2007-07-12 Love Hörnquist Åstrand <lha@it.su.se> * rsh.c: Fix pointer vs strict alias rules. * rshd.c: Fix pointer vs strict alias rules. 2007-01-04 Love Hörnquist Åstrand <lha@it.su.se> * rshd.c: Declare iruserok if needed, based on bug report from David Love. 2006-11-14 Love Hörnquist Åstrand <lha@it.su.se> * rsh_locl.h: Forward decl. 2006-10-14 Love Hörnquist Åstrand <lha@it.su.se> * rsh_locl.h: Include "crypto-headers.h". 2006-10-07 Love Hörnquist Åstrand <lha@it.su.se> * Makefile.am: Add man_MANS to EXTRA_DIST 2006-04-27 Love Hörnquist Åstrand <lha@it.su.se> * Makefile.am: rshd_SOURCES += add limits_conf.c * rsh_locl.h: Include "loginpaths.h" * rshd.c: Read limits from limits.confon non-root login, patch from Daniel Ahlin 2006-02-27 Johan Danielsson <joda@pdc.kth.se> * rshd.8: grammar (from Thomas Klausner) 2006-01-31 Johan Danielsson <joda@pdc.kth.se> * rshd.c (krb5_start_session): syslog failures to store cred cache 2005-12-21 Love Hörnquist Åstrand <lha@it.su.se> * rshd.c (doit): move creation of users ticket file to later to avoid seteuid/setuid dance. this breaks DCE, so remove support for it completely. 2005-10-22 Love Hörnquist Åstrand <lha@it.su.se> * rshd.c: Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell * rsh.c: Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell 2005-06-08 Love Hörnquist Åstrand <lha@it.su.se> * rshd.c: init some important variables and check that they are set checking authentication, all to please gcc 2005-05-27 Love Hörnquist Åstrand <lha@it.su.se> * rshd.c: case uid_t to unsigned long in printf format 2005-04-27 Love Hörnquist Åstrand <lha@it.su.se> * rsh_locl.h: Use larger buffer for recving data to be compatible with older versions of heimdal (0.4 branch specificly) * rshd.c: Use larger buffer for recving data to be compatible with older versions of heimdal (0.4 branch specificly) 2005-04-25 Love Hörnquist Åstrand <lha@it.su.se> * rshd.c: use snprintf to format tkfile 2005-04-24 Love Hörnquist Åstrand <lha@it.su.se> * rsh.c: use strlcat * rsh.c: use strlcpy * rsh_locl.h: forward declaration for private structures 2005-04-20 Love Hörnquist Åstrand <lha@it.su.se> * rsh.c: cast size_t to unsigned long 2004-09-21 Johan Danielsson <joda@pdc.kth.se> * rshd.c: rename loop to rshd_loop * rshd.c: pass errsock status to init_ivecs * rsh.c: rename loop() to rsh_loop() * rsh.c (loop): pass errsock status to init_ivecs * common.c (init_ivecs): if we don't have an errsock the ivecs should point to the same data * rshd.c: if we don't have an errsock, dup stdout to stderr (this would normally be done by inetd, but not by mini_inetd). * rshd.c: move keepalive setting to after setting up sockets 2004-02-20 Johan Danielsson <joda@pdc.kth.se> * rsh.1: reorder and document some options * rsh_locl.h: include kafs.h if krb4 || krb5 * rsh.c: reorder some options 2003-09-04 Johan Danielsson <joda@pdc.kth.se> * rsh.1: document -d 2003-08-19 Johan Danielsson <joda@pdc.kth.se> * rshd.c: -P also with KRB5 2003-04-22 Love Hörnquist Åstrand <lha@it.su.se> * rsh.1: replace > with \*[Gt] 2003-04-16 Johan Danielsson <joda@pdc.kth.se> * rsh.c: use krb5_appdefault to get defaults for forward and encrypt * rshd.c: use ARG_MAX + 1 * rshd.c (read_str): return allocated string * rsh_locl.h: set NCARGS to 8k if undefined 2003-03-23 Assar Westerlund <assar@kth.se> * rsh.c (loop): only check errsock if it's valid 2003-03-18 Love Love Hörnquist Åstrand <lha@it.su.se> * rshd.c: do krb5_afslog when compling with afs support * rsh_locl.h: always include kafs.h 2002-11-22 Johan Danielsson <joda@pdc.kth.se> * rshd.8: clarify -x and kerberos 5 2002-11-01 Johan Danielsson <joda@pdc.kth.se> * rsh_locl.h: bump COMMAND_SZ to NCARGS+1 2002-09-04 Johan Danielsson <joda@pdc.kth.se> * rsh.c: free some memory 2002-09-04 Assar Westerlund <assar@kth.se> * common.c: krb5_crypto_block_size -> krb5_crypto_getblocksize 2002-09-04 Johan Danielsson <joda@pdc.kth.se> * rsh.1: document -P 2002-09-03 Johan Danielsson <joda@pdc.kth.se> * rsh.c: revert to protocol v1 if not asked for specific protocol * rshd.c: handle protocol version 2 * rsh.c: handle protocol version 2 * common.c: handle protocol version 2 * rsh_locl.h: handle protocol version 2 2002-02-18 Johan Danielsson <joda@pdc.kth.se> * rshd.c: don't show options that doesn't apply * rsh.c: don't show options that doesn't apply * rsh_locl.h: if we're not building with any kerberos support, just call read/write directly * common.c: if we're not building with any kerberos support, just call read/write directly * rshd.c: make this build without krb5; also use the addrinfo interface to mini_inetd, and set the keepalive option if requested * rsh.c: make this build without krb5 * rsh_locl.h: make this build without krb5 * common.c: make this build without krb5 2001-11-30 Johan Danielsson <joda@pdc.kth.se> * rshd.c: make the syslog messages somewhat more informative 2001-08-15 Johan Danielsson <joda@pdc.kth.se> * rsh.c: only complain about encryption flag when old authentication is requested 2001-08-07 Johan Danielsson <joda@pdc.kth.se> * rsh.c: don't try broken auth if rresvport failed; try to give some more informative error messages 2001-07-31 Johan Danielsson <joda@pdc.kth.se> * rshd.8: add an EXAMPLE * rshd.8: manual page * rshd.c: add some compat flags * rsh.1: manual page * rsh.c: iff -d, set the SO_DEBUG flags of the stdout and stderr socket; implement parsing user@host 2001-07-19 Assar Westerlund <assar@sics.se> * rshd.c (fatal): use vsnprintf correctly 2001-02-07 Assar Westerlund <assar@sics.se> * Makefile.am: add login_access * rshd.c (login_access): add prototype (syslog_and_die, fatal): add printf attributes (*): AIX -> _AIX (doit): use login_access based on patches from Ake Sandgren <ake@cs.umu.se> 2001-01-09 Assar Westerlund <assar@sics.se> * rshd.c (save_krb5_creds): use krb5_rd_cred2 instead of krb5_rd_cred 2000-12-31 Assar Westerlund <assar@sics.se> * rshd.c (main): handle krb5_init_context failure consistently * rsh.c (main): handle krb5_init_context failure consistently 2000-12-05 Johan Danielsson <joda@pdc.kth.se> * rshd.c: require encryption if passed -x 2000-11-15 Assar Westerlund <assar@sics.se> * rshd.c (loop): check that the fd's aren't too large to select on * rsh.c (loop, proto): check that the fd's aren't too large to select on 2000-08-10 Assar Westerlund <assar@sics.se> * rsh.c: move code to do config/command parsing correctly. 2000-08-09 Assar Westerlund <assar@sics.se> * rsh.c (main): only fetch stuff from krb5.conf when no option has been given 2000-08-01 Assar Westerlund <assar@sics.se> * rsh.c (doit): loop until we create an error socket of an supported socket family 2000-07-02 Assar Westerlund <assar@sics.se> * rshd.c: DCE stuff from Ake Sandgren <ake@cs.umu.se> do not call syslog with a variable as format string * rsh_locl.h (_PATH_ETC_ENVIRONMENT): add 2000-06-09 Assar Westerlund <assar@sics.se> * rsh.c (main): work-around for setuid and capabilities bug fixed in Linux 2.2.16 2000-06-06 Johan Danielsson <joda@pdc.kth.se> * rsh.c: nuke long option from -z * rsh.c: don't try to encrypt if auth is broken (Daniel