freebsd-nq/crypto/heimdal/appl/telnet/ChangeLog
Stanislav Sedov ae77177087 - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings
several new kerberos related libraries and applications to FreeBSD:
  o kgetcred(1) allows one to manually get a ticket for a particular service.
  o kf(1) securily forwards ticket to another host through an authenticated
    and encrypted stream.
  o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1)
    and other user kerberos operations. klist and kswitch are just symlinks
    to kcc(1) now.
  o kswitch(1) allows you to easily switch between kerberos credentials if
    you're running KCM.
  o hxtool(1) is a certificate management tool to use with PKINIT.
  o string2key(1) maps a password into key.
  o kdigest(8) is a userland tool to access the KDC's digest interface.
  o kimpersonate(8) creates a "fake" ticket for a service.

  We also now install manpages for some lirbaries that were not installed
  before, libheimntlm and libhx509.

- The new HEIMDAL version no longer supports Kerberos 4.  All users are
  recommended to switch to Kerberos 5.

- Weak ciphers are now disabled by default.  To enable DES support (used
  by telnet(8)), use "allow_weak_crypto" option in krb5.conf.

- libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings
  disabled due to the function they use (krb5_get_err_text(3)) being
  deprecated.  I plan to work on this next.

- Heimdal's KDC now require sqlite to operate.  We use the bundled version
  and install it as libheimsqlite.  If some other FreeBSD components will
  require it in the future we can rename it to libbsdsqlite and use for these
  components as well.

- This is not a latest Heimdal version, the new one was released while I was
  working on the update.  I will update it to 1.5.2 soon, as it fixes some
  important bugs and security issues.
2012-03-22 08:48:42 +00:00

832 lines
25 KiB
Plaintext

2008-04-27 Love Hörnquist Åstrand <lha@it.su.se>
* libtelnet/enc_des.c: Use RAND_bytes() + DES_is_weak_key() to
generate random DES key. Introdunce random by feeding the des
session key into the random pool when the keys is recived instead
of encrypt the random key with the kerberos key.
This avoid depenency on DES_new_random_key() that doesn't exists
in OpenSSL.
2008-04-18 Love Hörnquist Åstrand <lha@it.su.se>
* libtelnet/enc_des.c: No need to call
DES_init_random_number_generator, hcrypto is sane now.
* libtelnet/enc_des.c: Use DES_new_random_key().
2008-04-10 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/sys_term.c: Really, mac os uses wtmpx (or asl).
2008-03-09 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/sys_term.c: Dont need to set this as the controlling PTY
on steams sockets, don't abort on failure. From Harald Barth and
Ian Delahorne.
2007-12-31 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/sys_term.c: Use strlcpy instead of strncpy, thanks to
Antoine Brodin.
2007-07-31 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/telnetd.c (usage): use exit_code, add --version and
--help.
* telnetd/telnetd.c: Add --help, reported by David Love.
2007-07-30 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/main.c: Catch --help, reported by David Love.
2007-07-12 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/sys_term.c: GLIBC made the choice that ut_tv should be
shared between 32 and 64 bit platforms so now we can no longer use
struct timeval functions to compare or set/get data that uses
pointer (gettimeofday for example) since ut_tv is now not a struct
timeval but rather a struct { int32_t tv_sec; int32_t tv_usec; };
2006-10-21 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/telnet_locl.h: Include roken.h before the local
headerfiles.
* telnetd/telnetd.h: HP/UX defines SE in sys/uio.h, #undef it.
* telnetd/sys_term.c: Dont't include some streamspty headers here.
* telnetd/telnetd.c: Dont't include some streamspty headers here.
* telnetd/telnetd.h: includes some STREAMSPTY header here to avoid
ioctl vs socket_wrapper horror.
2006-10-20 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/Makefile.am: more files
* telnetd/Makefile.am: more files
2006-09-19 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/telnetd.8: Add documentation for -e, require encryption.
* telnetd/telnetd.h: Add require_encryption.
