ChangeLog revision 178825
1178825Sdfr2006-12-05  Love H�rnquist �strand  <lha@it.su.se>
2178825Sdfr
3178825Sdfr	* limits_conf.c: Clear errno before calling the strtol
4178825Sdfr	functions. From Paul Stoeber to OpenBSD by Ray Lai and Bj�rn
5178825Sdfr	Sandell.
6178825Sdfr
7178825Sdfr	* limits_conf.c: Report to syslog strings that start with NUL;
8178825Sdfr	prevents negative index array access. Ray Lai of OpenBSD via Bj�rn
9178825Sdfr	Sandell.
10178825Sdfr	
11178825Sdfr2006-10-07  Love H�rnquist �strand  <lha@it.su.se>
12178825Sdfr	
13178825Sdfr	* Makefile.am: Add man_MANS to EXTRA_DIST
14178825Sdfr
15178825Sdfr2006-09-22  Love H�rnquist �strand  <lha@it.su.se>
16178825Sdfr
17178825Sdfr	* read_string.c: try to not call signaction for signal 0 and use
18178825Sdfr	NSIG if it exists to determin how many signals there exists, also,
19178825Sdfr	only restore those signalhandlers that we got out.
20178825Sdfr	
21178825Sdfr2006-04-27  Love H�rnquist �strand  <lha@it.su.se>
22178825Sdfr
23178825Sdfr	* login_locl.h: Include "loginpaths.h"
24178825Sdfr	
25178825Sdfr	* loginpaths.h: Shared paths between login and rshd.
26178825Sdfr	
27178825Sdfr2006-01-09 Johan Danielsson <joda@blubb.pdc.kth.se>
28178825Sdfr
29178825Sdfr	* login.c: log successful logins
30178825Sdfr	
31178825Sdfr2005-08-08  Love H�rnquist �strand <lha@it.su.se>
32178825Sdfr
33178825Sdfr	* login.c (do_login): only do krb4_get_afs_tokens if we have done
34178825Sdfr	v4 authentication or done a 5to4 conversion of tickets. This is to
35178825Sdfr	avoid delays on a realm that only support Kerberos 5 and drop
36178825Sdfr	Kerberos 4 requests.
37178825Sdfr
38178825Sdfr2005-05-10  Dave Love  <fx@gnu.org>
39178825Sdfr
40178825Sdfr	* login.c: Include <crypt.h>.
41178825Sdfr
42178825Sdfr2005-05-02  Dave Love  <fx@gnu.org>
43178825Sdfr
44178825Sdfr	* limits_conf.c: Check RLIMIT_MEMLOCK, not RLIMIT_LOCK.
45178825Sdfr
46178825Sdfr2005-04-28  Dave Love  <fx@gnu.org>
47178825Sdfr
48178825Sdfr	* limits_conf.c: Maybe include sys/resource.h.  Use various
49178825Sdfr	RLIMIT_ macros conditionally.  For Solaris, Irix and Tru64.
50178825Sdfr
51178825Sdfr2005-04-22  Johan Danielsson  <joda@pdc.kth.se>
52178825Sdfr
53178825Sdfr	* login.1: document limits.conf
54178825Sdfr	
55178825Sdfr	* Makefile.am: limits_conf.c
56178825Sdfr	
57178825Sdfr	* login_locl.h: template for limits.conf
58178825Sdfr	
59178825Sdfr	* login.c: read limits.conf (from /etc/security by default,
60178825Sdfr	overridable in login.conf)
61178825Sdfr	
62178825Sdfr	* limits_conf.c: implement a parser for limits.conf
63178825Sdfr	
64142403Snectar2004-09-08  Johan Danielsson  <joda@pdc.kth.se>
65142403Snectar
66178825Sdfr	* login.c: use krb5_appdefault_boolean instead of
67178825Sdfr	krb5_config_get_bool
68142403Snectar
69178825Sdfr2003-09-03  Love H�rnquist �strand <lha@it.su.se>
70178825Sdfr
71178825Sdfr	* login.c (krb5_to4): set client princ of the mcred
72178825Sdfr	
73178825Sdfr2003-07-07  Love H�rnquist �strand <lha@it.su.se>
74178825Sdfr
75178825Sdfr	* login.c (krb5_to4): use krb5_cc_clear_mcred
76178825Sdfr	
77120945Snectar2003-03-24  Johan Danielsson  <joda@pdc.kth.se>
