6 by default.

Also add some missing $FreeBSD$ to keep svn happy.

- Remove MLINKS to nonexistant manpages
- Change some section numbers to match reality
- For MLINKS to manpages from ports, mention which port installs them

MFC after: 3 days

Sync program's usage() with manpage's SYNOPSIS.

Spell 1 as SHUT_WR in argument to shutdown(2).

Remove unnecessary SRCS= where could be guessed directly by our
bsd.*.mk infrasture.

Obtained from: ru

Removed remnants of Kerberos support.

Introduce the PRECIOUSPROG knob in bsd.prog.mk, similar
to PRECIOUSLIB from bsd.lib.mk. The side effect of this
is making installing the world under jail(8) possible by
using another knob, NOFSCHG.

Reviewed by: oliver

Deal with double whitespace.

Mechanically kill hard sentence breaks.

Remove duplicate #include. Do not \n terminate errx() arg.

Dekerberise. The corresponding userland stuff has been dekerberised
for ages, and no-one seems to have noticed. Viva PAM!

Check for FD_SET overrun.

If a timeout is specified, make sure that rcmd() completes within
the specified time. Previously, rsh could potentially hang indefinitely
at this point even when a timeout was set, for example if the server
accepts the connection and then never sends any reply.

PR: bin/20042
Submitted by: Keith White <Keith.White@site.uottawa.ca>
MFC after: 1 week

Use <paths.h> rather than "pathnames.h", and fix a couple of whitespace nits.

Sponsored by: DARPA, NAI Labs

Use `The .Nm utility'

Replaced exists() tests with two equivalent defined().

LIBDIR is defined in bsd.own.mk but sys.mk no longer
includes bsd.own.mk as of revision 1.60.

Const what I could on a first pass.

Very simple fixes; WARNS and ANSIfy. Remove GCC-specific options from
Makefile.

remove __P

Set BINOWN=root explicitly for setuid root binaries.

This is not "useless", as one may have non-default
setting for BINOWN in make.conf, and we still want
these to be installed setuid root in this case.

Use STD{ERR,IN,OUT}_FILENO instead of their numeric values. The
definitions are more readable, and it's possible that they're
more portable to pathalogical platforms.

Submitted by: David Hill <david@phobia.ms>

mdoc(7) police: removed HISTORY info from the .Os call.

mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2).

[rsh.1] Document the `-4' and `-6' options.
[rsh.c] Make usage message match the code.

mdoc(7) police: use the new features of the Nm macro.

remove trailing periods from SEE ALSO.

Fix a bug in rsh that caused the remote process to hang waiting on
input even if the '-n' flag to rsh is used. The write side of the
socket should be closed to allow the remote process to see EOF.

Submitted by: Brad Chisholm <sasblc@unx.sas.com>

Buildworld fixes for NO_OPENSSH and NO_OPENSSL

Approved by: jkh

Use libcrypto in place of libdes.

Add -4 and -6 options.

Current getaddrinfo() implemetation has a problem of too much resolving
waiting time on INET6 enabled systems.
-4 and -6 options can limit name resolving address family and is a possible
workaround for the problem.

Approved by: jkh

several tcp apps IPv6 update
-inetd
-rshd
-rlogind
-telnetd
-rsh
-rlogin

Reviewed by: freebsd-arch, cvs-committers
Obtained from: KAME project

. mdoc(7)'fy
. add Xrs to hosts.equiv(5), auth.conf(5), services(5) to some pages
. sort Xrs in SEE ALSO sections

Patches based on PR: docs/15680
Submitted by: Christian Weisgerber <naddy@mips.rhein-neckar.de>

Revert the libcrypt/libmd stuff back to how it was. This should not have
happened as it was working around problems elsewhere (ie: binutils/ld
not doing the right thing according to the ELF design). libcrypt has
been adjusted to not need the runtime -lmd. It's still not quite right
(ld is supposed to work damnit) but at least it doesn't impact all the
users of libcrypt in Marcel's cross-build model.

Add libmd (or move it after libcrypt). We don't want the linker to be
smart because it will definitely get it wrong. This popped up during
cross-linking.

add arguments

mdoc(7)'fy

Change edistribution to krb4 in preaparation for K5

Fix for new Kerberos4.

Fix Common Error brokenness.

$Id$ -> $FreeBSD$

Add $Id$, to make it simpler for members of the translation teams to
track.

The $Id$ line is normally at the bottom of the main comment block in the
man page, separated from the rest of the manpage by an empty comment,
like so;

.\" $Id$
.\"

If the immediately preceding comment is a @(#) format ID marker than the
the $Id$ will line up underneath it with no intervening blank lines.
Otherwise, an additional blank line is inserted.

Approved by: bde

Don't use an arbitrary hardcoded value for nfds in select() calls.

PR: bin/9986

Use KJH's auth.conf parser to turn on/off Kerberos in userland.

Remove useless `BINOWN=root' now that it is the default.

Add -lcrypt when building kerberos.

Fix LIBDIR (for aout/ELF).

Add const to rcsid.

Initialise variable that gcc lies awake at night worrying about.

Changes for KTH KerberosIV.
Also quieten -Wall a bit.

Use err(3) instead of local definition.
Cosmetic in man page: do not start describing a flag with `The option -X ..'.

compare return value from getopt against -1 rather than EOF, per the final
posix standard on the topic.

Revert $FreeBSD$ to $Id$

Sort cross references.

Make the long-awaited change from $Id$ to $FreeBSD$

This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.

Add a timeout flag so that failing operations can at least be caught
and flagged. Closes PR#1513
Submitted-By: David Muir Sharnoff <muir@idiom.com>

#include <kerberosIV/des.h> -> #include <des.h>

Rename des_set_key -> des_set_key. (libdes conflict)

Section FILES and SEE ALSO complete

Kerberos can now deal with multi-homed clients.

Kerberos obtains a network address for the local host from the routing
tables and uses it consistently for all Kerberos transactions. This ensures
that packets only leave the *authenticated* interface. Clients who open
and use their own sockets for encrypted or authenticated correspondance
to kerberos services should bind their sockets to the same address as that
used by kerberos. krb_get_local_addr() and krb_bind_local_addr() allow
clients to obtain the local address or bind a socket to the local address
used by Kerberos respectively.

Reviewed by: Mark Murray <markm>, Garrett Wollman <wollman>
Obtained from: concept by Dieter Dworkin Muller <dworkin@village.org>

Remove trailing whitespace.

Fix Sharnoff complain bin/136 (-e flag doesn't work).

Add distribution=krb for P-HK

First level of changes for bringing in eBones (kerberos).
- Get rid of inverse logic (NOKERBEROS and NOEBONES) in src/makefile,
and replace with MAKE_KERBEROS and MAKE_EBONES. (Far fewer contortions,
and both default to off.) IF YOU WANT KERBEROS, YOU HAVE TO EXPLICITLY
DEFINE ONE OF THESE.
- Make Makefiles kerberos-aware.

Move the call to des_set_key to after the kerberos initialisation, removing
assumption about the implementation of des_read/des_write.

Don't use kerberos yet, we aren't ready for it.

This commit was generated by cvs2svn to compensate for changes in r1590,
which included commits to RCS files with non-trunk default branches.