* telnetd/telnetd.c: Allow encryption to be required, wait to the
client to turn it on, if failes, refuse the connection.
* telnetd/state.c: If encryption is required, don't allow it to be
turned off.
2006-09-04 Love Hörnquist Åstrand <lha@it.su.se>
* libtelnet/kerberos5.c (kerberos5_forward): use KDCOptions2int on
flags before passing them to krb5_get_forwarded_creds.
2006-05-05 Love Hörnquist Åstrand <lha@it.su.se>
* Rename u_intXX_t to uintXX_t
2006-03-23 Love Hörnquist Åstrand <lha@it.su.se>
* libtelnet/encrypt.c: Spelling.
2005-12-01 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/telnetd.c: Initialize the slc mapping table before its
used. Based on bug report from Russell Sanford
<rrs@clyde.dcccd.edu>
2005-11-03 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/telnet.c: Spelling in comments, from Dave Love
<fx@gnu.org>
2005-10-31 Love Hörnquist Åstrand <lha@it.su.se>
* libtelnet/kerberos5.c (Data): Use right variable. From Tomas
Olsson
2005-10-22 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/commands.c: Check return value from asprintf instead of
string != NULL since it undefined behavior on Linux. From Björn
Sandell
* libtelnet/kerberos5.c: Check return value from asprintf instead
of string != NULL since it undefined behavior on Linux. From Björn
Sandell
* libtelnet/kerberos.c: Check return value from asprintf instead
of string != NULL since it undefined behavior on Linux. From Björn
Sandell
2005-08-08 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/telnetd.c: Fix printing of /etc/issue{,.net}.
* telnetd/utility.c: make writenet take const void * and size_t,
abort if size it too large
* telnetd/state.c: Fix ansi c warning.
* telnetd/sys_term.c: no need to typecast argument to writenet
* telnetd/ext.h: make writenet take const void * and size_t
2005-07-07 Assar Westerlund <assar@kth.se>
* libtelnet/kerberos.c: Do not assume that des_key_schedule is an
array.
2005-05-27 Love Hörnquist Åstrand <lha@it.su.se>
* libtelnet/kerberos5.c: case uid_t to unsigned long in printf
format
* telnetd/sys_term.c (set_termbuf): use {} around if to make else
unambiguous
2005-05-20 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/sys_term.c (start_login): put utmpx code into a new
scope to avoid pre c99 problems.
2005-05-19 Dave Love <fx@gnu.org>
* telnet/telnet.c,telnet_locl.h: Make solaris find tgetent
2005-05-13 Johan Danielsson <joda@pdc.kth.se>
* telnetd/sys_term.c (start_login): set encryption pointers to
NULL, so we don't try to do either
2005-05-11 Dave Love <fx@gnu.org>
* telnet/telnet.c: undef ISASCII before we define our own (problem
on Irix)
2005-04-28 Johan Danielsson <joda@pdc.kth.se>
* telnetd/utility.c (putf): %t: the regular and streamspty case
are functionally equivalent, so merge them, this also makes it
work better on machines that puts their devices in a subdirectory
to /dev
2005-04-27 Dave Love <fx@gnu.org>
* telnetd/sys_term.c (getpty): Declare p.
2005-04-25 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/telnetd.c: use strlcpy
2005-04-24 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/global.c, telnetd/state.c, telnetd/telnetd.c,
telentd/ext.h: remove another strcpy
2005-04-19 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/sys_term.c: rewrite getpty to make use openpty when its
found, save the slave fd so that cleanopen can use it if its
available
2005-04-07 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/sys_term.c: clean_ttyname might be unused, mark it so
with __attribute__
2005-04-06 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/sys_term.c: use NULL as last argument to execl, not 0
* telnet/commands.c: use NULL as last argument to execl, not 0
2005-03-29 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/telnet.c: From FreeBSD:
Correct a pair of buffer overflows in the telnet(1) command:
(CAN-2005-0468) A heap buffer overflow in env_opt_add() and related
functions.
(CAN-2005-0469) A global uninitialized data section buffer overflow in
slc_add_reply() and related functions.
