Hook up snmpd_metrics

OK tb@, sthen@

Import login_ldap.

The code is based login_ldap port, but uses our own aldap implementation
instead of openldap. It also uses a stand alone configuration file
instead of login.conf, since setting this up might contain information
not destined for everyone to see.

OK bluhm@
"Go for it" deraadt@

descend into reorder_kernel

rpc.yppasswdd goes to the bitbucket.

(The story is that some people do use YP still as a libc -> non-file
lookup mechanism; some of them with standard ypbind/ypserv, but more
of them with ypbind/ypldap. That however does not justify these cruddy
tools dealing with passwords, which are more likely to contain problems)

Remove login_tis, no one should be using the TIS authentication
server these days.

unhook auxcpp

descend into tradcpp

Hook auxcpp

Remove KERBEROS5 from the Makefiles (except ssh for now, where it is
already manually disabled).

ok deraadt@

millert said i can kill rshd

Switch to the new makewhatis(8)/apropos(1)/whatis(1) combo.
"commit the switch now" espie@ "go for it" deraadt@

See the apropos(1) manual for a description of what's new.
On machines where you want the full functionality,
run "sudo makewhatis" and put "MAKEWHATISARGS=' '" into weekly.local(8).
Otherwise, when upgrading via source, run "sudo makewhatis -Q".

libwrap is going away, so can this.
ok tedu

i thought guenther was going to axe uucpd, but he's slacking

Are they going to help?
No.
Well, then tell them to stay out of the way.

ok deraadt

cleanup SUBDIR

disable libexec/identd and enable usr.sbin/identd.

ok sthen@ deraadt@

Always enter this ld.so and subdirectories to create obj (and then the
MI man pages, even if vax currently lacks the programs)

switch off inetd tftp-proxy and enable the standalone one instead.

swap out libexec/tftpd for usr.sbin/tftpd

ok henning@ sthen@ mikeb@
deraadt@ wants this

hook login_yubikey to the build

ok deraadt

Backout activation of the new apropos(1)/whatis(1)/makewhatis(8).
In its current state, it causes too much slowdown, in particular
during system builds, and there are other regressions.
That cannot be fixed quickly while it's enabled.

Problems pointed out by espie@, backout requested by deraadt@,
diff "looks good" to espie@.

Enable the new apropos(1), whatis(1), and makewhatis(8).
Unlink the old apropos(1), whatis(1), and makewhatis(8) from the build.
Call the new tools from pkg_create(1) and pkg_add(1).
"Please enable it now." deraadt@

Obsoleted after the makewhatis(8) re-write in 2000.

ok espie schwarze deraadt.

Switch from the old shell script /etc/security
to the new Perl script /usr/libexec/security.
The new script was tested by sthen@ and ajacoutot@.
Committing now due to repeated prodding from deraadt@.
In case problems show up, they will be fixed in tree.

prettier Makefiles

assume that new elf architectures will have ld.so

enable tftp-proxy since it was committed - what's the point otherwise?
ok deraadt

disable old ftp-proxy, ok henning beck

unlink telnet from the builds. dead and buried. cleartext protocols
must die. ok everyone, even grudgingly from millert (though we would
have killed it anyways, irregardless of his opinion)

login script to provide TIS Firewall Toolkit authentication

Add -g option for greylisting support for spamd. The greylisting techinque
originates from a paper by Evan Harris which can be found at
http://projects.puremagic.com/greylisting/. This implementation makes
spamd allow for non-blacklisted addresses to be treated as "greylisted".
where they are tracked in a db file, and whitelisted by addition to a
pf table when the same envelope from and to are retried from the same
source IP address. Testing by many, ok deraadt@

- use :L variable modifier with ELF_TOOLCHAIN variable
- change 2 instances of the check from != "yes" to == "no"

ok deraadt@

krb4 bye bye

spamd-setup, in c. ok deraadt@, he wants to clean in situ.

spamd: work in progress

smtpd leaves the building

Add login_radius back now that the license issue has been resolved

disable login_radius until a license problem is resolved

do not decent into ld.so if it was said NOPIC, even for elf

don't built atrun

use ELF_TOOLCHAIN instead of listing all ELF archs.
drahn@ ok.

rlogind and rexecd go away

branches: 1.26.2; 1.26.4;
Build ld.so on sparc64.

build ftp-proxy

BSD auth module for radius authentication, from BSDi.

