1124208SdesDocumentation: 2124208Sdes 3124208Sdes- Update the docs 4124208Sdes - Update README 5124208Sdes - Update INSTALL 6124208Sdes - Merge INSTALL & README.privsep 7124208Sdes 8124208Sdes- Install FAQ? 9124208Sdes 10124208Sdes- General FAQ on S/Key, TIS, RSA, RSA2, DSA, etc and suggestions on when it 11126274Sdes would be best to use them. 12124208Sdes 13124208Sdes- Create a Documentation/ directory? 14124208Sdes 1598937SdesProgramming: 16124208Sdes 1798937Sdes- Grep for 'XXX' comments and fix 1898937Sdes 1998937Sdes- Link order is incorrect for some systems using Kerberos 4 and AFS. Result 20126274Sdes is multiple inclusion of DES symbols. Holger Trapp 2198937Sdes <holger.trapp@hrz.tu-chemnitz.de> reports that changing the configure 2298937Sdes generated link order from: 2398937Sdes -lresolv -lkrb -lz -lnsl -lutil -lkafs -lkrb -ldes -lcrypto 2498937Sdes to: 2598937Sdes -lresolv -lkrb -lz -lnsl -lutil -lcrypto -lkafs -lkrb -ldes 2698937Sdes fixing the problem. 2798937Sdes 2898937Sdes- Write a test program that calls stat() to search for EGD/PRNGd socket 29126274Sdes rather than use the (non-portable) "test -S". 3098937Sdes 31113908Sdes- More platforms for for setproctitle() emulation (testing needed) 3298937Sdes 33124208Sdes- Improve PAM ChallengeResponseAuthentication 34124208Sdes - Informational messages 3598937Sdes - Use different PAM service name for kbdint vs regular auth (suggest from 3698937Sdes Solar Designer) 3798937Sdes - Ability to select which ChallengeResponseAuthentications may be used 3898937Sdes and order to try them in e.g. "ChallengeResponseAuthentication skey, pam" 3998937Sdes 4098937Sdes- Complete Tru64 SIA support 4198937Sdes - It looks like we could merge it into the password auth code to cut down 4298937Sdes on diff size. Maybe PAM password auth too? 4398937Sdes 4498937Sdes- Finish integrating kernel-level auditing code for IRIX and SOLARIS 4598937Sdes (Gilbert.r.loomis@saic.com) 4698937Sdes 4798937Sdes- 64-bit builds on HP-UX 11.X (stevesk@pobox.com): 4898937Sdes - utmp/wtmp get corrupted (something in loginrec?) 4998937Sdes - can't build with PAM (no 64-bit libpam yet) 5098937Sdes 5198937SdesClean up configure/makefiles: 5298937Sdes- Clean up configure.ac - There are a few double #defined variables 5398937Sdes left to do. HAVE_LOGIN is one of them. Consider NOT looking for 5498937Sdes information in wtmpx or utmpx or any of that stuff if it's not detected 5598937Sdes from the start 5698937Sdes 5798937Sdes- Replace the whole u_intXX_t evilness in acconfig.h with something better??? 58113908Sdes - Do it in configure.ac 5998937Sdes 6098937Sdes- Consider splitting the u_intXX_t test for sys/bitype.h into seperate test 6198937Sdes to allow people to (right/wrongfully) link against Bind directly. 6298937Sdes 6398937Sdes- Consider splitting configure.ac into seperate files which do logically 64126274Sdes similar tests. E.g move all the type detection stuff into one file, 6598937Sdes entropy related stuff into another. 6698937Sdes 6798937SdesPackaging: 6898937Sdes- HP-UX: Provide DEPOT package scripts. 6998937Sdes (gilbert.r.loomis@saic.com) 7098937Sdes 7199060SdesPrivSep Issues: 7299060Sdes- mmap() issues. 7399060Sdes + /dev/zero solution (Solaris) 7499060Sdes + No/broken MAP_ANON (Irix) 7599060Sdes + broken /dev/zero parse (Linux) 76126274Sdes- PAM 7799060Sdes + See above PAM notes 7899060Sdes- AIX 79124208Sdes + usrinfo() does not set TTY, but only required for legacy systems. Works 8099060Sdes with PrivSep. 8199060Sdes- OSF 8299060Sdes + SIA is broken 8399060Sdes- Cygwin 8499060Sdes + Privsep for Pre-auth only (no fd passing) 8599060Sdes 86146998Sdes$Id: TODO,v 1.58 2004/12/06 11:40:11 dtucker Exp $ 87