12001-11-30 Johan Danielsson <joda@pdc.kth.se> 2 3 * rshd.c: make the syslog messages somewhat more informative 4 52001-08-15 Johan Danielsson <joda@pdc.kth.se> 6 7 * rsh.c: only complain about encryption flag when old 8 authentication is requested 9 102001-08-07 Johan Danielsson <joda@pdc.kth.se> 11 12 * rsh.c: don't try broken auth if rresvport failed; try to give 13 some more informative error messages 14 152001-07-31 Johan Danielsson <joda@pdc.kth.se> 16 17 * rshd.8: add an EXAMPLE 18 * rshd.8: manual page 19 * rshd.c: add some compat flags 20 * rsh.1: manual page 21 * rsh.c: iff -d, set the SO_DEBUG flags of the stdout and stderr 22 socket; implement parsing user@host 23 242001-07-19 Assar Westerlund <assar@sics.se> 25 26 * rshd.c (fatal): use vsnprintf correctly 27 282001-02-07 Assar Westerlund <assar@sics.se> 29 30 * Makefile.am: add login_access 31 * rshd.c (login_access): add prototype 32 (syslog_and_die, fatal): add printf attributes 33 (*): AIX -> _AIX 34 (doit): use login_access 35 based on patches from Ake Sandgren <ake@cs.umu.se> 36 372001-01-09 Assar Westerlund <assar@sics.se> 38 39 * rshd.c (save_krb5_creds): use krb5_rd_cred2 instead of 40 krb5_rd_cred 41 422000-12-31 Assar Westerlund <assar@sics.se> 43 44 * rshd.c (main): handle krb5_init_context failure consistently 45 * rsh.c (main): handle krb5_init_context failure consistently 46 472000-12-05 Johan Danielsson <joda@pdc.kth.se> 48 49 * rshd.c: require encryption if passed -x 50 512000-11-15 Assar Westerlund <assar@sics.se> 52 53 * rshd.c (loop): check that the fd's aren't too large to select on 54 * rsh.c (loop, proto): check that the fd's aren't too large to 55 select on 56 572000-08-10 Assar Westerlund <assar@sics.se> 58 59 * rsh.c: move code to do config/command parsing correctly. 60 612000-08-09 Assar Westerlund <assar@sics.se> 62 63 * rsh.c (main): only fetch stuff from krb5.conf when no option has 64 been given 65 662000-08-01 Assar Westerlund <assar@sics.se> 67 68 * rsh.c (doit): loop until we create an error socket of an 69 supported socket family 70 712000-07-02 Assar Westerlund <assar@sics.se> 72 73 * rshd.c: DCE stuff from Ake Sandgren <ake@cs.umu.se> 74 do not call syslog with a variable as format string 75 76 * rsh_locl.h (_PATH_ETC_ENVIRONMENT): add 77 782000-06-09 Assar Westerlund <assar@sics.se> 79 80 * rsh.c (main): work-around for setuid and capabilities bug fixed 81 in Linux 2.2.16 82 832000-06-06 Johan Danielsson <joda@pdc.kth.se> 84 85 * rsh.c: nuke long option from -z 86 87 * rsh.c: don't try to encrypt if auth is broken (Daniel Kouril) 88 892000-06-03 Assar Westerlund <assar@sics.se> 90 91 * rshd.c (doit): check return value of getspnam. From 92 <haba@pdc.kth.se> 93 942000-05-23 Assar Westerlund <assar@sics.se> 95 96 * rsh.c (proto): select on the normal socket when waiting for the 97 daemon to connect back to the stderr port, so that we discover 98 when data arrives there before. when that happens, we assume that 99 the daemon did not manage to connect (because of NAT/whatever) and 100 continue as if `-e' was given 101 * rshd.c (doit): if we fail to connect back to the stderr port, 102 act as if `-e' was given on the client side, i.e. without the 103 special TCP-connection. This tries to make things better when 104 running the head against a NAT wall, for example. 105 1062000-02-07 Assar Westerlund <assar@sics.se> 107 108 * Makefile.am (LDADD): make sure we use the heimdal libdes 109 1102000-02-06 Assar Westerlund <assar@sics.se> 111 112 * *: conditionalize des stuff on KRB4 113 1141999-12-16 Assar Westerlund <assar@sics.se> 115 116 * rsh.c (doit): addrinfo returned from getaddrinfo() is not usable 117 directly as hints. copy it and set AI_PASSIVE. 