As a result of these vulnerabilities, it may be possible for a
malicious telnet server or active network attacker to cause
telnet(1) to execute arbitrary code with the privileges of the
user running it.
Security: CAN-2005-0468, CAN-2005-0469 Security:
FreeBSD-SA-05:01.telnet Security:
http://www.idefense.com/application/poi/display?id=220&type=vulnerabilities
Security:
http://www.idefense.com/application/poi/display?id=221&type=vulnerabilities
These fixes are based in part on patches Submitted by: Solar
Designer <solar@openwall.com>
2005-03-23 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/telnetd.c: remove setting of DES_check_key, all code
uses DES_set_key_checked
* libtelnet/enc_des.c: use DES_set_key_checked
2005-01-09 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/telnet.c: cast argument to toupper to unsigned char
* telnet/commands.c: cast argument to is* to unsigned char
2004-06-20 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/network.c: make network rings larger From: MAAAAA MOOOR
<huaraz@btinternet.com>
* telnetd/state.c: make subbuffer larger XXX resize dynamicly
From: MAAAAA MOOOR <huaraz@btinternet.com>
* libtelnet/kerberos5.c (Data): allocate the data needed to be
send From: MAAAAA MOOOR <huaraz@btinternet.com>
2004-04-02 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/main.c: make encrypt, forwardable, forward use appdefault
(that also searches libdefaults), prompted by Thomas Nystrom
<thn@saeab.se>
2004-03-22 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/telnetd.c: call setprogname to make libvers happy
* telnet/main.c: call setprogname to make libvers happy
2003-09-25 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/externs.h: export Scheduler and scheduler_lockout_tty
* telnet/telnet.c (my_telnet): if telnet_spin returns failure,
complain that the server disconnected and exit
* telnet/authenc.c (telnet_spin): if Scheduler() returns failure
(-1) propagate to higher level
2003-09-03 Love Hörnquist Åstrand <lha@it.su.se>
* telnetd/telnetd.c: use new DES_ api
* libtelnet/enc_des.c: use new DES_ api
2003-04-22 Love Hörnquist Åstrand <lha@it.su.se>
* telnet/telnet.1: replace <,> with \*[Lt],\*[Gt]
2002-09-02 Johan Danielsson <joda@pdc.kth.se>
* libtelnet/kerberos5.c: set AP_OPTS_USE_SUBKEY
2002-08-28 Johan Danielsson <joda@pdc.kth.se>
* telnet/commands.c: remove extra "Toggle"'s
* telnet/commands.c: IRIX == 4 -> IRIX4
* telnet/main.c: rename functions to what they're really called
* telnet/commands.c: kill some might be uninitialized warnings
* telnet/commands.c: add forward and forwardable toggle options,
and call set_forward_options() after parsing .telnetrc
* telnet/externs.h: proto for set_forward_options
* telnet/main.c: only register what forwarding options are asked
for when parsing command line, we have to set the actual flags
later after we have read .telnetrc
* libtelnet/auth-proto.h: kerberos5_set_forward{,able} protos
* libtelnet/kerberos5.c: add kerberos5_set_forward{,able}
functions suitable for the command parser
2002-08-23 Assar Westerlund <assar@kth.se>
* telnetd/telnetd.c: add --version as a special case
* telnet/main.c: add --version as a special case
2002-05-03 Johan Danielsson <joda@pdc.kth.se>
* telnet/telnet.c: only try to negotiate encryption if we're
talking to a real telnet
2002-03-31 Johan Danielsson <joda@pdc.kth.se>
* telnet/commands.c: fix an old cut-n-paste typo (via debian)
2002-02-07 Johan Danielsson <joda@pdc.kth.se>
* telnet/telnet.c: print a more informative message than "done"
after negotiating encryption
2001-09-17 Assar Westerlund <assar@sics.se>
* telnetd/telnetd.c: add a kludge to make it build on aix (that
defines NOERROR in both sys/stream.h and arpa/nameser.h and
considers that a fatal error)
* telnet/telnet.c: undef PUTSHORT to avoid conflict
2001-08-26 Assar Westerlund <assar@sics.se>
