ChangeLog revision 178825
1178825Sdfr2006-12-05 Love H�rnquist �strand <lha@it.su.se> 2178825Sdfr 3178825Sdfr * limits_conf.c: Clear errno before calling the strtol 4178825Sdfr functions. From Paul Stoeber to OpenBSD by Ray Lai and Bj�rn 5178825Sdfr Sandell. 6178825Sdfr 7178825Sdfr * limits_conf.c: Report to syslog strings that start with NUL; 8178825Sdfr prevents negative index array access. Ray Lai of OpenBSD via Bj�rn 9178825Sdfr Sandell. 10178825Sdfr 11178825Sdfr2006-10-07 Love H�rnquist �strand <lha@it.su.se> 12178825Sdfr 13178825Sdfr * Makefile.am: Add man_MANS to EXTRA_DIST 14178825Sdfr 15178825Sdfr2006-09-22 Love H�rnquist �strand <lha@it.su.se> 16178825Sdfr 17178825Sdfr * read_string.c: try to not call signaction for signal 0 and use 18178825Sdfr NSIG if it exists to determin how many signals there exists, also, 19178825Sdfr only restore those signalhandlers that we got out. 20178825Sdfr 21178825Sdfr2006-04-27 Love H�rnquist �strand <lha@it.su.se> 22178825Sdfr 23178825Sdfr * login_locl.h: Include "loginpaths.h" 24178825Sdfr 25178825Sdfr * loginpaths.h: Shared paths between login and rshd. 26178825Sdfr 27178825Sdfr2006-01-09 Johan Danielsson <joda@blubb.pdc.kth.se> 28178825Sdfr 29178825Sdfr * login.c: log successful logins 30178825Sdfr 31178825Sdfr2005-08-08 Love H�rnquist �strand <lha@it.su.se> 32178825Sdfr 33178825Sdfr * login.c (do_login): only do krb4_get_afs_tokens if we have done 34178825Sdfr v4 authentication or done a 5to4 conversion of tickets. This is to 35178825Sdfr avoid delays on a realm that only support Kerberos 5 and drop 36178825Sdfr Kerberos 4 requests. 37178825Sdfr 38178825Sdfr2005-05-10 Dave Love <fx@gnu.org> 39178825Sdfr 40178825Sdfr * login.c: Include <crypt.h>. 41178825Sdfr 42178825Sdfr2005-05-02 Dave Love <fx@gnu.org> 43178825Sdfr 44178825Sdfr * limits_conf.c: Check RLIMIT_MEMLOCK, not RLIMIT_LOCK. 45178825Sdfr 46178825Sdfr2005-04-28 Dave Love <fx@gnu.org> 47178825Sdfr 48178825Sdfr * limits_conf.c: Maybe include sys/resource.h. Use various 49178825Sdfr RLIMIT_ macros conditionally. For Solaris, Irix and Tru64. 50178825Sdfr 51178825Sdfr2005-04-22 Johan Danielsson <joda@pdc.kth.se> 52178825Sdfr 53178825Sdfr * login.1: document limits.conf 54178825Sdfr 55178825Sdfr * Makefile.am: limits_conf.c 56178825Sdfr 57178825Sdfr * login_locl.h: template for limits.conf 58178825Sdfr 59178825Sdfr * login.c: read limits.conf (from /etc/security by default, 60178825Sdfr overridable in login.conf) 61178825Sdfr 62178825Sdfr * limits_conf.c: implement a parser for limits.conf 63178825Sdfr 64142403Snectar2004-09-08 Johan Danielsson <joda@pdc.kth.se> 65142403Snectar 66178825Sdfr * login.c: use krb5_appdefault_boolean instead of 67178825Sdfr krb5_config_get_bool 68142403Snectar 69178825Sdfr2003-09-03 Love H�rnquist �strand <lha@it.su.se> 70178825Sdfr 71178825Sdfr * login.c (krb5_to4): set client princ of the mcred 72178825Sdfr 73178825Sdfr2003-07-07 Love H�rnquist �strand <lha@it.su.se> 74178825Sdfr 75178825Sdfr * login.c (krb5_to4): use krb5_cc_clear_mcred 76178825Sdfr 77120945Snectar2003-03-24 Johan Danielsson <joda@pdc.kth.se> 78120945Snectar 79120945Snectar * Makefile.am: install man pages 80120945Snectar 81120945Snectar * login.1: manpage for login 82120945Snectar 83120945Snectar * login.c: allow "welcome" as well as "motd" in login.conf 84120945Snectar 85120945Snectar * login.access.5: login.access manual page 86120945Snectar 87120945Snectar2003-03-18 Love H�rnquist �strand <lha@it.su.se> 88120945Snectar 89120945Snectar * login.c: also need pag_set 