Commit Graph

38 Commits

Author SHA1 Message Date
jkoshy
4bccc04365 Add warning about interaction of S/Key and login(1) for users without S/Key
passwords attempting to invoke login(1) on a pty.

PR: 3289
1998-05-18 09:36:31 +00:00
jb
4db10719a2 Make -Werror i386 specific because gcc with -nostdinc on alpha belches
warnings about static inline functions that cause the build to fail.

And for some reason, alpha needs MD5. Find that out later!
1998-05-11 09:15:03 +00:00
charnier
46f7bb5b5b .Sh AUTHOR -> .Sh AUTHORS. Use .An/.Aq 1998-03-19 07:34:22 +00:00
pst
9a47d0a21f Compile under -W -Wall -Werror.
Fix API - keycrunch takes const char's, not chars.
1998-02-27 22:36:51 +00:00
peter
a7e8350ec8 If building under elf, have libskey.so depend on libmd and libcrypt. 1997-09-05 11:52:20 +00:00
bde
76127b9ec7 Fixed synopsis (missing #includes and consts). 1997-03-19 01:33:23 +00:00
pst
8783ca25e8 API cleanups (use const char * where appropriate)
Cannidate for: 2.2 (please!)
1997-03-08 06:22:51 +00:00
peter
3447762204 Revert $FreeBSD$ to $Id$ 1997-02-22 15:12:41 +00:00
wosch
2adeb3569f Sort cross references. 1997-01-20 23:23:22 +00:00
jkh
9c0cd3f9df Make the long-awaited change from $Id$ to $FreeBSD$
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore.  This update would have been
insane otherwise.
1997-01-14 07:20:47 +00:00
mpp
c1e1127258 Add the appropriate MLINKS for the new skey.3 man page. 1996-12-22 23:18:50 +00:00
mpp
46d69ecedd Fix a spelling error. 1996-12-22 23:13:58 +00:00
davidn
57a135352a Manpage for public functions in libskey. 1996-12-22 13:33:56 +00:00
davidn
10e7152a25 Incorporate new manpage for libskey. 1996-12-22 13:33:11 +00:00
ache
d91be98728 After some thinking implement alternative way:if it is impossible
to confirm password, don't tell that s/key required, but
ask for password in anycase. It looks like non-s/key system
from outside.
1996-10-18 16:52:33 +00:00
ache
0790228172 Make PERMIT_CONSOLE to work not only from
/dev/console, but from syscons vty's too
1996-10-17 21:49:34 +00:00
ache
4b96b6ee51 Change "nope" to ":"
Previous variant not work well, if you have a user with name nope
1996-10-17 16:47:22 +00:00
ache
71e2951869 Prevent namespace pollution cause by this library by splitting to
API and non-API functions and giving _sk_ prefix for all non-API
functions. Old names will be available by _SKEY_INTERNAL define
it allows not change anything in keyinit & key, only -D_SKEY_INTERNAL required.
Staticise some things.
1996-10-17 15:22:46 +00:00
ache
f9f97d6773 If 1) regular Unix passwords not permitted and 2) skey database
for this user not activated, there no correct password exist,
so don't bother ask for it and return "" immediately
1996-10-17 13:43:58 +00:00
ache
ba627dfaf6 Make it work in localized environment, replace strftime's %b which can be
in national form with months names table
1996-10-17 12:45:39 +00:00
peter
8a1778a6d9 cmp -s || install -c ==> install -C 1996-08-30 02:12:07 +00:00
jkh
a3b50e31fd General -Wall warning cleanup, part I.
Submitted-By: Kent Vander Velden <graphix@iastate.edu>
1996-07-12 18:57:58 +00:00
joerg
f84b7ebcfe /etc/skeykeys was basically suffering from the same vulnerability
as any non-shadowed /etc/passwd.  Ironically, all programs using S/Key
have already been setuid root except keyinfo(1).

This modification creates /etc/skeykeys with mode 0600 to prevent it
from being examined by ordinary users.
1996-04-26 21:33:18 +00:00
peter
639da796bd recording cvs-1.6 file death 1995-12-30 19:02:48 +00:00
bde
0a591c5133 Change install' to ${INSTALL}' so that default install flags can be
specified in the top level Makefiles.

Previously I missed dozens of Makefiles that skip the install after
using `cmp -s' to decide that the install isn't necessary.
1995-08-06 12:24:38 +00:00
rgrimes
8f6e1a9b69 Merge RELENG_2_0_5 into HEAD 1995-06-11 19:33:05 +00:00
rgrimes
1c444a9f7e Remove trailing whitespace. 1995-05-30 05:51:47 +00:00
ache
0c3e2155c0 Change strtok() to strsep(), strtok() usage is depricated
in libraries.
1995-03-24 17:27:22 +00:00
pst
e933040bfa Remove extra newline. 1994-10-27 18:15:42 +00:00
pst
270e1afc56 new file does skey_getpass() support 1994-10-19 00:14:32 +00:00
pst
e3801229c7 Include most of the logdaemon v4.4 S/key changes 1994-10-19 00:03:45 +00:00
pst
1ca07cd828 Move skey.h back where it belongs 1994-09-29 19:27:35 +00:00
pst
df13a4f988 Install improved skey access code 1994-09-29 18:58:39 +00:00
dg
77f4770dcd Don't define LITTLE_ENDIAN is already defined. 1994-09-23 06:53:03 +00:00
guido
bcd7dbf945 Move skey.h to /usr/include so other packages will be able to use
libskey. (such as wu-ftp and xdm).
Editted skey so it matches the standard /usr/include way.
1994-06-02 20:25:30 +00:00
pst
f98c370850 Clean up S/key library (libskey.a) so that filename access is via the
standard 4.4bsd pathnames mechanism.

Also document a potential security hole vs backwards compatibility tradeoff.
1994-05-27 07:50:08 +00:00
guido
922673777d Put md5.c copyright on md4.c. I contacted RSA inc. for that some time ago
but forgot to do it.

-Guido
1994-05-20 06:44:56 +00:00
guido
047685aef7 1) Added s/key support .
2  Added optional excessive login logging.
3) Added login acces control on a per host/tty base.
4) See skey(1) for skey descriptions and src/usr.bin/login/README
  for the logging and access control features.

-Guido
1994-05-19 18:13:11 +00:00