head	1.2;
access;
symbols
	RELENG_8_4:1.2.0.2
	RELENG_9_1_0_RELEASE:1.1.1.8
	RELENG_9_1:1.1.1.8.0.16
	RELENG_9_1_BP:1.1.1.8
	RELENG_8_3_0_RELEASE:1.1.1.8
	RELENG_8_3:1.1.1.8.0.14
	RELENG_8_3_BP:1.1.1.8
	RELENG_9_0_0_RELEASE:1.1.1.8
	RELENG_9_0:1.1.1.8.0.12
	RELENG_9_0_BP:1.1.1.8
	RELENG_9:1.1.1.8.0.10
	RELENG_9_BP:1.1.1.8
	RELENG_7_4_0_RELEASE:1.1.1.7
	RELENG_8_2_0_RELEASE:1.1.1.8
	RELENG_7_4:1.1.1.7.0.24
	RELENG_7_4_BP:1.1.1.7
	RELENG_8_2:1.1.1.8.0.8
	RELENG_8_2_BP:1.1.1.8
	RELENG_8_1_0_RELEASE:1.1.1.8
	RELENG_8_1:1.1.1.8.0.6
	RELENG_8_1_BP:1.1.1.8
	RELENG_7_3_0_RELEASE:1.1.1.7
	RELENG_7_3:1.1.1.7.0.22
	RELENG_7_3_BP:1.1.1.7
	RELENG_8_0_0_RELEASE:1.1.1.8
	RELENG_8_0:1.1.1.8.0.4
	RELENG_8_0_BP:1.1.1.8
	RELENG_8:1.1.1.8.0.2
	RELENG_8_BP:1.1.1.8
	RELENG_7_2_0_RELEASE:1.1.1.7
	RELENG_7_2:1.1.1.7.0.20
	RELENG_7_2_BP:1.1.1.7
	RELENG_7_1_0_RELEASE:1.1.1.7
	RELENG_6_4_0_RELEASE:1.1.1.7
	RELENG_7_1:1.1.1.7.0.18
	RELENG_7_1_BP:1.1.1.7
	RELENG_6_4:1.1.1.7.0.16
	RELENG_6_4_BP:1.1.1.7
	v_1_1_0:1.1.1.8
	RELENG_7_0_0_RELEASE:1.1.1.7
	RELENG_6_3_0_RELEASE:1.1.1.7
	RELENG_7_0:1.1.1.7.0.14
	RELENG_7_0_BP:1.1.1.7
	RELENG_6_3:1.1.1.7.0.12
	RELENG_6_3_BP:1.1.1.7
	RELENG_7:1.1.1.7.0.10
	RELENG_7_BP:1.1.1.7
	RELENG_6_2_0_RELEASE:1.1.1.7
	RELENG_6_2:1.1.1.7.0.8
	RELENG_6_2_BP:1.1.1.7
	RELENG_5_5_0_RELEASE:1.1.1.6.4.1
	RELENG_5_5:1.1.1.6.4.1.0.4
	RELENG_5_5_BP:1.1.1.6.4.1
	RELENG_6_1_0_RELEASE:1.1.1.7
	RELENG_6_1:1.1.1.7.0.6
	RELENG_6_1_BP:1.1.1.7
	RELENG_6_0_0_RELEASE:1.1.1.7
	RELENG_6_0:1.1.1.7.0.4
	RELENG_6_0_BP:1.1.1.7
	RELENG_6:1.1.1.7.0.2
	RELENG_6_BP:1.1.1.7
	RELENG_5_4_0_RELEASE:1.1.1.6.4.1
	RELENG_5_4:1.1.1.6.4.1.0.2
	RELENG_5_4_BP:1.1.1.6.4.1
	v_0_6_3:1.1.1.7
	RELENG_4_11_0_RELEASE:1.1.1.1.2.3
	RELENG_4_11:1.1.1.1.2.3.0.10
	RELENG_4_11_BP:1.1.1.1.2.3
	RELENG_5_3_0_RELEASE:1.1.1.6
	RELENG_5_3:1.1.1.6.0.6
	RELENG_5_3_BP:1.1.1.6
	RELENG_5:1.1.1.6.0.4
	RELENG_5_BP:1.1.1.6
	RELENG_4_10_0_RELEASE:1.1.1.1.2.3
	RELENG_4_10:1.1.1.1.2.3.0.8
	RELENG_4_10_BP:1.1.1.1.2.3
	v_0_6_1:1.1.1.6
	RELENG_5_2_1_RELEASE:1.1.1.6
	RELENG_5_2_0_RELEASE:1.1.1.6
	RELENG_5_2:1.1.1.6.0.2
	RELENG_5_2_BP:1.1.1.6
	RELENG_4_9_0_RELEASE:1.1.1.1.2.3
	RELENG_4_9:1.1.1.1.2.3.0.6
	RELENG_4_9_BP:1.1.1.1.2.3
	v_0_6:1.1.1.6
	RELENG_5_1_0_RELEASE:1.1.1.5
	RELENG_5_1:1.1.1.5.0.4
	RELENG_5_1_BP:1.1.1.5
	RELENG_4_8_0_RELEASE:1.1.1.1.2.3
	RELENG_4_8:1.1.1.1.2.3.0.4
	RELENG_4_8_BP:1.1.1.1.2.3
	RELENG_5_0_0_RELEASE:1.1.1.5
	RELENG_5_0:1.1.1.5.0.2
	RELENG_5_0_BP:1.1.1.5
	v_0_5_1:1.1.1.5
	RELENG_4_7_0_RELEASE:1.1.1.1.2.3
	RELENG_4_7:1.1.1.1.2.3.0.2
	RELENG_4_7_BP:1.1.1.1.2.3
	cvs_20020916:1.1.1.5
	cvs_20020829:1.1.1.5
	RELENG_4_6_2_RELEASE:1.1.1.1.2.2
	RELENG_4_6_1_RELEASE:1.1.1.1.2.2
	RELENG_4_6_0_RELEASE:1.1.1.1.2.2
	RELENG_4_6:1.1.1.1.2.2.0.2
	RELENG_4_6_BP:1.1.1.1.2.2
	cvs_20020217:1.1.1.4
	RELENG_4_5_0_RELEASE:1.1.1.1.2.1
	RELENG_4_5:1.1.1.1.2.1.0.6
	RELENG_4_5_BP:1.1.1.1.2.1
	RELENG_4_4_0_RELEASE:1.1.1.1.2.1
	RELENG_4_4:1.1.1.1.2.1.0.4
	RELENG_4_4_BP:1.1.1.1.2.1
	v_0_3_f:1.1.1.3
	RELENG_4_3_0_RELEASE:1.1.1.1.2.1
	RELENG_4_3:1.1.1.1.2.1.0.2
	RELENG_4_3_BP:1.1.1.1.2.1
	v_0_3_e:1.1.1.2
	RELENG_4_2_0_RELEASE:1.1.1.1
	RELENG_4_1_1_RELEASE:1.1.1.1
	PRE_SMPNG:1.1.1.1
	RELENG_4_1_0_RELEASE:1.1.1.1
	RELENG_4_0_0_RELEASE:1.1.1.1
	RELENG_4:1.1.1.1.0.2
	RELENG_4_BP:1.1.1.1
	v_0_2_p:1.1.1.1
	v_0_2_o:1.1.1.1
	v_0_2_n:1.1.1.1
	v_0_2_m:1.1.1.1
	KTH:1.1.1;
locks; strict;
comment	@# @;


