xref: /freebsd-10.3-release/crypto/heimdal/appl/rsh/ChangeLog

2007-07-12  Love H��rnquist ��strand  <lha@it.su.se>

	* rsh.c: Fix pointer vs strict alias rules.

	* rshd.c: Fix pointer vs strict alias rules.

2007-01-04  Love H��rnquist ��strand  <lha@it.su.se>
	
	* rshd.c: Declare iruserok if needed, based on bug report from
	David Love.
	
2006-11-14  Love H��rnquist ��strand  <lha@it.su.se>
	
	* rsh_locl.h: Forward decl.
	
2006-10-14  Love H��rnquist ��strand  <lha@it.su.se>

	* rsh_locl.h: Include "crypto-headers.h".
	
2006-10-07  Love H��rnquist ��strand  <lha@it.su.se>

	* Makefile.am: Add man_MANS to EXTRA_DIST
	
2006-04-27  Love H��rnquist ��strand  <lha@it.su.se>

	* Makefile.am: rshd_SOURCES += add limits_conf.c

	* rsh_locl.h: Include "loginpaths.h"

	* rshd.c: Read limits from limits.confon non-root login, patch
	from Daniel Ahlin
	
2006-02-27 Johan Danielsson <joda@pdc.kth.se>

	* rshd.8: grammar (from Thomas Klausner)
	
2006-01-31  Johan Danielsson  <joda@pdc.kth.se>

	* rshd.c (krb5_start_session): syslog failures to store cred cache
	
2005-12-21  Love H��rnquist ��strand  <lha@it.su.se>

	* rshd.c (doit): move creation of users ticket file to later to
	avoid seteuid/setuid dance. this breaks DCE, so remove support for
	it completely.
	
2005-10-22  Love H��rnquist ��strand  <lha@it.su.se>

	* rshd.c: Check return value from asprintf instead of string !=
	NULL since it undefined behavior on Linux. From Bj��rn Sandell

	* rsh.c: Check return value from asprintf instead of string !=
	NULL since it undefined behavior on Linux. From Bj��rn Sandell

2005-06-08  Love H��rnquist ��strand  <lha@it.su.se>

	* rshd.c: init some important variables and check that they are
	set checking authentication, all to please gcc

2005-05-27  Love H��rnquist ��strand  <lha@it.su.se>

	* rshd.c: case uid_t to unsigned long in printf format
	
2005-04-27  Love H��rnquist ��strand  <lha@it.su.se>

	* rsh_locl.h: Use larger buffer for recving data to be compatible
	with older versions of heimdal (0.4 branch specificly)

	* rshd.c: Use larger buffer for recving data to be compatible with
	older versions of heimdal (0.4 branch specificly)

2005-04-25  Love H��rnquist ��strand  <lha@it.su.se>

	* rshd.c: use snprintf to format tkfile
	
2005-04-24  Love H��rnquist ��strand  <lha@it.su.se>

	* rsh.c: use strlcat

	* rsh.c: use strlcpy

	* rsh_locl.h: forward declaration for private structures

2005-04-20  Love H��rnquist ��strand  <lha@it.su.se>

	* rsh.c: cast size_t to unsigned long

2004-09-21  Johan Danielsson  <joda@pdc.kth.se>

	* rshd.c: rename loop to rshd_loop
	
	* rshd.c: pass errsock status to init_ivecs
	
	* rsh.c: rename loop() to rsh_loop()
	
	* rsh.c (loop): pass errsock status to init_ivecs
	
	* common.c (init_ivecs): if we don't have an errsock the ivecs
	should point to the same data
	
	* rshd.c: if we don't have an errsock, dup stdout to stderr (this
	would normally be done by inetd, but not by mini_inetd).
	
	* rshd.c: move keepalive setting to after setting up sockets
	
2004-02-20  Johan Danielsson  <joda@pdc.kth.se>

	* rsh.1: reorder and document some options

	* rsh_locl.h: include kafs.h if krb4 || krb5

	* rsh.c: reorder some options

2003-09-04  Johan Danielsson  <joda@pdc.kth.se>

	* rsh.1: document -d

2003-08-19  Johan Danielsson  <joda@pdc.kth.se>

	* rshd.c: -P also with KRB5
	
2003-04-22  Love H��rnquist ��strand  <lha@it.su.se>

	* rsh.1: replace > with \*[Gt]
	
