12001-01-09 Assar Westerlund <assar@sics.se> 2 3 * rshd.c (save_krb5_creds): use krb5_rd_cred2 instead of 4 krb5_rd_cred 5 62000-12-31 Assar Westerlund <assar@sics.se> 7 8 * rshd.c (main): handle krb5_init_context failure consistently 9 * rsh.c (main): handle krb5_init_context failure consistently 10 112000-12-05 Johan Danielsson <joda@pdc.kth.se> 12 13 * rshd.c: require encryption if passed -x 14 152000-11-15 Assar Westerlund <assar@sics.se> 16 17 * rshd.c (loop): check that the fd's aren't too large to select on 18 * rsh.c (loop, proto): check that the fd's aren't too large to 19 select on 20 212000-08-10 Assar Westerlund <assar@sics.se> 22 23 * rsh.c: move code to do config/command parsing correctly. 24 252000-08-09 Assar Westerlund <assar@sics.se> 26 27 * rsh.c (main): only fetch stuff from krb5.conf when no option has 28 been given 29 302000-08-01 Assar Westerlund <assar@sics.se> 31 32 * rsh.c (doit): loop until we create an error socket of an 33 supported socket family 34 352000-07-02 Assar Westerlund <assar@sics.se> 36 37 * rshd.c: DCE stuff from Ake Sandgren <ake@cs.umu.se> 38 do not call syslog with a variable as format string 39 40 * rsh_locl.h (_PATH_ETC_ENVIRONMENT): add 41 422000-06-09 Assar Westerlund <assar@sics.se> 43 44 * rsh.c (main): work-around for setuid and capabilities bug fixed 45 in Linux 2.2.16 46 472000-06-06 Johan Danielsson <joda@pdc.kth.se> 48 49 * rsh.c: nuke long option from -z 50 51 * rsh.c: don't try to encrypt if auth is broken (Daniel Kouril) 52 532000-06-03 Assar Westerlund <assar@sics.se> 54 55 * rshd.c (doit): check return value of getspnam. From 56 <haba@pdc.kth.se> 57 582000-05-23 Assar Westerlund <assar@sics.se> 59 60 * rsh.c (proto): select on the normal socket when waiting for the 61 daemon to connect back to the stderr port, so that we discover 62 when data arrives there before. when that happens, we assume that 63 the daemon did not manage to connect (because of NAT/whatever) and 64 continue as if `-e' was given 65 * rshd.c (doit): if we fail to connect back to the stderr port, 66 act as if `-e' was given on the client side, i.e. without the 67 special TCP-connection. This tries to make things better when 68 running the head against a NAT wall, for example. 69 702000-02-07 Assar Westerlund <assar@sics.se> 71 72 * Makefile.am (LDADD): make sure we use the heimdal libdes 73 742000-02-06 Assar Westerlund <assar@sics.se> 75 76 * *: conditionalize des stuff on KRB4 77 781999-12-16 Assar Westerlund <assar@sics.se> 79 80 * rsh.c (doit): addrinfo returned from getaddrinfo() is not usable 81 directly as hints. copy it and set AI_PASSIVE. 82 831999-11-20 Assar Westerlund <assar@sics.se> 84 85 * rsh.c (main): remember to close the priviledged sockets before 86 calling rlogin 87 881999-11-02 Assar Westerlund <assar@sics.se> 89 90 * rsh.c (main): redo the v4/v5 selection for consistency. -4 -> 91 try only v4 -5 -> try only v5 none, -45 -> try v5, v4 92 931999-10-26 Assar Westerlund <assar@sics.se> 94 95 * rshd.c (main): ignore SIGPIPE 96 97 * common.c (do_read): the encoded length can be longer than the 98 buffer being used, allocate memory for it dynamically. From Brian 99 A May <bmay@dgs.monash.edu.au> 