1.2
date	2012.03.22.08.48.42;	author stas;	state Exp;
branches
	1.2.2.1;
next	1.1;

1.1
date	2000.01.09.20.57.26;	author markm;	state Exp;
branches
	1.1.1.1;
next	;

1.2.2.1
date	2012.03.22.08.48.42;	author svnexp;	state dead;
branches;
next	1.2.2.2;

1.2.2.2
date	2013.03.28.13.02.15;	author svnexp;	state Exp;
branches;
next	;

1.1.1.1
date	2000.01.09.20.57.26;	author markm;	state Exp;
branches
	1.1.1.1.2.1;
next	1.1.1.2;

1.1.1.2
date	2001.02.13.16.44.16;	author assar;	state Exp;
branches;
next	1.1.1.3;

1.1.1.3
date	2001.06.21.02.09.36;	author assar;	state Exp;
branches;
next	1.1.1.4;

1.1.1.4
date	2002.02.19.15.46.04;	author nectar;	state Exp;
branches;
next	1.1.1.5;

1.1.1.5
date	2002.08.30.21.22.56;	author nectar;	state Exp;
branches;
next	1.1.1.6;

1.1.1.6
date	2003.10.09.19.36.19;	author nectar;	state Exp;
branches
	1.1.1.6.4.1;
next	1.1.1.7;

1.1.1.7
date	2005.02.24.22.19.28;	author nectar;	state Exp;
branches;
next	1.1.1.8;