Add login_krb5-or-pwd.

Build login_krb5 if KERBEROS5 is set.

Rename login_krb-or-pwd to login_krb4-or-pwd

Rename login_kerberos to login_krb4

Build ld.so on alpha.

build login scripts for BSD authentication

For shared libraries, an ld.so is required.

Boring... Add :L modifier to all tweakable variables tests.

Closes PR 1246

Move the spool locking functionality of "mail.local -H" into its own
program so we can take the setuid bit off of mail.local.

add smtpd.

rpc.lockd moved from libexec to usr.sbin

Don't build LFS, it doesn't work.

Changed ``defined(KERBEROS)'' to ``(${KERBEROS} == "yes")''
Same change doen for SKEY, YP, and KERBEROS5. This allows
people to override those setting in /etc/mk.conf.

Initial integration of userland tcpd.

compile_et belongs in usr.bin

compile_et now resides in /usr/libexec.

grr 2 not p in rpc.yppasswdd, one of the hardest commands in openbsd to type

rpc.yppasswdd, not rpc.yppasswd; obviously peter tested the non-YP case :)

permit YP to be compiled out using flag in bsd.own.mk; pr#15, peter@demon.net

Yeah, make this key...

rpc.lockd

add ypserv

branches: 1.1.1;
Initial revision

Import login_ldap.

The code is based login_ldap port, but uses our own aldap implementation
instead of openldap. It also uses a stand alone configuration file
instead of login.conf, since setting this up might contain information
not destined for everyone to see.

OK bluhm@
"Go for it" deraadt@

descend into reorder_kernel

rpc.yppasswdd goes to the bitbucket.

(The story is that some people do use YP still as a libc -> non-file
lookup mechanism; some of them with standard ypbind/ypserv, but more
of them with ypbind/ypldap. That however does not justify these cruddy
tools dealing with passwords, which are more likely to contain problems)

Remove login_tis, no one should be using the TIS authentication
server these days.

unhook auxcpp

descend into tradcpp

Hook auxcpp

Remove KERBEROS5 from the Makefiles (except ssh for now, where it is
already manually disabled).

ok deraadt@

millert said i can kill rshd

Switch to the new makewhatis(8)/apropos(1)/whatis(1) combo.
"commit the switch now" espie@ "go for it" deraadt@

See the apropos(1) manual for a description of what's new.
On machines where you want the full functionality,
run "sudo makewhatis" and put "MAKEWHATISARGS=' '" into weekly.local(8).
Otherwise, when upgrading via source, run "sudo makewhatis -Q".

libwrap is going away, so can this.
ok tedu

i thought guenther was going to axe uucpd, but he's slacking

Are they going to help?
No.
Well, then tell them to stay out of the way.

ok deraadt

cleanup SUBDIR

disable libexec/identd and enable usr.sbin/identd.

ok sthen@ deraadt@

Always enter this ld.so and subdirectories to create obj (and then the
MI man pages, even if vax currently lacks the programs)

switch off inetd tftp-proxy and enable the standalone one instead.

swap out libexec/tftpd for usr.sbin/tftpd

ok henning@ sthen@ mikeb@
deraadt@ wants this

hook login_yubikey to the build

ok deraadt

Backout activation of the new apropos(1)/whatis(1)/makewhatis(8).
In its current state, it causes too much slowdown, in particular
during system builds, and there are other regressions.
That cannot be fixed quickly while it's enabled.

Problems pointed out by espie@, backout requested by deraadt@,
diff "looks good" to espie@.

Enable the new apropos(1), whatis(1), and makewhatis(8).
Unlink the old apropos(1), whatis(1), and makewhatis(8) from the build.
Call the new tools from pkg_create(1) and pkg_add(1).
"Please enable it now." deraadt@

Obsoleted after the makewhatis(8) re-write in 2000.

ok espie schwarze deraadt.