Kouril) 2000-06-03 Assar Westerlund <assar@sics.se> * rshd.c (doit): check return value of getspnam. From <haba@pdc.kth.se> 2000-05-23 Assar Westerlund <assar@sics.se> * rsh.c (proto): select on the normal socket when waiting for the daemon to connect back to the stderr port, so that we discover when data arrives there before. when that happens, we assume that the daemon did not manage to connect (because of NAT/whatever) and continue as if `-e' was given * rshd.c (doit): if we fail to connect back to the stderr port, act as if `-e' was given on the client side, i.e. without the special TCP-connection. This tries to make things better when running the head against a NAT wall, for example. 2000-02-07 Assar Westerlund <assar@sics.se> * Makefile.am (LDADD): make sure we use the heimdal libdes 2000-02-06 Assar Westerlund <assar@sics.se> * *: conditionalize des stuff on KRB4 1999-12-16 Assar Westerlund <assar@sics.se> * rsh.c (doit): addrinfo returned from getaddrinfo() is not usable directly as hints. copy it and set AI_PASSIVE. 1999-11-20 Assar Westerlund <assar@sics.se> * rsh.c (main): remember to close the priviledged sockets before calling rlogin 1999-11-02 Assar Westerlund <assar@sics.se> * rsh.c (main): redo the v4/v5 selection for consistency. -4 -> try only v4 -5 -> try only v5 none, -45 -> try v5, v4 1999-10-26 Assar Westerlund <assar@sics.se> * rshd.c (main): ignore SIGPIPE * common.c (do_read): the encoded length can be longer than the buffer being used, allocate memory for it dynamically. From Brian A May <bmay@dgs.monash.edu.au> 1999-10-14 Assar Westerlund <assar@sics.se> * rsh.c (proto): be more careful and don't print errno when read() returns 0 1999-09-20 Assar Westerlund <assar@sics.se> * rshd.c (recv_krb4_auth): set `iv' 1999-08-16 Assar Westerlund <assar@sics.se> * common.c (do_read): be careful with the return value from krb5_net_read 1999-08-05 Assar Westerlund <assar@sics.se> * rsh.c: call freehostent * rsh.c: remove some dead code 1999-08-04 Assar Westerlund <assar@sics.se> * rshd.c: re-write the handling of forwarded credentials and stuff. From Miroslav Ruda <ruda@ics.muni.cz> * rsh_locl.h: always include kafs.h * rsh.c: add `-z' and `-G' options * rsh.c (loop): shutdown one side of the TCP connection on EOF. From Brian A May <bmay@dgs.monash.edu.au> * common.c (do_read): handle EOF. From Brian A May <bmay@dgs.monash.edu.au> 1999-08-01 Assar Westerlund <assar@sics.se> * rsh.c: const fixes 1999-07-29 Assar Westerlund <assar@sics.se> * rshd.c: v6-ify * rsh.c: v6-ify 1999-07-28 Assar Westerlund <assar@sics.se> * rsh_locl.h: move around kafs.h 1999-07-24 Assar Westerlund <assar@sics.se> * rsh_locl.h: <shadow.h> * rsh.c, rshd.c: improve forwarding and implement unique ccache on server. From Miroslav Ruda <ruda@ics.muni.cz> 1999-07-03 Assar Westerlund <assar@sics.se> * rsh.c (construct_command): handle argc == 0 for generality 1999-06-23 Assar Westerlund <assar@sics.se> * rsh.c: new option `-e' for not trying to open an stderr socket 1999-06-17 Assar Westerlund <assar@sics.se> * rsh_locl.h (RSH_BUFSIZ): bump to 16 * 1024 to be sure that we don't leave any data inside des_enc_read. (that constant should really be exported in some way...) 1999-06-15 Assar Westerlund <assar@sics.se> * rsh.c: use get_default_username and resulting const pollution 1999-05-21 Assar Westerlund <assar@sics.se> * rsh.c (main): try $USERNAME 1999-05-14 Assar Westerlund <assar@sics.se> * rshd.c (doit): afslog correctly 1999-05-11 Assar Westerlund <assar@sics.se> * rsh.c (main): add fallback to rlogin 1999-05-10 Assar Westerlund <assar@sics.se> * rsh.c (send_krb5_auth): call krb5_sendauth with ccache == NULL. check return value from krb5_crypto_init * common.c (do_write, do_read): always return -1 for failure (net_write, net_read): remove. they already exist in libroken 1999-05-09 Assar Westerlund <assar@sics.se> * rsh.c: make sure it tries with all other authentication methods after one has failed * rsh.c (main): detect the case of no command given. 