Commit Graph

44 Commits

Author SHA1 Message Date
Bruce Evans
4eb316f782 Fixed bitrot in synopsis (some const poisoning hadn't reached here). 1999-03-05 15:50:07 +00:00
John Polstra
1fc5cffd7b Explicitly depend on libcrypt and libmd for a.out too. Fixes a PAM
related problem on a.out systems.
1998-11-22 19:26:39 +00:00
David E. O'Brien
af3212bd1d Bogon I somehow inserted between compiling and commiting... 1998-10-26 13:33:39 +00:00
David E. O'Brien
642201c23e Quiet many compiler warnings. Still fails -Wconversion in one case.
Required because:	-Werror is in Makefile
1998-10-26 11:54:36 +00:00
John Birrell
8deb7ff0b0 BINFORMAT -> OBJFORMAT ready for E-day. 1998-08-30 01:57:55 +00:00
John Polstra
757be9d291 Correct the description of skeyaccess(). It determines whether Unix
passwords are permitted, not whether S/Key passwords are permitted.

This manual page could use a good going over.
1998-08-05 23:42:10 +00:00
Joseph Koshy
53e85f8664 Add warning about interaction of S/Key and login(1) for users without S/Key
passwords attempting to invoke login(1) on a pty.

PR: 3289
1998-05-18 09:36:31 +00:00
John Birrell
ae43c7299f Make -Werror i386 specific because gcc with -nostdinc on alpha belches
warnings about static inline functions that cause the build to fail.

And for some reason, alpha needs MD5. Find that out later!
1998-05-11 09:15:03 +00:00
Philippe Charnier
a5941fc2aa .Sh AUTHOR -> .Sh AUTHORS. Use .An/.Aq 1998-03-19 07:34:22 +00:00
Paul Traina
897e6eb1f4 Compile under -W -Wall -Werror.
Fix API - keycrunch takes const char's, not chars.
1998-02-27 22:36:51 +00:00
Peter Wemm
7bd6d5e7cf If building under elf, have libskey.so depend on libmd and libcrypt. 1997-09-05 11:52:20 +00:00
Bruce Evans
8e868ec864 Fixed synopsis (missing #includes and consts). 1997-03-19 01:33:23 +00:00
Paul Traina
1a277b7ae9 API cleanups (use const char * where appropriate)
Cannidate for: 2.2 (please!)
1997-03-08 06:22:51 +00:00
Peter Wemm
7e546392b5 Revert $FreeBSD$ to $Id$ 1997-02-22 15:12:41 +00:00
Wolfram Schneider
75141cc987 Sort cross references. 1997-01-20 23:23:22 +00:00
Jordan K. Hubbard
1130b656e5 Make the long-awaited change from $Id$ to $FreeBSD$
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore.  This update would have been
insane otherwise.
1997-01-14 07:20:47 +00:00
Mike Pritchard
c5ea5a2eb0 Add the appropriate MLINKS for the new skey.3 man page. 1996-12-22 23:18:50 +00:00
Mike Pritchard
eabc732c93 Fix a spelling error. 1996-12-22 23:13:58 +00:00
David Nugent
85c08564c3 Manpage for public functions in libskey. 1996-12-22 13:33:56 +00:00
David Nugent
5b062f153c Incorporate new manpage for libskey. 1996-12-22 13:33:11 +00:00
Andrey A. Chernov
9fe1a5aaab After some thinking implement alternative way:if it is impossible
to confirm password, don't tell that s/key required, but
ask for password in anycase. It looks like non-s/key system
from outside.
1996-10-18 16:52:33 +00:00
Andrey A. Chernov
4737abd588 Make PERMIT_CONSOLE to work not only from
/dev/console, but from syscons vty's too
1996-10-17 21:49:34 +00:00
Andrey A. Chernov
6903b42cd8 Change "nope" to ":"
Previous variant not work well, if you have a user with name nope
1996-10-17 16:47:22 +00:00
Andrey A. Chernov
811a3c8d54 Prevent namespace pollution cause by this library by splitting to
API and non-API functions and giving _sk_ prefix for all non-API
functions. Old names will be available by _SKEY_INTERNAL define
it allows not change anything in keyinit & key, only -D_SKEY_INTERNAL required.
Staticise some things.
1996-10-17 15:22:46 +00:00
Andrey A. Chernov
590b04e005 If 1) regular Unix passwords not permitted and 2) skey database
for this user not activated, there no correct password exist,
so don't bother ask for it and return "" immediately
1996-10-17 13:43:58 +00:00
Andrey A. Chernov
96b74d637f Make it work in localized environment, replace strftime's %b which can be
in national form with months names table
1996-10-17 12:45:39 +00:00
Peter Wemm
345be915f7 cmp -s || install -c ==> install -C 1996-08-30 02:12:07 +00:00
Jordan K. Hubbard
51295a4d3e General -Wall warning cleanup, part I.
Submitted-By: Kent Vander Velden <graphix@iastate.edu>
1996-07-12 18:57:58 +00:00
Joerg Wunsch
711e38f8ed /etc/skeykeys was basically suffering from the same vulnerability
as any non-shadowed /etc/passwd.  Ironically, all programs using S/Key
have already been setuid root except keyinfo(1).

