ChangeLog revision 90926 
12001-11-30  Johan Danielsson  <joda@pdc.kth.se>
2
3	* rshd.c: make the syslog messages somewhat more informative
4
52001-08-15  Johan Danielsson  <joda@pdc.kth.se>
6
7	* rsh.c: only complain about encryption flag when old
8	authentication is requested
9
102001-08-07  Johan Danielsson  <joda@pdc.kth.se>
11
12	* rsh.c: don't try broken auth if rresvport failed; try to give
13	some more informative error messages
14
152001-07-31  Johan Danielsson  <joda@pdc.kth.se>
16
17	* rshd.8: add an EXAMPLE
18	* rshd.8: manual page
19	* rshd.c: add some compat flags
20	* rsh.1: manual page
21	* rsh.c: iff -d, set the SO_DEBUG flags of the stdout and stderr
22	socket; implement parsing user@host
23
242001-07-19  Assar Westerlund  <assar@sics.se>
25
26	* rshd.c (fatal): use vsnprintf correctly
27
282001-02-07  Assar Westerlund  <assar@sics.se>
29
30	* Makefile.am: add login_access
31	* rshd.c (login_access): add prototype
32	(syslog_and_die, fatal): add printf attributes
33	(*): AIX -> _AIX
34	(doit): use login_access
35	based on patches from Ake Sandgren <ake@cs.umu.se>
36
372001-01-09  Assar Westerlund  <assar@sics.se>
38
39	* rshd.c (save_krb5_creds): use krb5_rd_cred2 instead of
40	krb5_rd_cred
41
422000-12-31  Assar Westerlund  <assar@sics.se>
43
44	* rshd.c (main): handle krb5_init_context failure consistently
45	* rsh.c (main): handle krb5_init_context failure consistently
46
472000-12-05  Johan Danielsson  <joda@pdc.kth.se>
48
49	* rshd.c: require encryption if passed -x
50
512000-11-15  Assar Westerlund  <assar@sics.se>
52
53	* rshd.c (loop): check that the fd's aren't too large to select on
54	* rsh.c (loop, proto): check that the fd's aren't too large to
55	select on
56
572000-08-10  Assar Westerlund  <assar@sics.se>
58
59	* rsh.c: move code to do config/command parsing correctly.
60
612000-08-09  Assar Westerlund  <assar@sics.se>
62
63	* rsh.c (main): only fetch stuff from krb5.conf when no option has
64	been given
65
662000-08-01  Assar Westerlund  <assar@sics.se>
67
68	* rsh.c (doit): loop until we create an error socket of an
69	supported socket family
70
712000-07-02  Assar Westerlund  <assar@sics.se>
72
73	* rshd.c: DCE stuff from Ake Sandgren <ake@cs.umu.se>
74	do not call syslog with a variable as format string
75
76	* rsh_locl.h (_PATH_ETC_ENVIRONMENT): add
77
782000-06-09  Assar Westerlund  <assar@sics.se>
79
80	* rsh.c (main): work-around for setuid and capabilities bug fixed
81	in Linux 2.2.16
82
832000-06-06  Johan Danielsson  <joda@pdc.kth.se>
84
85	* rsh.c: nuke long option from -z
86	
87	* rsh.c: don't try to encrypt if auth is broken (Daniel Kouril)
88	
892000-06-03  Assar Westerlund  <assar@sics.se>
90
91	* rshd.c (doit): check return value of getspnam.  From
92	<haba@pdc.kth.se>
93
942000-05-23  Assar Westerlund  <assar@sics.se>
95
96	* rsh.c (proto): select on the normal socket when waiting for the
97	daemon to connect back to the stderr port, so that we discover
98	when data arrives there before.  when that happens, we assume that
99	the daemon did not manage to connect (because of NAT/whatever) and
100	continue as if `-e' was given
101	* rshd.c (doit): if we fail to connect back to the stderr port,
102	act as if `-e' was given on the client side, i.e. without the
103	special TCP-connection.  This tries to make things better when
104	running the head against a NAT wall, for example.
105
1062000-02-07  Assar Westerlund  <assar@sics.se>
107
108	* Makefile.am (LDADD): make sure we use the heimdal libdes
109
1102000-02-06  Assar Westerlund  <assar@sics.se>
111
112	* *: conditionalize des stuff on KRB4
113
1141999-12-16  Assar Westerlund  <assar@sics.se>
115
116	* rsh.c (doit): addrinfo returned from getaddrinfo() is not usable
117	directly as hints.  copy it and set AI_PASSIVE.