1.1.1.8
date	2008.05.07.13.39.18;	author dfr;	state Exp;
branches;
next	;

1.1.1.1.2.1
date	2001.03.04.13.29.05;	author markm;	state Exp;
branches;
next	1.1.1.1.2.2;

1.1.1.1.2.2
date	2002.04.30.14.49.09;	author nectar;	state Exp;
branches;
next	1.1.1.1.2.3;

1.1.1.1.2.3
date	2002.09.01.04.21.32;	author nectar;	state Exp;
branches;
next	;

1.1.1.6.4.1
date	2005.03.01.16.42.06;	author nectar;	state Exp;
branches;
next	;


desc
@@


1.2
log
@SVN rev 233294 on 2012-03-22 08:48:42Z by stas

- Update FreeBSD Heimdal distribution to version 1.5.1.  This also brings
  several new kerberos related libraries and applications to FreeBSD:
  o kgetcred(1) allows one to manually get a ticket for a particular service.
  o kf(1) securily forwards ticket to another host through an authenticated
    and encrypted stream.
  o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1)
    and other user kerberos operations. klist and kswitch are just symlinks
    to kcc(1) now.
  o kswitch(1) allows you to easily switch between kerberos credentials if
    you're running KCM.
  o hxtool(1) is a certificate management tool to use with PKINIT.
  o string2key(1) maps a password into key.
  o kdigest(8) is a userland tool to access the KDC's digest interface.
  o kimpersonate(8) creates a "fake" ticket for a service.

  We also now install manpages for some lirbaries that were not installed
  before, libheimntlm and libhx509.

- The new HEIMDAL version no longer supports Kerberos 4.  All users are
  recommended to switch to Kerberos 5.

- Weak ciphers are now disabled by default.  To enable DES support (used
  by telnet(8)), use "allow_weak_crypto" option in krb5.conf.

- libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings
  disabled due to the function they use (krb5_get_err_text(3)) being
  deprecated.  I plan to work on this next.

- Heimdal's KDC now require sqlite to operate.  We use the bundled version
  and install it as libheimsqlite.  If some other FreeBSD components will
  require it in the future we can rename it to libbsdsqlite and use for these
  components as well.

- This is not a latest Heimdal version, the new one was released while I was
  working on the update.  I will update it to 1.5.2 soon, as it fixes some
  important bugs and security issues.
@
text
@2008-04-15  Love Hörnquist Åstrand  <lha@@it.su.se>

	* utmp_login.c: Reorder to avoid prototype.

	* login_locl.h: If cygwin doesnt have WTMPX_FILE, it uses wtmp for
	wtmpx http://www.cygwin.com/ml/cygwin/2006-12/msg00630.html
	
2008-04-10  Love Hörnquist Åstrand  <lha@@it.su.se>

	* utmp_login.c: Remove utmp warning on mac os x

2006-12-05  Love Hörnquist Åstrand  <lha@@it.su.se>
	
	* limits_conf.c: Clear errno before calling the strtol
	functions. From Paul Stoeber to OpenBSD by Ray Lai and Björn
	Sandell.

	* limits_conf.c: Report to syslog strings that start with NUL;
	prevents negative index array access. Ray Lai of OpenBSD via Björn
	Sandell.
	
2006-10-07  Love Hörnquist Åstrand  <lha@@it.su.se>
	
	* Makefile.am: Add man_MANS to EXTRA_DIST

2006-09-22  Love Hörnquist Åstrand  <lha@@it.su.se>

	* read_string.c: try to not call signaction for signal 0 and use
	NSIG if it exists to determin how many signals there exists, also,
	only restore those signalhandlers that we got out.
	
2006-04-27  Love Hörnquist Åstrand  <lha@@it.su.se>

	* login_locl.h: Include "loginpaths.h"
	
	* loginpaths.h: Shared paths between login and rshd.
	
2006-01-09 Johan Danielsson <joda@@blubb.pdc.kth.se>

	* login.c: log successful logins
	
2005-08-08  Love Hörnquist Åstrand <lha@@it.su.se>

	* login.c (do_login): only do krb4_get_afs_tokens if we have done
	v4 authentication or done a 5to4 conversion of tickets. This is to
	avoid delays on a realm that only support Kerberos 5 and drop
	Kerberos 4 requests.

2005-05-10  Dave Love  <fx@@gnu.org>

	* login.c: Include <crypt.h>.

2005-05-02  Dave Love  <fx@@gnu.org>

	* limits_conf.c: Check RLIMIT_MEMLOCK, not RLIMIT_LOCK.