78120945Snectar
79120945Snectar	* Makefile.am: install man pages
80120945Snectar
81120945Snectar	* login.1: manpage for login
82120945Snectar
83120945Snectar	* login.c: allow "welcome" as well as "motd" in login.conf
84120945Snectar
85120945Snectar	* login.access.5: login.access manual page
86120945Snectar
87120945Snectar2003-03-18  Love H�rnquist �strand <lha@it.su.se>
88120945Snectar	
89120945Snectar	* login.c: also need pag_set
90120945Snectar	* login.c: if there is kerberos 5, call krb5_afslog\*
91120945Snectar	
92102644Snectar2002-08-23  Johan Danielsson  <joda@pdc.kth.se>
93102644Snectar
94102644Snectar	* login.c: if motd is set in login.conf, output its contents
95102644Snectar	before starting the shell
96102644Snectar
97102644Snectar2002-02-27  Johan Danielsson  <joda@pdc.kth.se>
98102644Snectar
99102644Snectar	* login.c: reset signals to default, needed on solaris 8
100102644Snectar
101102644Snectar2002-02-19  Johan Danielsson  <joda@pdc.kth.se>
102102644Snectar
103102644Snectar	* login_locl.h: include netgroup.h and rpcsvc/ypclnt.h
104102644Snectar
105102644Snectar	* login.c: make this build without krb5
106102644Snectar
107102644Snectar2001-09-22  Assar Westerlund  <assar@sics.se>
108102644Snectar
109102644Snectar	* login_locl.h: kludge: use absolute path to find prot.h so we do
110102644Snectar	not get confused by athena's prot.h
111102644Snectar
11290926Snectar2001-09-17  Assar Westerlund  <assar@sics.se>
11390926Snectar
11490926Snectar	* login.c (do_login): add setpcred
11590926Snectar
11690926Snectar2001-07-06  Assar Westerlund  <assar@sics.se>
11790926Snectar
11890926Snectar	* login.c: move osf2c magic earlier.  from Mark Davies
11990926Snectar	<mark@MCS.VUW.AC.NZ>
12090926Snectar
12190926Snectar2001-06-19  Assar Westerlund  <assar@sics.se>
12290926Snectar
12390926Snectar	* login.c (krb5_to4): dereference result from krb5_princ_realm.
12490926Snectar	noted by Thomas Nystrom <thn@saeab.se>
12590926Snectar
12690926Snectar2001-06-04  Assar Westerlund  <assar@sics.se>
12790926Snectar
12890926Snectar	* update copyright messages on Wietse Venema's code.
12990926Snectar
13090926Snectar2001-05-31  Assar Westerlund  <assar@sics.se>
13190926Snectar
13290926Snectar	* login.c (krb5_to4): look for [realms]<realm>krb4_get_tickets to
13390926Snectar	decide whether to get kerberos 4 tickets
13490926Snectar
13578527Sassar2001-02-08  Assar Westerlund  <assar@sics.se>
13678527Sassar
13778527Sassar	* utmp_login.c, utmpx_login.c: try to write a useful string as
13878527Sassar	host in utmp, using the same algoritm as telnetd
13978527Sassar
14072445Sassar2001-01-29  Assar Westerlund  <assar@sics.se>
14172445Sassar
14272445Sassar	* login.c: remove some krb5_free_context that might happen at
14372445Sassar	unappropriate times
14472445Sassar
14572445Sassar2000-12-31  Assar Westerlund  <assar@sics.se>
14672445Sassar
14772445Sassar	* login.c (main): handle krb5_init_context failure consistently
14872445Sassar
14972445Sassar2000-12-11  Assar Westerlund  <assar@sics.se>
15072445Sassar
15172445Sassar	* login.c (do_login): set the group on the tty.