90120945Snectar * login.c: if there is kerberos 5, call krb5_afslog\* 91120945Snectar 92102644Snectar2002-08-23 Johan Danielsson <joda@pdc.kth.se> 93102644Snectar 94102644Snectar * login.c: if motd is set in login.conf, output its contents 95102644Snectar before starting the shell 96102644Snectar 97102644Snectar2002-02-27 Johan Danielsson <joda@pdc.kth.se> 98102644Snectar 99102644Snectar * login.c: reset signals to default, needed on solaris 8 100102644Snectar 101102644Snectar2002-02-19 Johan Danielsson <joda@pdc.kth.se> 102102644Snectar 103102644Snectar * login_locl.h: include netgroup.h and rpcsvc/ypclnt.h 104102644Snectar 105102644Snectar * login.c: make this build without krb5 106102644Snectar 107102644Snectar2001-09-22 Assar Westerlund <assar@sics.se> 108102644Snectar 109102644Snectar * login_locl.h: kludge: use absolute path to find prot.h so we do 110102644Snectar not get confused by athena's prot.h 111102644Snectar 11290926Snectar2001-09-17 Assar Westerlund <assar@sics.se> 11390926Snectar 11490926Snectar * login.c (do_login): add setpcred 11590926Snectar 11690926Snectar2001-07-06 Assar Westerlund <assar@sics.se> 11790926Snectar 11890926Snectar * login.c: move osf2c magic earlier. from Mark Davies 11990926Snectar <mark@MCS.VUW.AC.NZ> 12090926Snectar 12190926Snectar2001-06-19 Assar Westerlund <assar@sics.se> 12290926Snectar 12390926Snectar * login.c (krb5_to4): dereference result from krb5_princ_realm. 12490926Snectar noted by Thomas Nystrom <thn@saeab.se> 12590926Snectar 12690926Snectar2001-06-04 Assar Westerlund <assar@sics.se> 12790926Snectar 12890926Snectar * update copyright messages on Wietse Venema's code. 12990926Snectar 13090926Snectar2001-05-31 Assar Westerlund <assar@sics.se> 13190926Snectar 13290926Snectar * login.c (krb5_to4): look for [realms]<realm>krb4_get_tickets to 13390926Snectar decide whether to get kerberos 4 tickets 13490926Snectar 13578527Sassar2001-02-08 Assar Westerlund <assar@sics.se> 13678527Sassar 13778527Sassar * utmp_login.c, utmpx_login.c: try to write a useful string as 13878527Sassar host in utmp, using the same algoritm as telnetd 13978527Sassar 14072445Sassar2001-01-29 Assar Westerlund <assar@sics.se> 14172445Sassar 14272445Sassar * login.c: remove some krb5_free_context that might happen at 14372445Sassar unappropriate times 14472445Sassar 14572445Sassar2000-12-31 Assar Westerlund <assar@sics.se> 14672445Sassar 14772445Sassar * login.c (main): handle krb5_init_context failure consistently 14872445Sassar 14972445Sassar2000-12-11 Assar Westerlund <assar@sics.se> 15072445Sassar 15172445Sassar * login.c (do_login): set the group on the tty. 15272445Sassar (r_flag): comment out 15372445Sassar * login.c (krb5_to4): always return a value 15472445Sassar 15572445Sassar2000-10-15 Assar Westerlund <assar@sics.se> 15672445Sassar 15772445Sassar * login.c (krb5_to4): check another return code 15872445Sassar 15972445Sassar2000-08-22 Johan Danielsson <joda@pdc.kth.se> 16072445Sassar 16172445Sassar * login.c (do_login): set PATH to something sane; 16272445Sassar (start_logout_process): avoid getting signals sent to the parent 16372445Sassar 16472445Sassar * login_locl.h: _PATH_DEFPATH 16572445Sassar 16672445Sassar2000-07-01 Assar Westerlund <assar@sics.se> 16772445Sassar 16872445Sassar * login.c (login_timeout): add back 16972445Sassar 17072445Sassar2000-06-28 Johan Danielsson <joda@pdc.kth.se> 17172445Sassar 17272445Sassar * env.c: new file for environment related functions 17372445Sassar 17472445Sassar * login.c: move environment stuff to separate