1999-04-11 Assar Westerlund <assar@sics.se> * rsh.c: new option --forwardable. use print_version Sat Apr 10 17:10:55 1999 Assar Westerlund <assar@sics.se> * rshd.c (setup_copier): use `socketpair' instead of `pipe'. Some shells don't think it's a rsh session if they find a pipe at the other end. (setup_environment): add SSH_CLIENT just to make bash happy * common.c (do_read): use krb5_get_wrapped_length Wed Mar 24 03:59:42 1999 Assar Westerlund <assar@sics.se> * rsh.c (loop): more braces to make gcc happy Tue Mar 23 17:08:32 1999 Johan Danielsson <joda@hella.pdc.kth.se> * rsh_locl.h: kafs.h * rshd.c: add `-P', `-v', and `-L' flags Thu Mar 18 11:37:24 1999 Johan Danielsson <joda@hella.pdc.kth.se> * Makefile.am: include Makefile.am.common Tue Dec 1 14:44:44 1998 Johan Danielsson <joda@hella.pdc.kth.se> * appl/rsh/rshd.c: update to new crypto framework * appl/rsh/rsh_locl.h: update to new crypto framework * appl/rsh/rsh.c: update to new crypto framework * appl/rsh/common.c: update to new crypto framework Mon Nov 2 01:15:06 1998 Assar Westerlund <assar@sics.se> * appl/rsh/rsh.c (main): initialize host * appl/rsh/rshd.c (recv_krb5_auth): disable `do_encrypt' if not encrypting. Thu Jul 30 23:12:17 1998 Assar Westerlund <assar@sics.se> * appl/rsh/rsh.c: kludges for parsing `rsh hostname -l user' Thu Jul 23 19:49:03 1998 Johan Danielsson <joda@emma.pdc.kth.se> * appl/rsh/rshd.c: use krb5_verify_authenticator_checksum Sat Apr 18 21:13:06 1998 Johan Danielsson <joda@emma.pdc.kth.se> * appl/rsh/rsh.c: Don't try v5 if (only) `-4' is specified. Sun Dec 21 09:44:05 1997 Assar Westerlund <assar@sics.se> * appl/rsh/rshd.c (recv_krb5_auth): swap the order of the `local_user' and the `remote_user' * appl/rsh/rsh.c (send_krb5_auth): swap the order of the `local_user' and the `remote_user' Sat Nov 29 07:10:11 1997 Assar Westerlund <assar@sics.se> * appl/rsh/rshd.c: updated to use getarg. changed `struct fd_set' to `fd_set'. implemented broken/BSD authentication (requires iruserok) Wed Nov 12 02:35:57 1997 Assar Westerlund <assar@sics.se> * appl/rsh/rsh_locl.h: add AUTH_BROKEN and PATH_RSH * appl/rsh/Makefile.am: set BINDIR * appl/rsh/rsh.c: implemented BSD-style reserved port `authentication' Sun Aug 24 08:06:54 1997 Assar Westerlund <assar@sics.se> * appl/rsh/rshd.c: syslog remote shells Tue Aug 12 01:29:46 1997 Assar Westerlund <assar@sics.se> * appl/rshd/rshd.c: Use `krb5_sock_to_principal'. Send server parameter to krb5_rd_req/krb5_recvauth. Set addresses in auth_context. Fri Jul 25 17:32:12 1997 Assar Westerlund <assar@sics.se> * appl/rsh/rshd.c: implement forwarding * appl/rsh/rsh.c: Use getarg. Implement forwarding. Sun Jul 13 00:32:16 1997 Assar Westerlund <assar@sics.se> * appl/rsh: Conditionalize the krb4-support. Wed Jul 9 06:58:00 1997 Assar Westerlund <assar@sics.se> * appl/rsh/rsh.c: use the correct user for the checksum Mon Jul 7 11:15:51 1997 Assar Westerlund <assar@sics.se> * appl/rsh/rshd.c: Now works. Also implementd encryption and `-p'. * appl/rsh/common.c: new file Mon Jun 30 06:08:14 1997 Assar Westerlund <assar@sics.se> * appl/rsh: New program.