* telnetd/Makefile.am: also link with the library for logout
2001-08-22 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c: include libutil.h if it exists
2001-08-10 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c (getpty): call openpty if it exists
2001-07-19 Assar Westerlund <assar@sics.se>
* telnetd/global.c (output_data): make sure of not forwarding
`nfrontp' too far, thereby allowing writes after the end of
`netobuf'
2001-06-18 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos5.c: update to new krb5_auth_con* names
2001-04-25 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c (start_login): give the correct error if exec
fails
* telnetd/utility.c (fatalperror_errno): add a new function with
explicit errno parameter
2001-03-07 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c: some minimal more amount of
const-correctness
2001-02-24 Assar Westerlund <assar@sics.se>
* libtelnet/enc_des.c: learn to live with libcrypto (from openssl)
2001-02-20 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): copy the hostname so it doesn't get
overwritten while reading ~/.telnetrc
(*): removed some unneeded externs
2001-02-08 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c (startslave, start_login): re-write code to
keep track both of remote hostname and utmp string to be used
* telnetd/telnetd.c (doit, my_telnet): re-write code to keep track
both of remote hostname and utmp string to be used
2001-02-07 Assar Westerlund <assar@sics.se>
* telnet/Makefile.am, telnetd/Makefile.am: add LIB_kdfs
2001-01-09 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos5.c (kerberos5_is): use krb5_rd_cred2 instead
of krb5_rd_cred
2000-12-31 Assar Westerlund <assar@sics.se>
* telnet/main.c (krb5_init): check krb5_init_context for success
* libtelnet/kerberos5.c (kerberos5_init): check krb5_init_context
for success
2000-12-11 Assar Westerlund <assar@sics.se>
* telnet/commands.c (sourceroute): make it not break if the
rfc2292 api does not exist
2000-12-09 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c (scrub_env): add supporting non-file TERMCAP
variables
2000-12-07 Assar Westerlund <assar@sics.se>
* telnetd/telnetd.h: move include files around to avoid getting SE
from sys/*.h on HP to override SE from telnet.h
* telnetd/sys_term.c (scrub_env): remove some const-ness
* telnetd/sys_term.c (scrub_env): add LOGNAME and POSIXLY_CORRECT
to the list of authorized environment variables to be compatible
with linux-telnetd
* telnetd/sys_term.c (scrub_env): change filtering algoritm from
allowing everything except a few bad cases to not allowing
anything except a few non-dangerous cases
2000-12-06 Johan Danielsson <joda@pdc.kth.se>
* libtelnet/kerberos5.c: de-pointerise auth_context parameter to
krb5_mk_rep
2000-11-23 Johan Danielsson <joda@pdc.kth.se>
* libtelnet/kerberos5.c: print the principal we're trying to use
* libtelnet/kerberos.c: print the principal we're trying to use
2000-11-16 Assar Westerlund <assar@sics.se>
* libtelnet/misc-proto.h (telnet_getenv): const-ize some
2000-11-08 Johan Danielsson <joda@pdc.kth.se>
* telnet/telnet.c: fake entry if no tgetent
2000-10-08 Assar Westerlund <assar@sics.se>
* telnetd/utility.c (stilloob): check that fds are not too large
to select on
(ttloop): remove confusing output of errno
* telnetd/telnetd.c (my_telnet): check that fds are not too large
to select on
* telnet/utilities.c (EmptyTerminal): check that fds are not too
large to select on
* telnet/sys_bsd.c (process_rings): check that fds are not too
large to select on
* telnet/network.c (stilloob): check that fds are not too large to
select on
2000-06-09 Assar Westerlund <assar@sics.se>
* telnet/commands.c: remove all setuid(getuid()). we do not
support telnet being setuid root
2000-05-05 Assar Westerlund <assar@sics.se>
* telnet/externs.h (sourceroute): update prototype
* telnet/commands.c (tn): re-enable source routing
