12001-02-07 Assar Westerlund <assar@sics.se> 2 3 * Makefile.am: add login_access 4 * rshd.c (login_access): add prototype 5 (syslog_and_die, fatal): add printf attributes 6 (*): AIX -> _AIX 7 (doit): use login_access 8 based on patches from Ake Sandgren <ake@cs.umu.se> 9 102001-01-09 Assar Westerlund <assar@sics.se> 11 12 * rshd.c (save_krb5_creds): use krb5_rd_cred2 instead of 13 krb5_rd_cred 14 152000-12-31 Assar Westerlund <assar@sics.se> 16 17 * rshd.c (main): handle krb5_init_context failure consistently 18 * rsh.c (main): handle krb5_init_context failure consistently 19 202000-12-05 Johan Danielsson <joda@pdc.kth.se> 21 22 * rshd.c: require encryption if passed -x 23 242000-11-15 Assar Westerlund <assar@sics.se> 25 26 * rshd.c (loop): check that the fd's aren't too large to select on 27 * rsh.c (loop, proto): check that the fd's aren't too large to 28 select on 29 302000-08-10 Assar Westerlund <assar@sics.se> 31 32 * rsh.c: move code to do config/command parsing correctly. 33 342000-08-09 Assar Westerlund <assar@sics.se> 35 36 * rsh.c (main): only fetch stuff from krb5.conf when no option has 37 been given 38 392000-08-01 Assar Westerlund <assar@sics.se> 40 41 * rsh.c (doit): loop until we create an error socket of an 42 supported socket family 43 442000-07-02 Assar Westerlund <assar@sics.se> 45 46 * rshd.c: DCE stuff from Ake Sandgren <ake@cs.umu.se> 47 do not call syslog with a variable as format string 48 49 * rsh_locl.h (_PATH_ETC_ENVIRONMENT): add 50 512000-06-09 Assar Westerlund <assar@sics.se> 52 53 * rsh.c (main): work-around for setuid and capabilities bug fixed 54 in Linux 2.2.16 55 562000-06-06 Johan Danielsson <joda@pdc.kth.se> 57 58 * rsh.c: nuke long option from -z 59 60 * rsh.c: don't try to encrypt if auth is broken (Daniel Kouril) 61 622000-06-03 Assar Westerlund <assar@sics.se> 63 64 * rshd.c (doit): check return value of getspnam. From 65 <haba@pdc.kth.se> 66 672000-05-23 Assar Westerlund <assar@sics.se> 68 69 * rsh.c (proto): select on the normal socket when waiting for the 70 daemon to connect back to the stderr port, so that we discover 71 when data arrives there before. when that happens, we assume that 72 the daemon did not manage to connect (because of NAT/whatever) and 73 continue as if `-e' was given 74 * rshd.c (doit): if we fail to connect back to the stderr port, 75 act as if `-e' was given on the client side, i.e. without the 76 special TCP-connection. This tries to make things better when 77 running the head against a NAT wall, for example. 78 792000-02-07 Assar Westerlund <assar@sics.se> 80 81 * Makefile.am (LDADD): make sure we use the heimdal libdes 82 832000-02-06 Assar Westerlund <assar@sics.se> 84 85 * *: conditionalize des stuff on KRB4 86 871999-12-16 Assar Westerlund <assar@sics.se> 88 89 * rsh.c (doit): addrinfo returned from getaddrinfo() is not usable 90 directly as hints. copy it and set AI_PASSIVE. 