118 1191999-11-20 Assar Westerlund <assar@sics.se> 120 121 * rsh.c (main): remember to close the priviledged sockets before 122 calling rlogin 123 1241999-11-02 Assar Westerlund <assar@sics.se> 125 126 * rsh.c (main): redo the v4/v5 selection for consistency. -4 -> 127 try only v4 -5 -> try only v5 none, -45 -> try v5, v4 128 1291999-10-26 Assar Westerlund <assar@sics.se> 130 131 * rshd.c (main): ignore SIGPIPE 132 133 * common.c (do_read): the encoded length can be longer than the 134 buffer being used, allocate memory for it dynamically. From Brian 135 A May <bmay@dgs.monash.edu.au> 136 1371999-10-14 Assar Westerlund <assar@sics.se> 138 139 * rsh.c (proto): be more careful and don't print errno when read() 140 returns 0 141 1421999-09-20 Assar Westerlund <assar@sics.se> 143 144 * rshd.c (recv_krb4_auth): set `iv' 145 1461999-08-16 Assar Westerlund <assar@sics.se> 147 148 * common.c (do_read): be careful with the return value from 149 krb5_net_read 150 1511999-08-05 Assar Westerlund <assar@sics.se> 152 153 * rsh.c: call freehostent 154 155 * rsh.c: remove some dead code 156 1571999-08-04 Assar Westerlund <assar@sics.se> 158 159 * rshd.c: re-write the handling of forwarded credentials and 160 stuff. From Miroslav Ruda <ruda@ics.muni.cz> 161 162 * rsh_locl.h: always include kafs.h 163 164 * rsh.c: add `-z' and `-G' options 165 166 * rsh.c (loop): shutdown one side of the TCP connection on EOF. 167 From Brian A May <bmay@dgs.monash.edu.au> 168 169 * common.c (do_read): handle EOF. From Brian A May 170 <bmay@dgs.monash.edu.au> 171 1721999-08-01 Assar Westerlund <assar@sics.se> 173 174 * rsh.c: const fixes 175 1761999-07-29 Assar Westerlund <assar@sics.se> 177 178 * rshd.c: v6-ify 179 180 * rsh.c: v6-ify 181 1821999-07-28 Assar Westerlund <assar@sics.se> 183 184 * rsh_locl.h: move around kafs.h 185 1861999-07-24 Assar Westerlund <assar@sics.se> 187 188 * rsh_locl.h: <shadow.h> 189 190 * rsh.c, rshd.c: improve forwarding and implement unique ccache on 191 server. From Miroslav Ruda <ruda@ics.muni.cz> 192 1931999-07-03 Assar Westerlund <assar@sics.se> 194 195 * rsh.c (construct_command): handle argc == 0 for generality 196 1971999-06-23 Assar Westerlund <assar@sics.se> 198 199 * rsh.c: new option `-e' for not trying to open an stderr socket 200 2011999-06-17 Assar Westerlund <assar@sics.se> 202 203 * rsh_locl.h (RSH_BUFSIZ): bump to 16 * 1024 to be sure that we 204 don't leave any data inside des_enc_read. (that constant should 205 really be exported in some way...) 206 2071999-06-15 Assar Westerlund <assar@sics.se> 208 209 * rsh.c: use get_default_username and resulting const pollution 210 2111999-05-21 Assar Westerlund <assar@sics.se> 212 213 * rsh.c (main): try $USERNAME 214 2151999-05-14 Assar Westerlund <assar@sics.se> 216 217 * rshd.c (doit): afslog correctly 218 2191999-05-11 Assar Westerlund <assar@sics.se> 220 221 * rsh.c (main): add fallback to rlogin 222 2231999-05-10 Assar Westerlund <assar@sics.se> 224 225 * rsh.c (send_krb5_auth): call krb5_sendauth with ccache == NULL. 226 check return value from krb5_crypto_init 227 228 * common.c (do_write, do_read): always return -1 for failure 229 (net_write, net_read): remove. they already exist in libroken 230 2311999-05-09 Assar Westerlund <assar@sics.se> 232 233 * rsh.c: make sure it tries with all other authentication methods 234 after one has failed 235 * rsh.c (main): detect the case of no command given. 