118
1191999-11-20  Assar Westerlund  <assar@sics.se>
120
121	* rsh.c (main): remember to close the priviledged sockets before
122 	calling rlogin
123
1241999-11-02  Assar Westerlund  <assar@sics.se>
125
126	* rsh.c (main): redo the v4/v5 selection for consistency.  -4 ->
127 	try only v4 -5 -> try only v5 none, -45 -> try v5, v4
128
1291999-10-26  Assar Westerlund  <assar@sics.se>
130
131	* rshd.c (main): ignore SIGPIPE
132
133	* common.c (do_read): the encoded length can be longer than the
134 	buffer being used, allocate memory for it dynamically.  From Brian
135 	A May <bmay@dgs.monash.edu.au>
136
1371999-10-14  Assar Westerlund  <assar@sics.se>
138
139	* rsh.c (proto): be more careful and don't print errno when read()
140 	returns 0
141
1421999-09-20  Assar Westerlund  <assar@sics.se>
143
144	* rshd.c (recv_krb4_auth): set `iv'
145
1461999-08-16  Assar Westerlund  <assar@sics.se>
147
148	* common.c (do_read): be careful with the return value from
149 	krb5_net_read
150
1511999-08-05  Assar Westerlund  <assar@sics.se>
152
153	* rsh.c: call freehostent
154
155	* rsh.c: remove some dead code
156
1571999-08-04  Assar Westerlund  <assar@sics.se>
158
159	* rshd.c: re-write the handling of forwarded credentials and
160 	stuff.  From Miroslav Ruda <ruda@ics.muni.cz>
161
162	* rsh_locl.h: always include kafs.h
163
164	* rsh.c: add `-z' and `-G' options
165
166	* rsh.c (loop): shutdown one side of the TCP connection on EOF.
167  	From Brian A May <bmay@dgs.monash.edu.au>
168
169	* common.c (do_read): handle EOF.  From Brian A May
170 	<bmay@dgs.monash.edu.au>
171
1721999-08-01  Assar Westerlund  <assar@sics.se>
173
174	* rsh.c: const fixes
175
1761999-07-29  Assar Westerlund  <assar@sics.se>
177
178	* rshd.c: v6-ify
179
180	* rsh.c: v6-ify
181
1821999-07-28  Assar Westerlund  <assar@sics.se>
183
184	* rsh_locl.h: move around kafs.h
185
1861999-07-24  Assar Westerlund  <assar@sics.se>
187
188	* rsh_locl.h: <shadow.h>
189
190	* rsh.c, rshd.c: improve forwarding and implement unique ccache on
191 	server.  From Miroslav Ruda <ruda@ics.muni.cz>
192
1931999-07-03  Assar Westerlund  <assar@sics.se>
194
195	* rsh.c (construct_command): handle argc == 0 for generality
196
1971999-06-23  Assar Westerlund  <assar@sics.se>
198
199	* rsh.c: new option `-e' for not trying to open an stderr socket
200
2011999-06-17  Assar Westerlund  <assar@sics.se>
202
203	* rsh_locl.h (RSH_BUFSIZ): bump to 16 * 1024 to be sure that we
204 	don't leave any data inside des_enc_read.  (that constant should
205 	really be exported in some way...)
206
2071999-06-15  Assar Westerlund  <assar@sics.se>
208
209	* rsh.c: use get_default_username and resulting const pollution
210
2111999-05-21  Assar Westerlund  <assar@sics.se>
212
213	* rsh.c (main): try $USERNAME
214
2151999-05-14  Assar Westerlund  <assar@sics.se>
216
217	* rshd.c (doit): afslog correctly
218
2191999-05-11  Assar Westerlund  <assar@sics.se>
220
221	* rsh.c (main): add fallback to rlogin
222
2231999-05-10  Assar Westerlund  <assar@sics.se>
224
225	* rsh.c (send_krb5_auth): call krb5_sendauth with ccache == NULL.
226	check return value from krb5_crypto_init
227	
228	* common.c (do_write, do_read): always return -1 for failure
229	(net_write, net_read): remove.  they already exist in libroken
230
2311999-05-09  Assar Westerlund  <assar@sics.se>
232
233	* rsh.c: make sure it tries with all other authentication methods
234	after one has failed
235	* rsh.c (main): detect the case of no command given.
236	
2371999-04-11  Assar Westerlund  <assar@sics.se>
238
239	* rsh.c: new option --forwardable. use print_version
240	
241Sat Apr 10 17:10:55 1999  Assar Westerlund  <assar@sics.se>
242
243	* rshd.c (setup_copier): use `socketpair' instead of `pipe'.  Some
244 	shells don't think it's a rsh session if they find a pipe at the
245 	other end.