2005-04-28  Dave Love  <fx@@gnu.org>

	* limits_conf.c: Maybe include sys/resource.h.  Use various
	RLIMIT_ macros conditionally.  For Solaris, Irix and Tru64.

2005-04-22  Johan Danielsson  <joda@@pdc.kth.se>

	* login.1: document limits.conf
	
	* Makefile.am: limits_conf.c
	
	* login_locl.h: template for limits.conf
	
	* login.c: read limits.conf (from /etc/security by default,
	overridable in login.conf)
	
	* limits_conf.c: implement a parser for limits.conf
	
2004-09-08  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: use krb5_appdefault_boolean instead of
	krb5_config_get_bool

2003-09-03  Love Hörnquist Åstrand <lha@@it.su.se>

	* login.c (krb5_to4): set client princ of the mcred
	
2003-07-07  Love Hörnquist Åstrand <lha@@it.su.se>

	* login.c (krb5_to4): use krb5_cc_clear_mcred
	
2003-03-24  Johan Danielsson  <joda@@pdc.kth.se>

	* Makefile.am: install man pages

	* login.1: manpage for login

	* login.c: allow "welcome" as well as "motd" in login.conf

	* login.access.5: login.access manual page

2003-03-18  Love Hörnquist Åstrand <lha@@it.su.se>
	
	* login.c: also need pag_set
	* login.c: if there is kerberos 5, call krb5_afslog\*
	
2002-08-23  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: if motd is set in login.conf, output its contents
	before starting the shell

2002-02-27  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: reset signals to default, needed on solaris 8

2002-02-19  Johan Danielsson  <joda@@pdc.kth.se>

	* login_locl.h: include netgroup.h and rpcsvc/ypclnt.h

	* login.c: make this build without krb5

2001-09-22  Assar Westerlund  <assar@@sics.se>

	* login_locl.h: kludge: use absolute path to find prot.h so we do
	not get confused by athena's prot.h

2001-09-17  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): add setpcred

2001-07-06  Assar Westerlund  <assar@@sics.se>

	* login.c: move osf2c magic earlier.  from Mark Davies
	<mark@@MCS.VUW.AC.NZ>

2001-06-19  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): dereference result from krb5_princ_realm.
	noted by Thomas Nystrom <thn@@saeab.se>

2001-06-04  Assar Westerlund  <assar@@sics.se>

	* update copyright messages on Wietse Venema's code.

2001-05-31  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): look for [realms]<realm>krb4_get_tickets to
	decide whether to get kerberos 4 tickets

2001-02-08  Assar Westerlund  <assar@@sics.se>

	* utmp_login.c, utmpx_login.c: try to write a useful string as
	host in utmp, using the same algoritm as telnetd

2001-01-29  Assar Westerlund  <assar@@sics.se>

	* login.c: remove some krb5_free_context that might happen at
	unappropriate times

2000-12-31  Assar Westerlund  <assar@@sics.se>

	* login.c (main): handle krb5_init_context failure consistently

2000-12-11  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): set the group on the tty.
	(r_flag): comment out
	* login.c (krb5_to4): always return a value

2000-10-15  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): check another return code

2000-08-22  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c (do_login): set PATH to something sane;
	(start_logout_process): avoid getting signals sent to the parent

	* login_locl.h: _PATH_DEFPATH

2000-07-01  Assar Westerlund  <assar@@sics.se>

	* login.c (login_timeout): add back

2000-06-28  Johan Danielsson  <joda@@pdc.kth.se>

	* env.c: new file for environment related functions

	* login.c: move environment stuff to separate file, allow
	specifying list of environment files via login.conf

2000-06-21  Assar Westerlund  <assar@@sics.se>

	* Makefile.am (LDADD): add otp
	* login.c: add reading of /etc/environment.  From Ake Sandgren
	<ake@@cs.umu.se>
	add otp support. From Daniel Kouril <kouril@@ics.muni.cz>

2000-06-09  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): work-around for setuid and capabilities bug
	fixed in Linux 2.2.16

2000-04-09  Assar Westerlund  <assar@@sics.se>

	* login.c: allow conversion of v5 -> v4 tickets when logging in
	with forwarded tickets

1999-11-09  Johan Danielsson  <joda@@pdc.kth.se>

	* conf.c: remove case for not having cgetent, since it's in roken

1999-11-05  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): conditionalize shadow stuff on getspnam

1999-10-30  Assar Westerlund  <assar@@sics.se>

	* Makefile.am (login_DEPENDENCIES): remove, it's not entirely
 	correct and was causing problems with non-GNU make

1999-10-28  Assar Westerlund  <assar@@sics.se>

	* login.c (start_logout_proceess): don't examine `prog' before
 	setting it.