91 921999-11-20 Assar Westerlund <assar@sics.se> 93 94 * rsh.c (main): remember to close the priviledged sockets before 95 calling rlogin 96 971999-11-02 Assar Westerlund <assar@sics.se> 98 99 * rsh.c (main): redo the v4/v5 selection for consistency. -4 -> 100 try only v4 -5 -> try only v5 none, -45 -> try v5, v4 101 1021999-10-26 Assar Westerlund <assar@sics.se> 103 104 * rshd.c (main): ignore SIGPIPE 105 106 * common.c (do_read): the encoded length can be longer than the 107 buffer being used, allocate memory for it dynamically. From Brian 108 A May <bmay@dgs.monash.edu.au> 109 1101999-10-14 Assar Westerlund <assar@sics.se> 111 112 * rsh.c (proto): be more careful and don't print errno when read() 113 returns 0 114 1151999-09-20 Assar Westerlund <assar@sics.se> 116 117 * rshd.c (recv_krb4_auth): set `iv' 118 1191999-08-16 Assar Westerlund <assar@sics.se> 120 121 * common.c (do_read): be careful with the return value from 122 krb5_net_read 123 1241999-08-05 Assar Westerlund <assar@sics.se> 125 126 * rsh.c: call freehostent 127 128 * rsh.c: remove some dead code 129 1301999-08-04 Assar Westerlund <assar@sics.se> 131 132 * rshd.c: re-write the handling of forwarded credentials and 133 stuff. From Miroslav Ruda <ruda@ics.muni.cz> 134 135 * rsh_locl.h: always include kafs.h 136 137 * rsh.c: add `-z' and `-G' options 138 139 * rsh.c (loop): shutdown one side of the TCP connection on EOF. 140 From Brian A May <bmay@dgs.monash.edu.au> 141 142 * common.c (do_read): handle EOF. From Brian A May 143 <bmay@dgs.monash.edu.au> 144 1451999-08-01 Assar Westerlund <assar@sics.se> 146 147 * rsh.c: const fixes 148 1491999-07-29 Assar Westerlund <assar@sics.se> 150 151 * rshd.c: v6-ify 152 153 * rsh.c: v6-ify 154 1551999-07-28 Assar Westerlund <assar@sics.se> 156 157 * rsh_locl.h: move around kafs.h 158 1591999-07-24 Assar Westerlund <assar@sics.se> 160 161 * rsh_locl.h: <shadow.h> 162 163 * rsh.c, rshd.c: improve forwarding and implement unique ccache on 164 server. From Miroslav Ruda <ruda@ics.muni.cz> 165 1661999-07-03 Assar Westerlund <assar@sics.se> 167 168 * rsh.c (construct_command): handle argc == 0 for generality 169 1701999-06-23 Assar Westerlund <assar@sics.se> 171 172 * rsh.c: new option `-e' for not trying to open an stderr socket 173 1741999-06-17 Assar Westerlund <assar@sics.se> 175 176 * rsh_locl.h (RSH_BUFSIZ): bump to 16 * 1024 to be sure that we 177 don't leave any data inside des_enc_read. (that constant should 178 really be exported in some way...) 179 1801999-06-15 Assar Westerlund <assar@sics.se> 181 182 * rsh.c: use get_default_username and resulting const pollution 183 1841999-05-21 Assar Westerlund <assar@sics.se> 185 186 * rsh.c (main): try $USERNAME 187 1881999-05-14 Assar Westerlund <assar@sics.se> 189 190 * rshd.c (doit): afslog correctly 191 1921999-05-11 Assar Westerlund <assar@sics.se> 193 194 * rsh.c (main): add fallback to rlogin 195 1961999-05-10 Assar Westerlund <assar@sics.se> 197 198 * rsh.c (send_krb5_auth): call krb5_sendauth with ccache == NULL. 199 check return value from krb5_crypto_init 200 201 * common.c (do_write, do_read): always return -1 for failure 202 (net_write, net_read): remove. they already exist in libroken 203 2041999-05-09 Assar Westerlund <assar@sics.se> 205 206 * rsh.c: make sure it tries with all other authentication methods 207 after one has failed 208 * rsh.c (main): detect the case of no command given. 