100 1011999-10-14 Assar Westerlund <assar@sics.se> 102 103 * rsh.c (proto): be more careful and don't print errno when read() 104 returns 0 105 1061999-09-20 Assar Westerlund <assar@sics.se> 107 108 * rshd.c (recv_krb4_auth): set `iv' 109 1101999-08-16 Assar Westerlund <assar@sics.se> 111 112 * common.c (do_read): be careful with the return value from 113 krb5_net_read 114 1151999-08-05 Assar Westerlund <assar@sics.se> 116 117 * rsh.c: call freehostent 118 119 * rsh.c: remove some dead code 120 1211999-08-04 Assar Westerlund <assar@sics.se> 122 123 * rshd.c: re-write the handling of forwarded credentials and 124 stuff. From Miroslav Ruda <ruda@ics.muni.cz> 125 126 * rsh_locl.h: always include kafs.h 127 128 * rsh.c: add `-z' and `-G' options 129 130 * rsh.c (loop): shutdown one side of the TCP connection on EOF. 131 From Brian A May <bmay@dgs.monash.edu.au> 132 133 * common.c (do_read): handle EOF. From Brian A May 134 <bmay@dgs.monash.edu.au> 135 1361999-08-01 Assar Westerlund <assar@sics.se> 137 138 * rsh.c: const fixes 139 1401999-07-29 Assar Westerlund <assar@sics.se> 141 142 * rshd.c: v6-ify 143 144 * rsh.c: v6-ify 145 1461999-07-28 Assar Westerlund <assar@sics.se> 147 148 * rsh_locl.h: move around kafs.h 149 1501999-07-24 Assar Westerlund <assar@sics.se> 151 152 * rsh_locl.h: <shadow.h> 153 154 * rsh.c, rshd.c: improve forwarding and implement unique ccache on 155 server. From Miroslav Ruda <ruda@ics.muni.cz> 156 1571999-07-03 Assar Westerlund <assar@sics.se> 158 159 * rsh.c (construct_command): handle argc == 0 for generality 160 1611999-06-23 Assar Westerlund <assar@sics.se> 162 163 * rsh.c: new option `-e' for not trying to open an stderr socket 164 1651999-06-17 Assar Westerlund <assar@sics.se> 166 167 * rsh_locl.h (RSH_BUFSIZ): bump to 16 * 1024 to be sure that we 168 don't leave any data inside des_enc_read. (that constant should 169 really be exported in some way...) 170 1711999-06-15 Assar Westerlund <assar@sics.se> 172 173 * rsh.c: use get_default_username and resulting const pollution 174 1751999-05-21 Assar Westerlund <assar@sics.se> 176 177 * rsh.c (main): try $USERNAME 178 1791999-05-14 Assar Westerlund <assar@sics.se> 180 181 * rshd.c (doit): afslog correctly 182 1831999-05-11 Assar Westerlund <assar@sics.se> 184 185 * rsh.c (main): add fallback to rlogin 186 1871999-05-10 Assar Westerlund <assar@sics.se> 188 189 * rsh.c (send_krb5_auth): call krb5_sendauth with ccache == NULL. 190 check return value from krb5_crypto_init 191 192 * common.c (do_write, do_read): always return -1 for failure 193 (net_write, net_read): remove. they already exist in libroken 194 1951999-05-09 Assar Westerlund <assar@sics.se> 196 197 * rsh.c: make sure it tries with all other authentication methods 198 after one has failed 199 * rsh.c (main): detect the case of no command given. 