1999-10-27  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): chown and chmod the tty.  some clean-up.

1999-10-03  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_start_session): correct the ccache to
 	krb524_convert_creds_kdc

1999-09-28  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_verify): use krb5_verify_user_lrealm

1999-09-01  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: SGI capability mumbo-jumbo

1999-08-09  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c (start_logout_process): call setproctitle

	* login_locl.h: declare struct spwd

	* login.c: add support for starting extra processes at login and
	logout; always preserve TERM and TZ

	* conf.c: add configuration file support

1999-08-07  Assar Westerlund  <assar@@sics.se>

	* shadow.c (check_shadow): check for a NULL sp

1999-08-05  Assar Westerlund  <assar@@sics.se>

	* login.c (main): move down login incorrect to disallow account
 	guessing

1999-08-04  Assar Westerlund  <assar@@sics.se>

	* utmpx_login.c (utmpx_login): fix for Solaris.  From Miroslav
 	Ruda <ruda@@ics.muni.cz>

	* login_locl.h: add <shadow.h> and some prototypes

	* login.c: fixes with v4 and shadow support.  From Miroslav Ruda
 	<ruda@@ics.muni.cz>

	* shadow.c: new file with functions for handling shadow passwords

	* Makefile.am: add shadow

1999-07-22  Assar Westerlund  <assar@@sics.se>

	* login.c (main): generate a better tty name

1999-05-25  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c (do_login): set $SHELL

1999-05-18  Assar Westerlund  <assar@@sics.se>

	* add login-access

1999-05-11  Assar Westerlund  <assar@@sics.se>

	* login.c: copy the v5 ccache to a file after having done setuid

1999-05-09  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_verify): check seteuid for errors
	
Mon Apr 19 22:30:55 1999  Assar Westerlund  <assar@@sics.se>

	* login.c: conditionalize the kafs calls on KRB4

	* Makefile.am (LDADD): add kafs

	* login.c: add support for getting afs tokens with v4 and v5

Sun Apr 18 14:12:28 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* login.c: check _PATH_NOLOGIN

	* login_locl.h: _PATH_NOLOGIN

1999-04-11  Assar Westerlund  <assar@@sics.se>

	* login.c (main): use print_version

Thu Apr  8 15:03:55 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* login.c: remove definition of KRB_VERIFY_USER et.al. (moved to
 	config.h)

	* login_locl.h: include udb.h, sys/resource.h, and sys/category.h

Sat Mar 27 17:58:37 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* Makefile.am: osfc2.c

	* login.c: magic for OSF C2, and Crays

	* login_locl.h: do_osfc2_magic proto

	* osfc2.c: bsd_locl -> login_locl

	* osfc2.c: OSF C2 magic

Tue Mar 23 14:17:40 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* login_locl.h: _PATH_UTMP

Sun Mar 21 15:02:31 1999  Johan Danielsson  <joda@@blubb.pdc.kth.se>

	* login.c: `-h' is host, not help

Sat Mar 20 00:11:13 1999  Assar Westerlund  <assar@@sics.se>

	* login_locl.h: krb.h: add

	* login.c: static-size
	(krb4_verify): add

Thu Mar 18 11:36:10 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* Makefile.am: include Makefile.am.common

Thu Mar 11 17:53:36 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* utmpx_login.c: add some consts

	* utmp_login.c: add some consts

	* login.c: staticize

	* login_locl.h: add prototypes, and defaults for
 	_PATH_*

Mon Mar  1 10:49:14 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* utmpx_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*

	* utmp_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*

@


1.2.2.1
log
@file ChangeLog was added on branch RELENG_8_4 on 2013-03-28 13:02:15 +0000
@
text
@d1 366
@


1.2.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 355
2006-12-05  Love Hrnquist strand  <lha@@it.su.se>

	* limits_conf.c: Clear errno before calling the strtol
	functions. From Paul Stoeber to OpenBSD by Ray Lai and Bjrn
	Sandell.

	* limits_conf.c: Report to syslog strings that start with NUL;
	prevents negative index array access. Ray Lai of OpenBSD via Bjrn
	Sandell.
	
2006-10-07  Love Hrnquist strand  <lha@@it.su.se>
	
	* Makefile.am: Add man_MANS to EXTRA_DIST

2006-09-22  Love Hrnquist strand  <lha@@it.su.se>

	* read_string.c: try to not call signaction for signal 0 and use
	NSIG if it exists to determin how many signals there exists, also,
	only restore those signalhandlers that we got out.
	