Switch from the old shell script /etc/security
to the new Perl script /usr/libexec/security.
The new script was tested by sthen@ and ajacoutot@.
Committing now due to repeated prodding from deraadt@.
In case problems show up, they will be fixed in tree.

prettier Makefiles

assume that new elf architectures will have ld.so

enable tftp-proxy since it was committed - what's the point otherwise?
ok deraadt

disable old ftp-proxy, ok henning beck

unlink telnet from the builds. dead and buried. cleartext protocols
must die. ok everyone, even grudgingly from millert (though we would
have killed it anyways, irregardless of his opinion)

login script to provide TIS Firewall Toolkit authentication

Add -g option for greylisting support for spamd. The greylisting techinque
originates from a paper by Evan Harris which can be found at
http://projects.puremagic.com/greylisting/. This implementation makes
spamd allow for non-blacklisted addresses to be treated as "greylisted".
where they are tracked in a db file, and whitelisted by addition to a
pf table when the same envelope from and to are retried from the same
source IP address. Testing by many, ok deraadt@

- use :L variable modifier with ELF_TOOLCHAIN variable
- change 2 instances of the check from != "yes" to == "no"

ok deraadt@

krb4 bye bye

spamd-setup, in c. ok deraadt@, he wants to clean in situ.

spamd: work in progress

smtpd leaves the building

Add login_radius back now that the license issue has been resolved

disable login_radius until a license problem is resolved

do not decent into ld.so if it was said NOPIC, even for elf

don't built atrun

use ELF_TOOLCHAIN instead of listing all ELF archs.
drahn@ ok.

rlogind and rexecd go away

branches: 1.26.2; 1.26.4;
Build ld.so on sparc64.

build ftp-proxy

BSD auth module for radius authentication, from BSDi.

Add login_krb5-or-pwd.

Build login_krb5 if KERBEROS5 is set.

Rename login_krb-or-pwd to login_krb4-or-pwd

Rename login_kerberos to login_krb4

Build ld.so on alpha.

build login scripts for BSD authentication

For shared libraries, an ld.so is required.

Boring... Add :L modifier to all tweakable variables tests.

Closes PR 1246

Move the spool locking functionality of "mail.local -H" into its own
program so we can take the setuid bit off of mail.local.

add smtpd.

rpc.lockd moved from libexec to usr.sbin

Don't build LFS, it doesn't work.

Changed ``defined(KERBEROS)'' to ``(${KERBEROS} == "yes")''
Same change doen for SKEY, YP, and KERBEROS5. This allows
people to override those setting in /etc/mk.conf.

Initial integration of userland tcpd.

compile_et belongs in usr.bin

compile_et now resides in /usr/libexec.

grr 2 not p in rpc.yppasswdd, one of the hardest commands in openbsd to type

rpc.yppasswdd, not rpc.yppasswd; obviously peter tested the non-YP case :)

permit YP to be compiled out using flag in bsd.own.mk; pr#15, peter@demon.net

Yeah, make this key...

rpc.lockd

add ypserv

branches: 1.1.1;
Initial revision

descend into reorder_kernel

rpc.yppasswdd goes to the bitbucket.

(The story is that some people do use YP still as a libc -> non-file
lookup mechanism; some of them with standard ypbind/ypserv, but more
of them with ypbind/ypldap. That however does not justify these cruddy
tools dealing with passwords, which are more likely to contain problems)

Remove login_tis, no one should be using the TIS authentication
server these days.

unhook auxcpp

descend into tradcpp

Hook auxcpp

Remove KERBEROS5 from the Makefiles (except ssh for now, where it is
already manually disabled).

ok deraadt@

millert said i can kill rshd

Switch to the new makewhatis(8)/apropos(1)/whatis(1) combo.
"commit the switch now" espie@ "go for it" deraadt@

See the apropos(1) manual for a description of what's new.
On machines where you want the full functionality,
run "sudo makewhatis" and put "MAKEWHATISARGS=' '" into weekly.local(8).
Otherwise, when upgrading via source, run "sudo makewhatis -Q".

libwrap is going away, so can this.
ok tedu

i thought guenther was going to axe uucpd, but he's slacking

Are they going to help?
No.
Well, then tell them to stay out of the way.