15272445Sassar	(r_flag): comment out
15372445Sassar	* login.c (krb5_to4): always return a value
15472445Sassar
15572445Sassar2000-10-15  Assar Westerlund  <assar@sics.se>
15672445Sassar
15772445Sassar	* login.c (krb5_to4): check another return code
15872445Sassar
15972445Sassar2000-08-22  Johan Danielsson  <joda@pdc.kth.se>
16072445Sassar
16172445Sassar	* login.c (do_login): set PATH to something sane;
16272445Sassar	(start_logout_process): avoid getting signals sent to the parent
16372445Sassar
16472445Sassar	* login_locl.h: _PATH_DEFPATH
16572445Sassar
16672445Sassar2000-07-01  Assar Westerlund  <assar@sics.se>
16772445Sassar
16872445Sassar	* login.c (login_timeout): add back
16972445Sassar
17072445Sassar2000-06-28  Johan Danielsson  <joda@pdc.kth.se>
17172445Sassar
17272445Sassar	* env.c: new file for environment related functions
17372445Sassar
17472445Sassar	* login.c: move environment stuff to separate file, allow
17572445Sassar	specifying list of environment files via login.conf
17672445Sassar
17772445Sassar2000-06-21  Assar Westerlund  <assar@sics.se>
17872445Sassar
17972445Sassar	* Makefile.am (LDADD): add otp
18072445Sassar	* login.c: add reading of /etc/environment.  From Ake Sandgren
18172445Sassar	<ake@cs.umu.se>
18272445Sassar	add otp support. From Daniel Kouril <kouril@ics.muni.cz>
18372445Sassar
18472445Sassar2000-06-09  Assar Westerlund  <assar@sics.se>
18572445Sassar
18672445Sassar	* login.c (do_login): work-around for setuid and capabilities bug
18772445Sassar	fixed in Linux 2.2.16
18872445Sassar
18972445Sassar2000-04-09  Assar Westerlund  <assar@sics.se>
19072445Sassar
19172445Sassar	* login.c: allow conversion of v5 -> v4 tickets when logging in
19272445Sassar	with forwarded tickets
19372445Sassar
19455682Smarkm1999-11-09  Johan Danielsson  <joda@pdc.kth.se>
19555682Smarkm
19655682Smarkm	* conf.c: remove case for not having cgetent, since it's in roken
19755682Smarkm
19855682Smarkm1999-11-05  Assar Westerlund  <assar@sics.se>
19955682Smarkm
20055682Smarkm	* login.c (do_login): conditionalize shadow stuff on getspnam
20155682Smarkm
20255682Smarkm1999-10-30  Assar Westerlund  <assar@sics.se>
20355682Smarkm
20455682Smarkm	* Makefile.am (login_DEPENDENCIES): remove, it's not entirely
20555682Smarkm 	correct and was causing problems with non-GNU make
20655682Smarkm
20755682Smarkm1999-10-28  Assar Westerlund  <assar@sics.se>
20855682Smarkm
20955682Smarkm	* login.c (start_logout_proceess): don't examine `prog' before
21055682Smarkm 	setting it.
21155682Smarkm
21255682Smarkm1999-10-27  Assar Westerlund  <assar@sics.se>
21355682Smarkm
21455682Smarkm	* login.c (do_login): chown and chmod the tty.  some clean-up.
21555682Smarkm
21655682Smarkm1999-10-03  Assar Westerlund  <assar@sics.se>
21755682Smarkm
21855682Smarkm	* login.c (krb5_start_session): correct the ccache to
21955682Smarkm 	krb524_convert_creds_kdc
22055682Smarkm
22155682Smarkm1999-09-28  Assar Westerlund  <assar@sics.se>
22255682Smarkm
22355682Smarkm	* login.c (krb5_verify): use krb5_verify_user_lrealm
22455682Smarkm
22555682Smarkm1999-09-01  Johan Danielsson  <joda@pdc.kth.se>
22655682Smarkm
22755682Smarkm	* login.c: SGI capability mumbo-jumbo
22855682Smarkm
22955682Smarkm1999-08-09  Johan Danielsson  <joda@pdc.kth.se>
23055682Smarkm
23155682Smarkm	* login.c (start_logout_process): call setproctitle
23255682Smarkm
23355682Smarkm	* login_locl.h: declare struct spwd
23455682Smarkm
23555682Smarkm	* login.c: add support for starting extra processes at login and
23655682Smarkm	logout; always preserve TERM and TZ
23755682Smarkm
23855682Smarkm	* conf.c: add configuration file support
23955682Smarkm
24055682Smarkm1999-08-07  Assar Westerlund  <assar@sics.se>
24155682Smarkm
24255682Smarkm	* shadow.c (check_shadow): check for a NULL sp
24355682Smarkm
24455682Smarkm1999-08-05  Assar Westerlund  <assar@sics.se>
24555682Smarkm
24655682Smarkm	* login.c (main): move down login incorrect to disallow account
24755682Smarkm 	guessing
24855682Smarkm
24955682Smarkm1999-08-04  Assar Westerlund  <assar@sics.se>
25055682Smarkm