2003-04-16  Johan Danielsson  <joda@pdc.kth.se>

	* rsh.c: use krb5_appdefault to get defaults for forward and
	encrypt

	* rshd.c: use ARG_MAX + 1

	* rshd.c (read_str): return allocated string

	* rsh_locl.h: set NCARGS to 8k if undefined

2003-03-23  Assar Westerlund  <assar@kth.se>

	* rsh.c (loop): only check errsock if it's valid

2003-03-18  Love  Love H��rnquist ��strand <lha@it.su.se>

	* rshd.c: do krb5_afslog when compling with afs support

	* rsh_locl.h: always include kafs.h
	
2002-11-22  Johan Danielsson  <joda@pdc.kth.se>

	* rshd.8: clarify -x and kerberos 5

2002-11-01  Johan Danielsson  <joda@pdc.kth.se>

	* rsh_locl.h: bump COMMAND_SZ to NCARGS+1

2002-09-04  Johan Danielsson  <joda@pdc.kth.se>

	* rsh.c: free some memory

2002-09-04  Assar Westerlund  <assar@kth.se>

	* common.c: krb5_crypto_block_size -> krb5_crypto_getblocksize

2002-09-04  Johan Danielsson  <joda@pdc.kth.se>

	* rsh.1: document -P

2002-09-03  Johan Danielsson  <joda@pdc.kth.se>

	* rsh.c: revert to protocol v1 if not asked for specific protocol

	* rshd.c: handle protocol version 2

	* rsh.c: handle protocol version 2

	* common.c: handle protocol version 2

	* rsh_locl.h: handle protocol version 2

2002-02-18  Johan Danielsson  <joda@pdc.kth.se>

	* rshd.c: don't show options that doesn't apply

	* rsh.c: don't show options that doesn't apply

	* rsh_locl.h: if we're not building with any kerberos support,
	just call read/write directly

	* common.c: if we're not building with any kerberos support, just
	call read/write directly

	* rshd.c: make this build without krb5; also use the addrinfo
	interface to mini_inetd, and set the keepalive option if requested

	* rsh.c: make this build without krb5

	* rsh_locl.h: make this build without krb5

	* common.c: make this build without krb5

2001-11-30  Johan Danielsson  <joda@pdc.kth.se>

	* rshd.c: make the syslog messages somewhat more informative

2001-08-15  Johan Danielsson  <joda@pdc.kth.se>

	* rsh.c: only complain about encryption flag when old
	authentication is requested

2001-08-07  Johan Danielsson  <joda@pdc.kth.se>

	* rsh.c: don't try broken auth if rresvport failed; try to give
	some more informative error messages

2001-07-31  Johan Danielsson  <joda@pdc.kth.se>

	* rshd.8: add an EXAMPLE
	* rshd.8: manual page
	* rshd.c: add some compat flags
	* rsh.1: manual page
	* rsh.c: iff -d, set the SO_DEBUG flags of the stdout and stderr
	socket; implement parsing user@host

2001-07-19  Assar Westerlund  <assar@sics.se>

	* rshd.c (fatal): use vsnprintf correctly

2001-02-07  Assar Westerlund  <assar@sics.se>

	* Makefile.am: add login_access
	* rshd.c (login_access): add prototype
	(syslog_and_die, fatal): add printf attributes
	(*): AIX -> _AIX
	(doit): use login_access
	based on patches from Ake Sandgren <ake@cs.umu.se>

2001-01-09  Assar Westerlund  <assar@sics.se>

	* rshd.c (save_krb5_creds): use krb5_rd_cred2 instead of
	krb5_rd_cred

2000-12-31  Assar Westerlund  <assar@sics.se>

	* rshd.c (main): handle krb5_init_context failure consistently
	* rsh.c (main): handle krb5_init_context failure consistently

2000-12-05  Johan Danielsson  <joda@pdc.kth.se>

	* rshd.c: require encryption if passed -x

2000-11-15  Assar Westerlund  <assar@sics.se>

	* rshd.c (loop): check that the fd's aren't too large to select on
	* rsh.c (loop, proto): check that the fd's aren't too large to
	select on

2000-08-10  Assar Westerlund  <assar@sics.se>

	* rsh.c: move code to do config/command parsing correctly.

2000-08-09  Assar Westerlund  <assar@sics.se>

	* rsh.c (main): only fetch stuff from krb5.conf when no option has
	been given

2000-08-01  Assar Westerlund  <assar@sics.se>

	* rsh.c (doit): loop until we create an error socket of an
	supported socket family

2000-07-02  Assar Westerlund  <assar@sics.se>

	* rshd.c: DCE stuff from Ake Sandgren <ake@cs.umu.se>
	do not call syslog with a variable as format string

	* rsh_locl.h (_PATH_ETC_ENVIRONMENT): add

2000-06-09  Assar Westerlund  <assar@sics.se>

	* rsh.c (main): work-around for setuid and capabilities bug fixed
	in Linux 2.2.16

2000-06-06  Johan Danielsson  <joda@pdc.kth.se>

	* rsh.c: nuke long option from -z
	
	* rsh.c: don't try to encrypt if auth is broken (Daniel Kouril)
	
2000-06-03  Assar Westerlund  <assar@sics.se>

	* rshd.c (doit): check return value of getspnam.  From
	<haba@pdc.kth.se>

2000-05-23  Assar Westerlund  <assar@sics.se>

	* rsh.c (proto): select on the normal socket when waiting for the
	daemon to connect back to the stderr port, so that we discover
	when data arrives there before.  when that happens, we assume that
	the daemon did not manage to connect (because of NAT/whatever) and
	continue as if `-e' was given
	* rshd.c (doit): if we fail to connect back to the stderr port,
	act as if `-e' was given on the client side, i.e. without the
	special TCP-connection.  This tries to make things better when
	running the head against a NAT wall, for example.