(sourceroute): make it work again based on the code from
itojun@kame.net
2000-03-28 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): clean-up a tiny little bit. give-up if
we do not manage to connect to any address
2000-03-26 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c (*): make sure to always call time, ctime,
and gmtime with `time_t's. there were some types (like in
lastlog) that we believed to always be time_t. this has proven
wrong on Solaris 8 in 64-bit mode, where they are stored as 32-bit
quantities but time_t has gone up to 64 bits
2000-03-03 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos5.c (kerberos5_init): check that we do have a
keytab before saying that we will support KERBEROS5
2000-02-12 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): only set tos for AF_INET. From
itojun@iijlab.net
2000-02-07 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos.c (kerberos4_is): send a reject back to the
client when we're not authorized
2000-02-06 Assar Westerlund <assar@sics.se>
* telnet/ring.h (ring_encrypt): better proto
* telnet/ring.c (ring_encrypt): better proto
2000-02-04 Assar Westerlund <assar@sics.se>
* telnet/telnet_locl.h: klduge-around KLUDGELINEMODE
2000-01-18 Assar Westerlund <assar@sics.se>
* libtelnet/misc.c (auth_encrypt_user): const-ify
* libtelnet/misc.h (RemoteHostName, LocalHostName): const-ify
* libtelnet/misc.c (auth_encrypt_init, RemoteHostName,
LocalHostName): const-ify
* libtelnet/misc-proto.h (auth_encrypt_init, auth_encrypt_user):
const-ify
* libtelnet/encrypt.c (encrypt_init, Name): const-ify
* libtelnet/enc-proto.h (encrypt_init): const-ify
* libtelnet/auth.c (auth_init, Name): const-ify
* libtelnet/auth-proto.h (auth_init): const-ify
2000-01-08 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): handle ai_canonname being set in any of
the addresses returnedby getaddrinfo. glibc apparently returns
the reverse lookup of every address in ai_canonname. remove some
unused variables.
2000-01-01 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c (addarg): make void (return value isn't check
anyway). fatal error when malloc fails
1999-12-16 Assar Westerlund <assar@sics.se>
* telnet/commands.c (*): handle ai_canonname not being set
1999-12-04 Assar Westerlund <assar@sics.se>
* telnetd/telnetd.c (doit): use getnameinfo_verified
* telnetd/telnetd.c: use getnameinfo
* telnet/commands.c: re-write to using getaddrinfo. disable
source-routing for the moment, it doesn't seem to be used anyways.
1999-09-16 Assar Westerlund <assar@sics.se>
* telnet/commands.c: revert 1.54, get_default_username should DTRT
now
1999-09-05 Assar Westerlund <assar@sics.se>
* telnetd/utility.c (ttloop): make it return 1 if interrupted by a
signal, which must have been what was meant from the beginning
* telnetd/ext.h (ttloop): update prototype
* telnetd/authenc.c (telnet_spin): actually return the value from
ttloop (otherwise it's kind of bogus)
1999-08-05 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c (rmut): free utxp
1999-08-04 Assar Westerlund <assar@sics.se>
* telnet/main.c: add -G and config file support. From Miroslav
Ruda <ruda@ics.muni.cz>
* telnetd/sys_term.c (rmut): work around utmpx strangness. From
Miroslav Ruda <ruda@ics.muni.cz>
1999-08-02 Assar Westerlund <assar@sics.se>
* telnetd/telnetd.c (doit): only free hp if != NULL. From: Jonas
Oberg <jonas@coyote.org>
1999-07-29 Assar Westerlund <assar@sics.se>
* telnetd/telnetd.c (doit): remove unused variable mapped_sin
1999-07-26 Assar Westerlund <assar@sics.se>
* telnetd/ext.h: update prototypes
* telnetd/telnetd.c: make it handle v4 and v6 sockets. (it
doesn't handle being given a v6 socket that's really talking to an
v4 adress (mapped) because the rest of the code in telnetd is not
able to handle it anyway). please run two telnetd from your
inetd, one for v4 and one for v6.