25155682Smarkm	* utmpx_login.c (utmpx_login): fix for Solaris.  From Miroslav
25255682Smarkm 	Ruda <ruda@ics.muni.cz>
25355682Smarkm
25455682Smarkm	* login_locl.h: add <shadow.h> and some prototypes
25555682Smarkm
25655682Smarkm	* login.c: fixes with v4 and shadow support.  From Miroslav Ruda
25755682Smarkm 	<ruda@ics.muni.cz>
25855682Smarkm
25955682Smarkm	* shadow.c: new file with functions for handling shadow passwords
26055682Smarkm
26155682Smarkm	* Makefile.am: add shadow
26255682Smarkm
26355682Smarkm1999-07-22  Assar Westerlund  <assar@sics.se>
26455682Smarkm
26555682Smarkm	* login.c (main): generate a better tty name
26655682Smarkm
26755682Smarkm1999-05-25  Johan Danielsson  <joda@pdc.kth.se>
26855682Smarkm
26955682Smarkm	* login.c (do_login): set $SHELL
27055682Smarkm
27155682Smarkm1999-05-18  Assar Westerlund  <assar@sics.se>
27255682Smarkm
27355682Smarkm	* add login-access
27455682Smarkm
27555682Smarkm1999-05-11  Assar Westerlund  <assar@sics.se>
27655682Smarkm
27755682Smarkm	* login.c: copy the v5 ccache to a file after having done setuid
27855682Smarkm
27955682Smarkm1999-05-09  Assar Westerlund  <assar@sics.se>
28055682Smarkm
28155682Smarkm	* login.c (krb5_verify): check seteuid for errors
28255682Smarkm	
28355682SmarkmMon Apr 19 22:30:55 1999  Assar Westerlund  <assar@sics.se>
28455682Smarkm
28555682Smarkm	* login.c: conditionalize the kafs calls on KRB4
28655682Smarkm
28755682Smarkm	* Makefile.am (LDADD): add kafs
28855682Smarkm
28955682Smarkm	* login.c: add support for getting afs tokens with v4 and v5
29055682Smarkm
29155682SmarkmSun Apr 18 14:12:28 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
29255682Smarkm
29355682Smarkm	* login.c: check _PATH_NOLOGIN
29455682Smarkm
29555682Smarkm	* login_locl.h: _PATH_NOLOGIN
29655682Smarkm
29755682Smarkm1999-04-11  Assar Westerlund  <assar@sics.se>
29855682Smarkm
29955682Smarkm	* login.c (main): use print_version
30055682Smarkm
30155682SmarkmThu Apr  8 15:03:55 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
30255682Smarkm
30355682Smarkm	* login.c: remove definition of KRB_VERIFY_USER et.al. (moved to
30455682Smarkm 	config.h)
30555682Smarkm
30655682Smarkm	* login_locl.h: include udb.h, sys/resource.h, and sys/category.h
30755682Smarkm
30855682SmarkmSat Mar 27 17:58:37 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
30955682Smarkm
31055682Smarkm	* Makefile.am: osfc2.c
31155682Smarkm
31255682Smarkm	* login.c: magic for OSF C2, and Crays
31355682Smarkm
31455682Smarkm	* login_locl.h: do_osfc2_magic proto
31555682Smarkm
31655682Smarkm	* osfc2.c: bsd_locl -> login_locl
31755682Smarkm
31855682Smarkm	* osfc2.c: OSF C2 magic
31955682Smarkm
32055682SmarkmTue Mar 23 14:17:40 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
32155682Smarkm
32255682Smarkm	* login_locl.h: _PATH_UTMP
32355682Smarkm
32455682SmarkmSun Mar 21 15:02:31 1999  Johan Danielsson  <joda@blubb.pdc.kth.se>
32555682Smarkm
32655682Smarkm	* login.c: `-h' is host, not help
32755682Smarkm
32855682SmarkmSat Mar 20 00:11:13 1999  Assar Westerlund  <assar@sics.se>
32955682Smarkm
33055682Smarkm	* login_locl.h: krb.h: add
33155682Smarkm
33255682Smarkm	* login.c: static-size
33355682Smarkm	(krb4_verify): add
33455682Smarkm
33555682SmarkmThu Mar 18 11:36:10 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
33655682Smarkm
33755682Smarkm	* Makefile.am: include Makefile.am.common
33855682Smarkm
33955682SmarkmThu Mar 11 17:53:36 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
34055682Smarkm
34155682Smarkm	* utmpx_login.c: add some consts
34255682Smarkm
34355682Smarkm	* utmp_login.c: add some consts
34455682Smarkm
34555682Smarkm	* login.c: staticize
34655682Smarkm
34755682Smarkm	* login_locl.h: add prototypes, and defaults for
34855682Smarkm 	_PATH_*
34955682Smarkm
35055682SmarkmMon Mar  1 10:49:14 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
35155682Smarkm
35255682Smarkm	* utmpx_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*
35355682Smarkm
35455682Smarkm	* utmp_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*
35555682Smarkm
356