ok deraadt

cleanup SUBDIR

disable libexec/identd and enable usr.sbin/identd.

ok sthen@ deraadt@

Always enter this ld.so and subdirectories to create obj (and then the
MI man pages, even if vax currently lacks the programs)

switch off inetd tftp-proxy and enable the standalone one instead.

swap out libexec/tftpd for usr.sbin/tftpd

ok henning@ sthen@ mikeb@
deraadt@ wants this

hook login_yubikey to the build

ok deraadt

Backout activation of the new apropos(1)/whatis(1)/makewhatis(8).
In its current state, it causes too much slowdown, in particular
during system builds, and there are other regressions.
That cannot be fixed quickly while it's enabled.

Problems pointed out by espie@, backout requested by deraadt@,
diff "looks good" to espie@.

Enable the new apropos(1), whatis(1), and makewhatis(8).
Unlink the old apropos(1), whatis(1), and makewhatis(8) from the build.
Call the new tools from pkg_create(1) and pkg_add(1).
"Please enable it now." deraadt@

Obsoleted after the makewhatis(8) re-write in 2000.

ok espie schwarze deraadt.

Switch from the old shell script /etc/security
to the new Perl script /usr/libexec/security.
The new script was tested by sthen@ and ajacoutot@.
Committing now due to repeated prodding from deraadt@.
In case problems show up, they will be fixed in tree.

prettier Makefiles

assume that new elf architectures will have ld.so

enable tftp-proxy since it was committed - what's the point otherwise?
ok deraadt

disable old ftp-proxy, ok henning beck

unlink telnet from the builds. dead and buried. cleartext protocols
must die. ok everyone, even grudgingly from millert (though we would
have killed it anyways, irregardless of his opinion)

login script to provide TIS Firewall Toolkit authentication

Add -g option for greylisting support for spamd. The greylisting techinque
originates from a paper by Evan Harris which can be found at
http://projects.puremagic.com/greylisting/. This implementation makes
spamd allow for non-blacklisted addresses to be treated as "greylisted".
where they are tracked in a db file, and whitelisted by addition to a
pf table when the same envelope from and to are retried from the same
source IP address. Testing by many, ok deraadt@

- use :L variable modifier with ELF_TOOLCHAIN variable
- change 2 instances of the check from != "yes" to == "no"

ok deraadt@

krb4 bye bye

spamd-setup, in c. ok deraadt@, he wants to clean in situ.

spamd: work in progress

smtpd leaves the building

Add login_radius back now that the license issue has been resolved

disable login_radius until a license problem is resolved

do not decent into ld.so if it was said NOPIC, even for elf

don't built atrun

use ELF_TOOLCHAIN instead of listing all ELF archs.
drahn@ ok.

rlogind and rexecd go away

branches: 1.26.2; 1.26.4;
Build ld.so on sparc64.

build ftp-proxy

BSD auth module for radius authentication, from BSDi.

Add login_krb5-or-pwd.

Build login_krb5 if KERBEROS5 is set.

Rename login_krb-or-pwd to login_krb4-or-pwd

Rename login_kerberos to login_krb4

Build ld.so on alpha.

build login scripts for BSD authentication

For shared libraries, an ld.so is required.

Boring... Add :L modifier to all tweakable variables tests.

Closes PR 1246

Move the spool locking functionality of "mail.local -H" into its own
program so we can take the setuid bit off of mail.local.

add smtpd.

rpc.lockd moved from libexec to usr.sbin

Don't build LFS, it doesn't work.

Changed ``defined(KERBEROS)'' to ``(${KERBEROS} == "yes")''
Same change doen for SKEY, YP, and KERBEROS5. This allows
people to override those setting in /etc/mk.conf.

Initial integration of userland tcpd.

compile_et belongs in usr.bin

compile_et now resides in /usr/libexec.

grr 2 not p in rpc.yppasswdd, one of the hardest commands in openbsd to type

rpc.yppasswdd, not rpc.yppasswd; obviously peter tested the non-YP case :)

permit YP to be compiled out using flag in bsd.own.mk; pr#15, peter@demon.net

Yeah, make this key...

rpc.lockd

add ypserv

branches: 1.1.1;
Initial revision