1999-07-07 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): extra bogus const-cast
1999-07-06 Assar Westerlund <assar@sics.se>
* telnetd/sys_term.c (start_login): print a different warning with
`-a otp'
1999-06-24 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos5.c (kerberos5_send): set the addresses in the
auth_context
1999-06-23 Assar Westerlund <assar@sics.se>
* telnet/Makefile.am (INCLUDES): add $(INCLUDE_krb4)
* telnet/commands.c (togkrbdebug): conditionalize on
krb_disable_debug
1999-06-16 Johan Danielsson <joda@pdc.kth.se>
* telnet/commands.c: add kerberos debugging option
1999-06-15 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): use get_default_username
1999-05-14 Assar Westerlund <assar@sics.se>
* telnetd/state.c (telrcv): magic patch to make it work against
DOS Clarkson Telnet. From Miroslav Ruda <ruda@ics.muni.cz>
1999-04-25 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos5.c (kerberos5_send): use
`krb5_auth_setkeytype' instead of `krb5_auth_setenctype' to make
sure we get a DES session key.
Thu Apr 1 16:59:27 1999 Johan Danielsson <joda@hella.pdc.kth.se>
* telnetd/Makefile.am: don't run check-local
* telnet/Makefile.am: don't run check-local
Mon Mar 29 16:11:33 1999 Johan Danielsson <joda@hella.pdc.kth.se>
* telnetd/sys_term.c: _CRAY -> HAVE_STRUCT_UTMP_UT_ID
Sat Mar 20 00:12:54 1999 Assar Westerlund <assar@sics.se>
* telnet/authenc.c (telnet_gets): remove old extern declarations
Thu Mar 18 11:20:16 1999 Johan Danielsson <joda@hella.pdc.kth.se>
* telnetd/Makefile.am: include Makefile.am.common
* telnet/Makefile.am: include Makefile.am.common
* libtelnet/Makefile.am: include Makefile.am.common
* Makefile.am: include Makefile.am.common
Mon Mar 15 17:40:53 1999 Johan Danielsson <joda@hella.pdc.kth.se>
* telnetd/telnetd.c: replace perror/exit with fatalperror
Sat Mar 13 22:18:57 1999 Assar Westerlund <assar@sics.se>
* telnetd/telnetd.c (main): 0 -> STDIN_FILENO. remove abs
* libtelnet/kerberos.c (kerberos4_is): syslog root logins
Thu Mar 11 14:48:54 1999 Johan Danielsson <joda@hella.pdc.kth.se>
* telnetd/Makefile.in: add WFLAGS
* telnet/Makefile.in: add WFLAGS
* libtelnet/Makefile.in: add WFLAGS
* telnetd/sys_term.c: remove unused variables
* telnet/telnet.c: fix some warnings
* telnet/main.c: fix some warnings
* telnet/commands.c: fix types in format string
* libtelnet/auth.c: fix types in format string
Mon Mar 1 10:50:30 1999 Johan Danielsson <joda@hella.pdc.kth.se>
* telnetd/sys_term.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*
Mon Feb 1 04:08:36 1999 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): only call gethostbyname2 with AF_INET6
if we actually have IPv6. From "Brandon S. Allbery KF8NH"
<allbery@kf8nh.apk.net>
Sat Nov 21 16:51:00 1998 Johan Danielsson <joda@hella.pdc.kth.se>
* telnetd/sys_term.c (cleanup): don't call vhangup() on sgi:s
Fri Aug 14 16:29:18 1998 Johan Danielsson <joda@emma.pdc.kth.se>
* libtelnet/kerberos.c: krb_put_int -> KRB_PUT_INT
Thu Jul 23 20:29:05 1998 Johan Danielsson <joda@emma.pdc.kth.se>
* libtelnet/kerberos5.c: use krb5_verify_authenticator_checksum
Mon Jul 13 22:00:09 1998 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): don't advance hostent->h_addr_list, use
a copy instead
Wed May 27 04:19:17 1998 Assar Westerlund <assar@sics.se>
* telnet/sys_bsd.c (process_rings): correct call to `stilloob'
Fri May 15 19:38:19 1998 Johan Danielsson <joda@blubb.pdc.kth.se>
* libtelnet/kerberos5.c: Always print errors from mk_req.