2006-04-27  Love Hrnquist strand  <lha@@it.su.se>

	* login_locl.h: Include "loginpaths.h"
	
	* loginpaths.h: Shared paths between login and rshd.
	
2006-01-09 Johan Danielsson <joda@@blubb.pdc.kth.se>

	* login.c: log successful logins
	
2005-08-08  Love Hrnquist strand <lha@@it.su.se>

	* login.c (do_login): only do krb4_get_afs_tokens if we have done
	v4 authentication or done a 5to4 conversion of tickets. This is to
	avoid delays on a realm that only support Kerberos 5 and drop
	Kerberos 4 requests.

2005-05-10  Dave Love  <fx@@gnu.org>

	* login.c: Include <crypt.h>.

2005-05-02  Dave Love  <fx@@gnu.org>

	* limits_conf.c: Check RLIMIT_MEMLOCK, not RLIMIT_LOCK.

2005-04-28  Dave Love  <fx@@gnu.org>

	* limits_conf.c: Maybe include sys/resource.h.  Use various
	RLIMIT_ macros conditionally.  For Solaris, Irix and Tru64.

2005-04-22  Johan Danielsson  <joda@@pdc.kth.se>

	* login.1: document limits.conf
	
	* Makefile.am: limits_conf.c
	
	* login_locl.h: template for limits.conf
	
	* login.c: read limits.conf (from /etc/security by default,
	overridable in login.conf)
	
	* limits_conf.c: implement a parser for limits.conf
	
2004-09-08  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: use krb5_appdefault_boolean instead of
	krb5_config_get_bool

2003-09-03  Love Hrnquist strand <lha@@it.su.se>

	* login.c (krb5_to4): set client princ of the mcred
	
2003-07-07  Love Hrnquist strand <lha@@it.su.se>

	* login.c (krb5_to4): use krb5_cc_clear_mcred
	
2003-03-24  Johan Danielsson  <joda@@pdc.kth.se>

	* Makefile.am: install man pages

	* login.1: manpage for login

	* login.c: allow "welcome" as well as "motd" in login.conf

	* login.access.5: login.access manual page

2003-03-18  Love Hrnquist strand <lha@@it.su.se>
	
	* login.c: also need pag_set
	* login.c: if there is kerberos 5, call krb5_afslog\*
	
2002-08-23  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: if motd is set in login.conf, output its contents
	before starting the shell

2002-02-27  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: reset signals to default, needed on solaris 8

2002-02-19  Johan Danielsson  <joda@@pdc.kth.se>

	* login_locl.h: include netgroup.h and rpcsvc/ypclnt.h

	* login.c: make this build without krb5

2001-09-22  Assar Westerlund  <assar@@sics.se>

	* login_locl.h: kludge: use absolute path to find prot.h so we do
	not get confused by athena's prot.h

2001-09-17  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): add setpcred

2001-07-06  Assar Westerlund  <assar@@sics.se>

	* login.c: move osf2c magic earlier.  from Mark Davies
	<mark@@MCS.VUW.AC.NZ>

2001-06-19  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): dereference result from krb5_princ_realm.
	noted by Thomas Nystrom <thn@@saeab.se>

2001-06-04  Assar Westerlund  <assar@@sics.se>

	* update copyright messages on Wietse Venema's code.

2001-05-31  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): look for [realms]<realm>krb4_get_tickets to
	decide whether to get kerberos 4 tickets

2001-02-08  Assar Westerlund  <assar@@sics.se>

	* utmp_login.c, utmpx_login.c: try to write a useful string as
	host in utmp, using the same algoritm as telnetd

2001-01-29  Assar Westerlund  <assar@@sics.se>

	* login.c: remove some krb5_free_context that might happen at
	unappropriate times

2000-12-31  Assar Westerlund  <assar@@sics.se>

	* login.c (main): handle krb5_init_context failure consistently

2000-12-11  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): set the group on the tty.
	(r_flag): comment out
	* login.c (krb5_to4): always return a value

2000-10-15  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): check another return code

2000-08-22  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c (do_login): set PATH to something sane;
	(start_logout_process): avoid getting signals sent to the parent

	* login_locl.h: _PATH_DEFPATH

2000-07-01  Assar Westerlund  <assar@@sics.se>

	* login.c (login_timeout): add back

2000-06-28  Johan Danielsson  <joda@@pdc.kth.se>

	* env.c: new file for environment related functions

	* login.c: move environment stuff to separate file, allow
	specifying list of environment files via login.conf