209 2101999-04-11 Assar Westerlund <assar@sics.se> 211 212 * rsh.c: new option --forwardable. use print_version 213 214Sat Apr 10 17:10:55 1999 Assar Westerlund <assar@sics.se> 215 216 * rshd.c (setup_copier): use `socketpair' instead of `pipe'. Some 217 shells don't think it's a rsh session if they find a pipe at the 218 other end. 219 (setup_environment): add SSH_CLIENT just to make bash happy 220 221 * common.c (do_read): use krb5_get_wrapped_length 222 223Wed Mar 24 03:59:42 1999 Assar Westerlund <assar@sics.se> 224 225 * rsh.c (loop): more braces to make gcc happy 226 227Tue Mar 23 17:08:32 1999 Johan Danielsson <joda@hella.pdc.kth.se> 228 229 * rsh_locl.h: kafs.h 230 231 * rshd.c: add `-P', `-v', and `-L' flags 232 233Thu Mar 18 11:37:24 1999 Johan Danielsson <joda@hella.pdc.kth.se> 234 235 * Makefile.am: include Makefile.am.common 236 237Tue Dec 1 14:44:44 1998 Johan Danielsson <joda@hella.pdc.kth.se> 238 239 * appl/rsh/rshd.c: update to new crypto framework 240 241 * appl/rsh/rsh_locl.h: update to new crypto framework 242 243 * appl/rsh/rsh.c: update to new crypto framework 244 245 * appl/rsh/common.c: update to new crypto framework 246 247Mon Nov 2 01:15:06 1998 Assar Westerlund <assar@sics.se> 248 249 * appl/rsh/rsh.c (main): initialize host 250 251 * appl/rsh/rshd.c (recv_krb5_auth): disable `do_encrypt' if not 252 encrypting. 253 254Thu Jul 30 23:12:17 1998 Assar Westerlund <assar@sics.se> 255 256 * appl/rsh/rsh.c: kludges for parsing `rsh hostname -l user' 257 258Thu Jul 23 19:49:03 1998 Johan Danielsson <joda@emma.pdc.kth.se> 259 260 * appl/rsh/rshd.c: use krb5_verify_authenticator_checksum 261 262Sat Apr 18 21:13:06 1998 Johan Danielsson <joda@emma.pdc.kth.se> 263 264 * appl/rsh/rsh.c: Don't try v5 if (only) `-4' is specified. 265 266Sun Dec 21 09:44:05 1997 Assar Westerlund <assar@sics.se> 267 268 * appl/rsh/rshd.c (recv_krb5_auth): swap the order of the 269 `local_user' and the `remote_user' 270 271 * appl/rsh/rsh.c (send_krb5_auth): swap the order of the 272 `local_user' and the `remote_user' 273 274Sat Nov 29 07:10:11 1997 Assar Westerlund <assar@sics.se> 275 276 * appl/rsh/rshd.c: updated to use getarg. 277 changed `struct fd_set' to `fd_set'. 278 implemented broken/BSD authentication (requires iruserok) 279 280Wed Nov 12 02:35:57 1997 Assar Westerlund <assar@sics.se> 281 282 * appl/rsh/rsh_locl.h: add AUTH_BROKEN and PATH_RSH 283 284 * appl/rsh/Makefile.am: set BINDIR 285 286 * appl/rsh/rsh.c: implemented BSD-style reserved port 287 `authentication' 288 289Sun Aug 24 08:06:54 1997 Assar Westerlund <assar@sics.se> 290 291 * appl/rsh/rshd.c: syslog remote shells 292 293Tue Aug 12 01:29:46 1997 Assar Westerlund <assar@sics.se> 294 295 * appl/rshd/rshd.c: Use `krb5_sock_to_principal'. Send server 296 parameter to krb5_rd_req/krb5_recvauth. Set addresses in 297 auth_context. 298 299Fri Jul 25 17:32:12 1997 Assar Westerlund <assar@sics.se> 300 301 * appl/rsh/rshd.c: implement forwarding 302 303 * appl/rsh/rsh.c: Use getarg. Implement forwarding. 304 305Sun Jul 13 00:32:16 1997 Assar Westerlund <assar@sics.se> 306 307 * appl/rsh: Conditionalize the krb4-support. 308 309Wed Jul 9 06:58:00 1997 Assar Westerlund <assar@sics.se> 310 311 * appl/rsh/rsh.c: use the correct user for the checksum 312 313Mon Jul 7 11:15:51 1997 Assar Westerlund <assar@sics.se> 314 315 * appl/rsh/rshd.c: Now works. Also implementd encryption and 316 `-p'. 317 318 * appl/rsh/common.c: new file 319 320Mon Jun 30 06:08:14 1997 Assar Westerlund <assar@sics.se> 321 322 * appl/rsh: New program. 323 324