2000-02-07  Assar Westerlund  <assar@sics.se>

	* Makefile.am (LDADD): make sure we use the heimdal libdes

2000-02-06  Assar Westerlund  <assar@sics.se>

	* *: conditionalize des stuff on KRB4

1999-12-16  Assar Westerlund  <assar@sics.se>

	* rsh.c (doit): addrinfo returned from getaddrinfo() is not usable
	directly as hints.  copy it and set AI_PASSIVE.

1999-11-20  Assar Westerlund  <assar@sics.se>

	* rsh.c (main): remember to close the priviledged sockets before
 	calling rlogin

1999-11-02  Assar Westerlund  <assar@sics.se>

	* rsh.c (main): redo the v4/v5 selection for consistency.  -4 ->
 	try only v4 -5 -> try only v5 none, -45 -> try v5, v4

1999-10-26  Assar Westerlund  <assar@sics.se>

	* rshd.c (main): ignore SIGPIPE

	* common.c (do_read): the encoded length can be longer than the
 	buffer being used, allocate memory for it dynamically.  From Brian
 	A May <bmay@dgs.monash.edu.au>

1999-10-14  Assar Westerlund  <assar@sics.se>

	* rsh.c (proto): be more careful and don't print errno when read()
 	returns 0

1999-09-20  Assar Westerlund  <assar@sics.se>

	* rshd.c (recv_krb4_auth): set `iv'

1999-08-16  Assar Westerlund  <assar@sics.se>

	* common.c (do_read): be careful with the return value from
 	krb5_net_read

1999-08-05  Assar Westerlund  <assar@sics.se>

	* rsh.c: call freehostent

	* rsh.c: remove some dead code

1999-08-04  Assar Westerlund  <assar@sics.se>

	* rshd.c: re-write the handling of forwarded credentials and
 	stuff.  From Miroslav Ruda <ruda@ics.muni.cz>

	* rsh_locl.h: always include kafs.h

	* rsh.c: add `-z' and `-G' options

	* rsh.c (loop): shutdown one side of the TCP connection on EOF.
  	From Brian A May <bmay@dgs.monash.edu.au>

	* common.c (do_read): handle EOF.  From Brian A May
 	<bmay@dgs.monash.edu.au>

1999-08-01  Assar Westerlund  <assar@sics.se>

	* rsh.c: const fixes

1999-07-29  Assar Westerlund  <assar@sics.se>

	* rshd.c: v6-ify

	* rsh.c: v6-ify

1999-07-28  Assar Westerlund  <assar@sics.se>

	* rsh_locl.h: move around kafs.h

1999-07-24  Assar Westerlund  <assar@sics.se>

	* rsh_locl.h: <shadow.h>

	* rsh.c, rshd.c: improve forwarding and implement unique ccache on
 	server.  From Miroslav Ruda <ruda@ics.muni.cz>

1999-07-03  Assar Westerlund  <assar@sics.se>

	* rsh.c (construct_command): handle argc == 0 for generality

1999-06-23  Assar Westerlund  <assar@sics.se>

	* rsh.c: new option `-e' for not trying to open an stderr socket

1999-06-17  Assar Westerlund  <assar@sics.se>

	* rsh_locl.h (RSH_BUFSIZ): bump to 16 * 1024 to be sure that we
 	don't leave any data inside des_enc_read.  (that constant should
 	really be exported in some way...)

1999-06-15  Assar Westerlund  <assar@sics.se>

	* rsh.c: use get_default_username and resulting const pollution

1999-05-21  Assar Westerlund  <assar@sics.se>

	* rsh.c (main): try $USERNAME

1999-05-14  Assar Westerlund  <assar@sics.se>

	* rshd.c (doit): afslog correctly

1999-05-11  Assar Westerlund  <assar@sics.se>

	* rsh.c (main): add fallback to rlogin

1999-05-10  Assar Westerlund  <assar@sics.se>

	* rsh.c (send_krb5_auth): call krb5_sendauth with ccache == NULL.
	check return value from krb5_crypto_init
	
	* common.c (do_write, do_read): always return -1 for failure
	(net_write, net_read): remove.  they already exist in libroken

1999-05-09  Assar Westerlund  <assar@sics.se>

	* rsh.c: make sure it tries with all other authentication methods
	after one has failed
	* rsh.c (main): detect the case of no command given.
	