2000-06-21  Assar Westerlund  <assar@@sics.se>

	* Makefile.am (LDADD): add otp
	* login.c: add reading of /etc/environment.  From Ake Sandgren
	<ake@@cs.umu.se>
	add otp support. From Daniel Kouril <kouril@@ics.muni.cz>

2000-06-09  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): work-around for setuid and capabilities bug
	fixed in Linux 2.2.16

2000-04-09  Assar Westerlund  <assar@@sics.se>

	* login.c: allow conversion of v5 -> v4 tickets when logging in
	with forwarded tickets

1999-11-09  Johan Danielsson  <joda@@pdc.kth.se>

	* conf.c: remove case for not having cgetent, since it's in roken

1999-11-05  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): conditionalize shadow stuff on getspnam

1999-10-30  Assar Westerlund  <assar@@sics.se>

	* Makefile.am (login_DEPENDENCIES): remove, it's not entirely
 	correct and was causing problems with non-GNU make

1999-10-28  Assar Westerlund  <assar@@sics.se>

	* login.c (start_logout_proceess): don't examine `prog' before
 	setting it.

1999-10-27  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): chown and chmod the tty.  some clean-up.

1999-10-03  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_start_session): correct the ccache to
 	krb524_convert_creds_kdc

1999-09-28  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_verify): use krb5_verify_user_lrealm

1999-09-01  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: SGI capability mumbo-jumbo

1999-08-09  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c (start_logout_process): call setproctitle

	* login_locl.h: declare struct spwd

	* login.c: add support for starting extra processes at login and
	logout; always preserve TERM and TZ

	* conf.c: add configuration file support

1999-08-07  Assar Westerlund  <assar@@sics.se>

	* shadow.c (check_shadow): check for a NULL sp

1999-08-05  Assar Westerlund  <assar@@sics.se>

	* login.c (main): move down login incorrect to disallow account
 	guessing

1999-08-04  Assar Westerlund  <assar@@sics.se>

	* utmpx_login.c (utmpx_login): fix for Solaris.  From Miroslav
 	Ruda <ruda@@ics.muni.cz>

	* login_locl.h: add <shadow.h> and some prototypes

	* login.c: fixes with v4 and shadow support.  From Miroslav Ruda
 	<ruda@@ics.muni.cz>

	* shadow.c: new file with functions for handling shadow passwords

	* Makefile.am: add shadow

1999-07-22  Assar Westerlund  <assar@@sics.se>

	* login.c (main): generate a better tty name

1999-05-25  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c (do_login): set $SHELL

1999-05-18  Assar Westerlund  <assar@@sics.se>

	* add login-access

1999-05-11  Assar Westerlund  <assar@@sics.se>

	* login.c: copy the v5 ccache to a file after having done setuid

1999-05-09  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_verify): check seteuid for errors
	
Mon Apr 19 22:30:55 1999  Assar Westerlund  <assar@@sics.se>

	* login.c: conditionalize the kafs calls on KRB4

	* Makefile.am (LDADD): add kafs

	* login.c: add support for getting afs tokens with v4 and v5

Sun Apr 18 14:12:28 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* login.c: check _PATH_NOLOGIN

	* login_locl.h: _PATH_NOLOGIN

1999-04-11  Assar Westerlund  <assar@@sics.se>

	* login.c (main): use print_version

Thu Apr  8 15:03:55 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* login.c: remove definition of KRB_VERIFY_USER et.al. (moved to
 	config.h)

	* login_locl.h: include udb.h, sys/resource.h, and sys/category.h

Sat Mar 27 17:58:37 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* Makefile.am: osfc2.c

	* login.c: magic for OSF C2, and Crays

	* login_locl.h: do_osfc2_magic proto

	* osfc2.c: bsd_locl -> login_locl

	* osfc2.c: OSF C2 magic

Tue Mar 23 14:17:40 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* login_locl.h: _PATH_UTMP

Sun Mar 21 15:02:31 1999  Johan Danielsson  <joda@@blubb.pdc.kth.se>

	* login.c: `-h' is host, not help

Sat Mar 20 00:11:13 1999  Assar Westerlund  <assar@@sics.se>

	* login_locl.h: krb.h: add

	* login.c: static-size
	(krb4_verify): add

Thu Mar 18 11:36:10 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* Makefile.am: include Makefile.am.common

Thu Mar 11 17:53:36 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* utmpx_login.c: add some consts