This modification creates /etc/skeykeys with mode 0600 to prevent it
from being examined by ordinary users.
1996-04-26 21:33:18 +00:00
Peter Wemm
a5b996a7ec recording cvs-1.6 file death 1995-12-30 19:02:48 +00:00
Bruce Evans
48cfb668fc Change install' to ${INSTALL}' so that default install flags can be
specified in the top level Makefiles.

Previously I missed dozens of Makefiles that skip the install after
using `cmp -s' to decide that the install isn't necessary.
1995-08-06 12:24:38 +00:00
Rodney W. Grimes
d3628763db Merge RELENG_2_0_5 into HEAD 1995-06-11 19:33:05 +00:00
Rodney W. Grimes
6c06b4e2aa Remove trailing whitespace. 1995-05-30 05:51:47 +00:00
Andrey A. Chernov
c8448f10eb Change strtok() to strsep(), strtok() usage is depricated
in libraries.
1995-03-24 17:27:22 +00:00
Paul Traina
ab1a62c2a2 Remove extra newline. 1994-10-27 18:15:42 +00:00
Paul Traina
6d7d1e5932 new file does skey_getpass() support 1994-10-19 00:14:32 +00:00
Paul Traina
2ddadf840c Include most of the logdaemon v4.4 S/key changes 1994-10-19 00:03:45 +00:00
Paul Traina
bd5d6eecd0 Move skey.h back where it belongs 1994-09-29 19:27:35 +00:00
Paul Traina
d7e9de5e6e Install improved skey access code 1994-09-29 18:58:39 +00:00
David Greenman
9826cd3dfa Don't define LITTLE_ENDIAN is already defined. 1994-09-23 06:53:03 +00:00
Guido van Rooij
3653271054 Move skey.h to /usr/include so other packages will be able to use
libskey. (such as wu-ftp and xdm).
Editted skey so it matches the standard /usr/include way.
1994-06-02 20:25:30 +00:00
Paul Traina
0d92fee747 Clean up S/key library (libskey.a) so that filename access is via the
standard 4.4bsd pathnames mechanism.

Also document a potential security hole vs backwards compatibility tradeoff.
1994-05-27 07:50:08 +00:00
Guido van Rooij
dbd34b8383 Put md5.c copyright on md4.c. I contacted RSA inc. for that some time ago
but forgot to do it.

-Guido
1994-05-20 06:44:56 +00:00
Guido van Rooij
110af3d672 1) Added s/key support .
2  Added optional excessive login logging.
3) Added login acces control on a per host/tty base.
4) See skey(1) for skey descriptions and src/usr.bin/login/README
  for the logging and access control features.

-Guido
1994-05-19 18:13:11 +00:00