236 2371999-04-11 Assar Westerlund <assar@sics.se> 238 239 * rsh.c: new option --forwardable. use print_version 240 241Sat Apr 10 17:10:55 1999 Assar Westerlund <assar@sics.se> 242 243 * rshd.c (setup_copier): use `socketpair' instead of `pipe'. Some 244 shells don't think it's a rsh session if they find a pipe at the 245 other end. 246 (setup_environment): add SSH_CLIENT just to make bash happy 247 248 * common.c (do_read): use krb5_get_wrapped_length 249 250Wed Mar 24 03:59:42 1999 Assar Westerlund <assar@sics.se> 251 252 * rsh.c (loop): more braces to make gcc happy 253 254Tue Mar 23 17:08:32 1999 Johan Danielsson <joda@hella.pdc.kth.se> 255 256 * rsh_locl.h: kafs.h 257 258 * rshd.c: add `-P', `-v', and `-L' flags 259 260Thu Mar 18 11:37:24 1999 Johan Danielsson <joda@hella.pdc.kth.se> 261 262 * Makefile.am: include Makefile.am.common 263 264Tue Dec 1 14:44:44 1998 Johan Danielsson <joda@hella.pdc.kth.se> 265 266 * appl/rsh/rshd.c: update to new crypto framework 267 268 * appl/rsh/rsh_locl.h: update to new crypto framework 269 270 * appl/rsh/rsh.c: update to new crypto framework 271 272 * appl/rsh/common.c: update to new crypto framework 273 274Mon Nov 2 01:15:06 1998 Assar Westerlund <assar@sics.se> 275 276 * appl/rsh/rsh.c (main): initialize host 277 278 * appl/rsh/rshd.c (recv_krb5_auth): disable `do_encrypt' if not 279 encrypting. 280 281Thu Jul 30 23:12:17 1998 Assar Westerlund <assar@sics.se> 282 283 * appl/rsh/rsh.c: kludges for parsing `rsh hostname -l user' 284 285Thu Jul 23 19:49:03 1998 Johan Danielsson <joda@emma.pdc.kth.se> 286 287 * appl/rsh/rshd.c: use krb5_verify_authenticator_checksum 288 289Sat Apr 18 21:13:06 1998 Johan Danielsson <joda@emma.pdc.kth.se> 290 291 * appl/rsh/rsh.c: Don't try v5 if (only) `-4' is specified. 292 293Sun Dec 21 09:44:05 1997 Assar Westerlund <assar@sics.se> 294 295 * appl/rsh/rshd.c (recv_krb5_auth): swap the order of the 296 `local_user' and the `remote_user' 297 298 * appl/rsh/rsh.c (send_krb5_auth): swap the order of the 299 `local_user' and the `remote_user' 300 301Sat Nov 29 07:10:11 1997 Assar Westerlund <assar@sics.se> 302 303 * appl/rsh/rshd.c: updated to use getarg. 304 changed `struct fd_set' to `fd_set'. 305 implemented broken/BSD authentication (requires iruserok) 306 307Wed Nov 12 02:35:57 1997 Assar Westerlund <assar@sics.se> 308 309 * appl/rsh/rsh_locl.h: add AUTH_BROKEN and PATH_RSH 310 311 * appl/rsh/Makefile.am: set BINDIR 312 313 * appl/rsh/rsh.c: implemented BSD-style reserved port 314 `authentication' 315 316Sun Aug 24 08:06:54 1997 Assar Westerlund <assar@sics.se> 317 318 * appl/rsh/rshd.c: syslog remote shells 319 320Tue Aug 12 01:29:46 1997 Assar Westerlund <assar@sics.se> 321 322 * appl/rshd/rshd.c: Use `krb5_sock_to_principal'. Send server 323 parameter to krb5_rd_req/krb5_recvauth. Set addresses in 324 auth_context. 325 326Fri Jul 25 17:32:12 1997 Assar Westerlund <assar@sics.se> 327 328 * appl/rsh/rshd.c: implement forwarding 329 330 * appl/rsh/rsh.c: Use getarg. Implement forwarding. 331 332Sun Jul 13 00:32:16 1997 Assar Westerlund <assar@sics.se> 333 334 * appl/rsh: Conditionalize the krb4-support. 335 336Wed Jul 9 06:58:00 1997 Assar Westerlund <assar@sics.se> 337 338 * appl/rsh/rsh.c: use the correct user for the checksum 339 340Mon Jul 7 11:15:51 1997 Assar Westerlund <assar@sics.se> 341 342 * appl/rsh/rshd.c: Now works. Also implementd encryption and 343 `-p'. 344 345 * appl/rsh/common.c: new file 346 347Mon Jun 30 06:08:14 1997 Assar Westerlund <assar@sics.se> 348 349 * appl/rsh: New program. 350 351