file, allow 17572445Sassar specifying list of environment files via login.conf 17672445Sassar 17772445Sassar2000-06-21 Assar Westerlund <assar@sics.se> 17872445Sassar 17972445Sassar * Makefile.am (LDADD): add otp 18072445Sassar * login.c: add reading of /etc/environment. From Ake Sandgren 18172445Sassar <ake@cs.umu.se> 18272445Sassar add otp support. From Daniel Kouril <kouril@ics.muni.cz> 18372445Sassar 18472445Sassar2000-06-09 Assar Westerlund <assar@sics.se> 18572445Sassar 18672445Sassar * login.c (do_login): work-around for setuid and capabilities bug 18772445Sassar fixed in Linux 2.2.16 18872445Sassar 18972445Sassar2000-04-09 Assar Westerlund <assar@sics.se> 19072445Sassar 19172445Sassar * login.c: allow conversion of v5 -> v4 tickets when logging in 19272445Sassar with forwarded tickets 19372445Sassar 19455682Smarkm1999-11-09 Johan Danielsson <joda@pdc.kth.se> 19555682Smarkm 19655682Smarkm * conf.c: remove case for not having cgetent, since it's in roken 19755682Smarkm 19855682Smarkm1999-11-05 Assar Westerlund <assar@sics.se> 19955682Smarkm 20055682Smarkm * login.c (do_login): conditionalize shadow stuff on getspnam 20155682Smarkm 20255682Smarkm1999-10-30 Assar Westerlund <assar@sics.se> 20355682Smarkm 20455682Smarkm * Makefile.am (login_DEPENDENCIES): remove, it's not entirely 20555682Smarkm correct and was causing problems with non-GNU make 20655682Smarkm 20755682Smarkm1999-10-28 Assar Westerlund <assar@sics.se> 20855682Smarkm 20955682Smarkm * login.c (start_logout_proceess): don't examine `prog' before 21055682Smarkm setting it. 21155682Smarkm 21255682Smarkm1999-10-27 Assar Westerlund <assar@sics.se> 21355682Smarkm 21455682Smarkm * login.c (do_login): chown and chmod the tty. some clean-up. 21555682Smarkm 21655682Smarkm1999-10-03 Assar Westerlund <assar@sics.se> 21755682Smarkm 21855682Smarkm * login.c (krb5_start_session): correct the ccache to 21955682Smarkm krb524_convert_creds_kdc 22055682Smarkm 22155682Smarkm1999-09-28 Assar Westerlund <assar@sics.se> 22255682Smarkm 22355682Smarkm * login.c (krb5_verify): use krb5_verify_user_lrealm 22455682Smarkm 22555682Smarkm1999-09-01 Johan Danielsson <joda@pdc.kth.se> 22655682Smarkm 22755682Smarkm * login.c: SGI capability mumbo-jumbo 22855682Smarkm 22955682Smarkm1999-08-09 Johan Danielsson <joda@pdc.kth.se> 23055682Smarkm 23155682Smarkm * login.c (start_logout_process): call setproctitle 23255682Smarkm 23355682Smarkm * login_locl.h: declare struct spwd 23455682Smarkm 23555682Smarkm * login.c: add support for starting extra processes at login and 23655682Smarkm logout; always preserve TERM and TZ 23755682Smarkm 23855682Smarkm * conf.c: add configuration file support 23955682Smarkm 24055682Smarkm1999-08-07 Assar Westerlund <assar@sics.se> 24155682Smarkm 24255682Smarkm * shadow.c (check_shadow): check for a NULL sp 24355682Smarkm 24455682Smarkm1999-08-05 Assar Westerlund <assar@sics.se> 24555682Smarkm 24655682Smarkm * login.c (main): move down login incorrect to disallow account 24755682Smarkm guessing 24855682Smarkm 24955682Smarkm1999-08-04 Assar Westerlund <assar@sics.se> 25055682Smarkm 25155682Smarkm * utmpx_login.c (utmpx_login): fix for Solaris. From Miroslav 25255682Smarkm Ruda <ruda@ics.muni.cz> 25355682Smarkm 25455682Smarkm * login_locl.h: add <shadow.h> and some prototypes 25555682Smarkm 25655682Smarkm * login.c: fixes with v4 and shadow support. From Miroslav Ruda 25755682Smarkm <ruda@ics.muni.cz> 25855682Smarkm 25955682Smarkm * shadow.c: new file with functions for handling shadow passwords 26055682Smarkm 26155682Smarkm * Makefile.am: add shadow 26255682Smarkm 26355682Smarkm1999-07-22 Assar Westerlund <assar@sics.se> 26455682Smarkm 26555682Smarkm * login.c (main): generate a better tty name 26655682Smarkm 26755682Smarkm1999-05-25 Johan Danielsson <joda@pdc.kth.se> 26855682Smarkm 26955682Smarkm * login.c (do_login): set $SHELL 27055682Smarkm 27155682Smarkm1999-05-18 Assar Westerlund <assar@sics.se> 27255682Smarkm 27355682Smarkm * add login-access 27455682Smarkm 27555682Smarkm1999-05-11 Assar Westerlund <assar@sics.se> 27655682Smarkm 27755682Smarkm * login.c: copy the v5 ccache to a file after having done setuid 27855682Smarkm 27955682Smarkm1999-05-09 Assar Westerlund <assar@sics.se> 28055682Smarkm 28155682Smarkm * login.c (krb5_verify): check seteuid for errors 28255682Smarkm 28355682SmarkmMon Apr 19 22:30:55 1999 Assar Westerlund <assar@sics.se> 28455682Smarkm 28555682Smarkm * login.c: conditionalize the kafs calls on KRB4 28655682Smarkm 28755682Smarkm * Makefile.am (LDADD): add kafs 28855682Smarkm 28955682Smarkm * login.c: add support for getting afs tokens with v4 and v5 29055682Smarkm 29155682SmarkmSun Apr 18 14:12:28 1999 Johan Danielsson <joda@hella.pdc.kth.se> 29255682Smarkm 29355682Smarkm * login.c: check _PATH_NOLOGIN 29455682Smarkm 29555682Smarkm * login_locl.h: _PATH_NOLOGIN 29655682Smarkm 29755682Smarkm1999-04-11 Assar Westerlund <assar@sics.se> 29855682Smarkm 29955682Smarkm * login.c (main): use print_version 30055682Smarkm 30155682SmarkmThu Apr 8 15:03:55 1999 Johan Danielsson <joda@hella.pdc.kth.se> 30255682Smarkm 30355682Smarkm * login.c: remove definition of KRB_VERIFY_USER et.al. (moved to 30455682Smarkm config.h) 30555682Smarkm 30655682Smarkm * login_locl.h: include udb.h, sys/resource.h, and sys/category.h 30755682Smarkm 30855682SmarkmSat Mar 27 17:58:37 1999 Johan Danielsson <joda@hella.pdc.kth.se> 30955682Smarkm 31055682Smarkm * Makefile.am: osfc2.c 31155682Smarkm 31255682Smarkm * login.c: magic for OSF C2, and Crays 31355682Smarkm 31455682Smarkm * login_locl.h: do_osfc2_magic proto 31555682Smarkm 31655682Smarkm * osfc2.c: bsd_locl -> login_locl 31755682Smarkm 31855682Smarkm * osfc2.c: OSF C2 magic 31955682Smarkm 32055682SmarkmTue Mar 23 14:17:40 1999 Johan Danielsson <joda@hella.pdc.kth.se> 32155682Smarkm 32255682Smarkm * login_locl.h: _PATH_UTMP 32355682Smarkm 32455682SmarkmSun Mar 21 15:02:31 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 32555682Smarkm 32655682Smarkm * login.c: `-h' is host, not help 32755682Smarkm 32855682SmarkmSat Mar 20 00:11:13 1999 Assar Westerlund <assar@sics.se> 32955682Smarkm 33055682Smarkm * login_locl.h: krb.h: add 33155682Smarkm 33255682Smarkm * login.c: static-size 33355682Smarkm (krb4_verify): add 33455682Smarkm 33555682SmarkmThu Mar 18 11:36:10 1999 Johan Danielsson <joda@hella.pdc.kth.se> 33655682Smarkm 33755682Smarkm * Makefile.am: include Makefile.am.common 33855682Smarkm 33955682SmarkmThu Mar 11 17:53:36 1999 Johan Danielsson <joda@hella.pdc.kth.se> 34055682Smarkm 34155682Smarkm * utmpx_login.c: add some consts 34255682Smarkm 34355682Smarkm * utmp_login.c: add some consts 34455682Smarkm 34555682Smarkm * login.c: staticize 34655682Smarkm 34755682Smarkm * login_locl.h: add prototypes, and defaults for 34855682Smarkm _PATH_* 34955682Smarkm 35055682SmarkmMon Mar 1 10:49:14 1999 Johan Danielsson <joda@hella.pdc.kth.se> 35155682Smarkm 35255682Smarkm * utmpx_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_* 35355682Smarkm 35455682Smarkm * utmp_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_* 35555682Smarkm 356