Fri May 1 07:16:59 1998 Assar Westerlund <assar@sics.se>
* telnet/commands.c: unifdef -DHAVE_H_ERRNO
Sat Apr 4 15:00:29 1998 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): moved the printing of `trying...' to the
loop
Thu Mar 12 02:33:48 1998 Assar Westerlund <assar@sics.se>
* telnet/telnet_locl.h: include <term.h>. From Gregory S. Stark
<gsstark@mit.edu>
Sat Feb 21 15:12:38 1998 Assar Westerlund <assar@sics.se>
* telnetd/ext.h: add prototype for login_tty
* telnet/utilities.c (printsub): `direction' is now an int.
* libtelnet/misc-proto.h: add prototype for `printsub'
Tue Feb 17 02:45:01 1998 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos.c (kerberos4_is): cred.pname should be
cred.pinst. From <art@stacken.kth.se>
Sun Feb 15 02:46:39 1998 Assar Westerlund <assar@sics.se>
* telnet/*/*.c: renamed `telnet' to `my_telnet' to avoid
conflicts with system header files on mklinux.
Tue Feb 10 02:09:03 1998 Assar Westerlund <assar@sics.se>
* telnetd/telnetd.c: new signature for `getterminaltype' and
`auth_wait'
* libtelnet: changed the signature of the authentication method
`status'
Sat Feb 7 07:21:29 1998 Assar Westerlund <assar@sics.se>
* */*.c: replace HAS_GETTOS by HAVE_PARSETOS and HAVE_GETTOSBYNAME
Fri Dec 26 16:17:10 1997 Assar Westerlund <assar@sics.se>
* telnet/commands.c (tn): repair support for numeric addresses
Sun Dec 21 09:40:31 1997 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos.c: fix up lots of stuff related to the
forwarding of v4 tickets.
* libtelnet/kerberos5.c (kerberos5_forward): zero out `creds'.
Mon Dec 15 20:53:13 1997 Johan Danielsson <joda@emma.pdc.kth.se>
* telnet/sys_bsd.c: Don't turn off OPOST in 8bit-mode.
Tue Dec 9 19:26:50 1997 Assar Westerlund <assar@sics.se>
* telnet/main.c (main): add 'b' to getopt
Sat Nov 29 03:28:54 1997 Johan Danielsson <joda@emma.pdc.kth.se>
* telnet/telnet.c: Change binary mode to do just that, and add a
eight-bit mode for just passing all characters.
Sun Nov 16 04:37:02 1997 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos5.c (kerberos5_send): always ask for a session
key of type DES
* libtelnet/kerberos5.c: remove old garbage and fix call to
krb5_auth_con_setaddrs_from_fd
Fri Nov 14 20:35:18 1997 Johan Danielsson <joda@emma.pdc.kth.se>
* telnetd/telnetd.c: Output contents of /etc/issue.
Mon Nov 3 07:09:16 1997 Assar Westerlund <assar@sics.se>
* telnet/telnet_locl.h: only include <sys/termio.h> iff
!defined(HAVE_TERMIOS_H)
* libtelnet/kerberos.c (kerberos4_is): send the peer address to
krb_rd_req
* telnetd/telnetd.c (terminaltypeok): always return OK. It used
to call `tgetent' to figure if it was a defined terminal type.
It's possible to overflow tgetent so that's a bad idea. The worst
that could happen by saying yes to all terminals is that the user
ends up with a terminal that has no definition on the local
system. And besides, most telnet client has no support for
falling back to a different terminal type.
Mon Oct 20 05:47:19 1997 Assar Westerlund <assar@sics.se>
* libtelnet/kerberos5.c: remove lots of old junk. clean-up.
better error checking and reporting. tell the user permission
denied much earlier.
* libtelnet/kerberos.c (kerberos4_is): only print
UserNameRequested if != NULL