246	(setup_environment): add SSH_CLIENT just to make bash happy
247
248	* common.c (do_read): use krb5_get_wrapped_length
249
250Wed Mar 24 03:59:42 1999  Assar Westerlund  <assar@sics.se>
251
252	* rsh.c (loop): more braces to make gcc happy
253
254Tue Mar 23 17:08:32 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
255
256	* rsh_locl.h: kafs.h
257
258	* rshd.c: add `-P', `-v', and `-L' flags
259
260Thu Mar 18 11:37:24 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
261
262	* Makefile.am: include Makefile.am.common
263
264Tue Dec  1 14:44:44 1998  Johan Danielsson  <joda@hella.pdc.kth.se>
265
266	* appl/rsh/rshd.c: update to new crypto framework
267
268	* appl/rsh/rsh_locl.h: update to new crypto framework
269
270	* appl/rsh/rsh.c: update to new crypto framework
271
272	* appl/rsh/common.c: update to new crypto framework
273
274Mon Nov  2 01:15:06 1998  Assar Westerlund  <assar@sics.se>
275
276	* appl/rsh/rsh.c (main): initialize host
277
278	* appl/rsh/rshd.c (recv_krb5_auth): disable `do_encrypt' if not
279 	encrypting.
280
281Thu Jul 30 23:12:17 1998  Assar Westerlund  <assar@sics.se>
282
283	* appl/rsh/rsh.c: kludges for parsing `rsh hostname -l user'
284
285Thu Jul 23 19:49:03 1998  Johan Danielsson  <joda@emma.pdc.kth.se>
286
287	* appl/rsh/rshd.c: use krb5_verify_authenticator_checksum
288
289Sat Apr 18 21:13:06 1998  Johan Danielsson  <joda@emma.pdc.kth.se>
290
291	* appl/rsh/rsh.c: Don't try v5 if (only) `-4' is specified.
292
293Sun Dec 21 09:44:05 1997  Assar Westerlund  <assar@sics.se>
294
295	* appl/rsh/rshd.c (recv_krb5_auth): swap the order of the
296 	`local_user' and the `remote_user'
297
298	* appl/rsh/rsh.c (send_krb5_auth): swap the order of the
299 	`local_user' and the `remote_user'
300
301Sat Nov 29 07:10:11 1997  Assar Westerlund  <assar@sics.se>
302
303	* appl/rsh/rshd.c: updated to use getarg.
304	changed `struct fd_set' to `fd_set'.
305	implemented broken/BSD authentication (requires iruserok)
306
307Wed Nov 12 02:35:57 1997  Assar Westerlund  <assar@sics.se>
308
309	* appl/rsh/rsh_locl.h: add AUTH_BROKEN and PATH_RSH
310
311	* appl/rsh/Makefile.am: set BINDIR
312
313	* appl/rsh/rsh.c: implemented BSD-style reserved port
314 	`authentication'
315
316Sun Aug 24 08:06:54 1997  Assar Westerlund  <assar@sics.se>
317
318	* appl/rsh/rshd.c: syslog remote shells
319
320Tue Aug 12 01:29:46 1997  Assar Westerlund  <assar@sics.se>
321
322	* appl/rshd/rshd.c: Use `krb5_sock_to_principal'.  Send server
323 	parameter to krb5_rd_req/krb5_recvauth.  Set addresses in
324 	auth_context.
325
326Fri Jul 25 17:32:12 1997  Assar Westerlund  <assar@sics.se>
327
328	* appl/rsh/rshd.c: implement forwarding
329
330	* appl/rsh/rsh.c: Use getarg.  Implement forwarding.
331
332Sun Jul 13 00:32:16 1997  Assar Westerlund  <assar@sics.se>
333
334	* appl/rsh: Conditionalize the krb4-support.
335
336Wed Jul  9 06:58:00 1997  Assar Westerlund  <assar@sics.se>
337
338	* appl/rsh/rsh.c: use the correct user for the checksum
339
340Mon Jul  7 11:15:51 1997  Assar Westerlund  <assar@sics.se>
341
342	* appl/rsh/rshd.c: Now works.  Also implementd encryption and
343 	`-p'.
344	
345	* appl/rsh/common.c: new file
346
347Mon Jun 30 06:08:14 1997  Assar Westerlund  <assar@sics.se>
348
349	* appl/rsh: New program.
350
351