1999-04-11  Assar Westerlund  <assar@sics.se>

	* rsh.c: new option --forwardable. use print_version
	
Sat Apr 10 17:10:55 1999  Assar Westerlund  <assar@sics.se>

	* rshd.c (setup_copier): use `socketpair' instead of `pipe'.  Some
 	shells don't think it's a rsh session if they find a pipe at the
 	other end.
	(setup_environment): add SSH_CLIENT just to make bash happy

	* common.c (do_read): use krb5_get_wrapped_length

Wed Mar 24 03:59:42 1999  Assar Westerlund  <assar@sics.se>

	* rsh.c (loop): more braces to make gcc happy

Tue Mar 23 17:08:32 1999  Johan Danielsson  <joda@hella.pdc.kth.se>

	* rsh_locl.h: kafs.h

	* rshd.c: add `-P', `-v', and `-L' flags

Thu Mar 18 11:37:24 1999  Johan Danielsson  <joda@hella.pdc.kth.se>

	* Makefile.am: include Makefile.am.common

Tue Dec  1 14:44:44 1998  Johan Danielsson  <joda@hella.pdc.kth.se>

	* appl/rsh/rshd.c: update to new crypto framework

	* appl/rsh/rsh_locl.h: update to new crypto framework

	* appl/rsh/rsh.c: update to new crypto framework

	* appl/rsh/common.c: update to new crypto framework

Mon Nov  2 01:15:06 1998  Assar Westerlund  <assar@sics.se>

	* appl/rsh/rsh.c (main): initialize host

	* appl/rsh/rshd.c (recv_krb5_auth): disable `do_encrypt' if not
 	encrypting.

Thu Jul 30 23:12:17 1998  Assar Westerlund  <assar@sics.se>

	* appl/rsh/rsh.c: kludges for parsing `rsh hostname -l user'

Thu Jul 23 19:49:03 1998  Johan Danielsson  <joda@emma.pdc.kth.se>

	* appl/rsh/rshd.c: use krb5_verify_authenticator_checksum

Sat Apr 18 21:13:06 1998  Johan Danielsson  <joda@emma.pdc.kth.se>

	* appl/rsh/rsh.c: Don't try v5 if (only) `-4' is specified.

Sun Dec 21 09:44:05 1997  Assar Westerlund  <assar@sics.se>

	* appl/rsh/rshd.c (recv_krb5_auth): swap the order of the
 	`local_user' and the `remote_user'

	* appl/rsh/rsh.c (send_krb5_auth): swap the order of the
 	`local_user' and the `remote_user'

Sat Nov 29 07:10:11 1997  Assar Westerlund  <assar@sics.se>

	* appl/rsh/rshd.c: updated to use getarg.
	changed `struct fd_set' to `fd_set'.
	implemented broken/BSD authentication (requires iruserok)

Wed Nov 12 02:35:57 1997  Assar Westerlund  <assar@sics.se>

	* appl/rsh/rsh_locl.h: add AUTH_BROKEN and PATH_RSH

	* appl/rsh/Makefile.am: set BINDIR

	* appl/rsh/rsh.c: implemented BSD-style reserved port
 	`authentication'

Sun Aug 24 08:06:54 1997  Assar Westerlund  <assar@sics.se>

	* appl/rsh/rshd.c: syslog remote shells

Tue Aug 12 01:29:46 1997  Assar Westerlund  <assar@sics.se>

	* appl/rshd/rshd.c: Use `krb5_sock_to_principal'.  Send server
 	parameter to krb5_rd_req/krb5_recvauth.  Set addresses in
 	auth_context.

Fri Jul 25 17:32:12 1997  Assar Westerlund  <assar@sics.se>

	* appl/rsh/rshd.c: implement forwarding

	* appl/rsh/rsh.c: Use getarg.  Implement forwarding.

Sun Jul 13 00:32:16 1997  Assar Westerlund  <assar@sics.se>

	* appl/rsh: Conditionalize the krb4-support.

Wed Jul  9 06:58:00 1997  Assar Westerlund  <assar@sics.se>

	* appl/rsh/rsh.c: use the correct user for the checksum

Mon Jul  7 11:15:51 1997  Assar Westerlund  <assar@sics.se>

	* appl/rsh/rshd.c: Now works.  Also implementd encryption and
 	`-p'.
	
	* appl/rsh/common.c: new file

Mon Jun 30 06:08:14 1997  Assar Westerlund  <assar@sics.se>

	* appl/rsh: New program.