200 2011999-04-11 Assar Westerlund <assar@sics.se> 202 203 * rsh.c: new option --forwardable. use print_version 204 205Sat Apr 10 17:10:55 1999 Assar Westerlund <assar@sics.se> 206 207 * rshd.c (setup_copier): use `socketpair' instead of `pipe'. Some 208 shells don't think it's a rsh session if they find a pipe at the 209 other end. 210 (setup_environment): add SSH_CLIENT just to make bash happy 211 212 * common.c (do_read): use krb5_get_wrapped_length 213 214Wed Mar 24 03:59:42 1999 Assar Westerlund <assar@sics.se> 215 216 * rsh.c (loop): more braces to make gcc happy 217 218Tue Mar 23 17:08:32 1999 Johan Danielsson <joda@hella.pdc.kth.se> 219 220 * rsh_locl.h: kafs.h 221 222 * rshd.c: add `-P', `-v', and `-L' flags 223 224Thu Mar 18 11:37:24 1999 Johan Danielsson <joda@hella.pdc.kth.se> 225 226 * Makefile.am: include Makefile.am.common 227 228Tue Dec 1 14:44:44 1998 Johan Danielsson <joda@hella.pdc.kth.se> 229 230 * appl/rsh/rshd.c: update to new crypto framework 231 232 * appl/rsh/rsh_locl.h: update to new crypto framework 233 234 * appl/rsh/rsh.c: update to new crypto framework 235 236 * appl/rsh/common.c: update to new crypto framework 237 238Mon Nov 2 01:15:06 1998 Assar Westerlund <assar@sics.se> 239 240 * appl/rsh/rsh.c (main): initialize host 241 242 * appl/rsh/rshd.c (recv_krb5_auth): disable `do_encrypt' if not 243 encrypting. 244 245Thu Jul 30 23:12:17 1998 Assar Westerlund <assar@sics.se> 246 247 * appl/rsh/rsh.c: kludges for parsing `rsh hostname -l user' 248 249Thu Jul 23 19:49:03 1998 Johan Danielsson <joda@emma.pdc.kth.se> 250 251 * appl/rsh/rshd.c: use krb5_verify_authenticator_checksum 252 253Sat Apr 18 21:13:06 1998 Johan Danielsson <joda@emma.pdc.kth.se> 254 255 * appl/rsh/rsh.c: Don't try v5 if (only) `-4' is specified. 256 257Sun Dec 21 09:44:05 1997 Assar Westerlund <assar@sics.se> 258 259 * appl/rsh/rshd.c (recv_krb5_auth): swap the order of the 260 `local_user' and the `remote_user' 261 262 * appl/rsh/rsh.c (send_krb5_auth): swap the order of the 263 `local_user' and the `remote_user' 264 265Sat Nov 29 07:10:11 1997 Assar Westerlund <assar@sics.se> 266 267 * appl/rsh/rshd.c: updated to use getarg. 268 changed `struct fd_set' to `fd_set'. 269 implemented broken/BSD authentication (requires iruserok) 270 271Wed Nov 12 02:35:57 1997 Assar Westerlund <assar@sics.se> 272 273 * appl/rsh/rsh_locl.h: add AUTH_BROKEN and PATH_RSH 274 275 * appl/rsh/Makefile.am: set BINDIR 276 277 * appl/rsh/rsh.c: implemented BSD-style reserved port 278 `authentication' 279 280Sun Aug 24 08:06:54 1997 Assar Westerlund <assar@sics.se> 281 282 * appl/rsh/rshd.c: syslog remote shells 283 284Tue Aug 12 01:29:46 1997 Assar Westerlund <assar@sics.se> 285 286 * appl/rshd/rshd.c: Use `krb5_sock_to_principal'. Send server 287 parameter to krb5_rd_req/krb5_recvauth. Set addresses in 288 auth_context. 289 290Fri Jul 25 17:32:12 1997 Assar Westerlund <assar@sics.se> 291 292 * appl/rsh/rshd.c: implement forwarding 293 294 * appl/rsh/rsh.c: Use getarg. Implement forwarding. 295 296Sun Jul 13 00:32:16 1997 Assar Westerlund <assar@sics.se> 297 298 * appl/rsh: Conditionalize the krb4-support. 299 300Wed Jul 9 06:58:00 1997 Assar Westerlund <assar@sics.se> 301 302 * appl/rsh/rsh.c: use the correct user for the checksum 303 304Mon Jul 7 11:15:51 1997 Assar Westerlund <assar@sics.se> 305 306 * appl/rsh/rshd.c: Now works. Also implementd encryption and 307 `-p'. 308 309 * appl/rsh/common.c: new file 310 311Mon Jun 30 06:08:14 1997 Assar Westerlund <assar@sics.se> 312 313 * appl/rsh: New program. 314 315