	* utmp_login.c: add some consts

	* login.c: staticize

	* login_locl.h: add prototypes, and defaults for
 	_PATH_*

Mon Mar  1 10:49:14 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* utmpx_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*

	* utmp_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*

@


1.1
log
@Initial revision
@
text
@d1 204
@


1.1.1.1
log
@Import KTH Heimdal, which will be the core of our Kerberos5.
Userland to follow.
@
text
@@


1.1.1.1.2.1
log
@MFC: Heimdal 0.3e (MIT mucho-compatible) upgrade.
@
text
@a0 54
2001-01-29  Assar Westerlund  <assar@@sics.se>

	* login.c: remove some krb5_free_context that might happen at
	unappropriate times

2000-12-31  Assar Westerlund  <assar@@sics.se>

	* login.c (main): handle krb5_init_context failure consistently

2000-12-11  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): set the group on the tty.
	(r_flag): comment out
	* login.c (krb5_to4): always return a value

2000-10-15  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): check another return code

2000-08-22  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c (do_login): set PATH to something sane;
	(start_logout_process): avoid getting signals sent to the parent

	* login_locl.h: _PATH_DEFPATH

2000-07-01  Assar Westerlund  <assar@@sics.se>

	* login.c (login_timeout): add back

2000-06-28  Johan Danielsson  <joda@@pdc.kth.se>

	* env.c: new file for environment related functions

	* login.c: move environment stuff to separate file, allow
	specifying list of environment files via login.conf

2000-06-21  Assar Westerlund  <assar@@sics.se>

	* Makefile.am (LDADD): add otp
	* login.c: add reading of /etc/environment.  From Ake Sandgren
	<ake@@cs.umu.se>
	add otp support. From Daniel Kouril <kouril@@ics.muni.cz>

2000-06-09  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): work-around for setuid and capabilities bug
	fixed in Linux 2.2.16

2000-04-09  Assar Westerlund  <assar@@sics.se>

	* login.c: allow conversion of v5 -> v4 tickets when logging in
	with forwarded tickets

@


1.1.1.1.2.2
log
@MFC: Update Heimdal Kerberos to 0.4e around 2002/02/17.
@
text
@a0 28
2001-09-17  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): add setpcred

2001-07-06  Assar Westerlund  <assar@@sics.se>

	* login.c: move osf2c magic earlier.  from Mark Davies
	<mark@@MCS.VUW.AC.NZ>

2001-06-19  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): dereference result from krb5_princ_realm.
	noted by Thomas Nystrom <thn@@saeab.se>

2001-06-04  Assar Westerlund  <assar@@sics.se>

	* update copyright messages on Wietse Venema's code.

2001-05-31  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): look for [realms]<realm>krb4_get_tickets to
	decide whether to get kerberos 4 tickets

2001-02-08  Assar Westerlund  <assar@@sics.se>

	* utmp_login.c, utmpx_login.c: try to write a useful string as
	host in utmp, using the same algoritm as telnetd

@


1.1.1.1.2.3
log
@MFC: Update Heimdal Kerberos to pre-0.5 around 2002/08/29.
@
text
@a0 20
2002-08-23  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: if motd is set in login.conf, output its contents
	before starting the shell

2002-02-27  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: reset signals to default, needed on solaris 8

2002-02-19  Johan Danielsson  <joda@@pdc.kth.se>

	* login_locl.h: include netgroup.h and rpcsvc/ypclnt.h

	* login.c: make this build without krb5

2001-09-22  Assar Westerlund  <assar@@sics.se>

	* login_locl.h: kludge: use absolute path to find prot.h so we do
	not get confused by athena's prot.h

@


1.1.1.2
log
@import of heimdal 0.3e
@
text
@a0 54
2001-01-29  Assar Westerlund  <assar@@sics.se>

	* login.c: remove some krb5_free_context that might happen at
	unappropriate times

2000-12-31  Assar Westerlund  <assar@@sics.se>

	* login.c (main): handle krb5_init_context failure consistently

2000-12-11  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): set the group on the tty.
	(r_flag): comment out
	* login.c (krb5_to4): always return a value

2000-10-15  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): check another return code

2000-08-22  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c (do_login): set PATH to something sane;
	(start_logout_process): avoid getting signals sent to the parent

	* login_locl.h: _PATH_DEFPATH

2000-07-01  Assar Westerlund  <assar@@sics.se>

	* login.c (login_timeout): add back

2000-06-28  Johan Danielsson  <joda@@pdc.kth.se>

	* env.c: new file for environment related functions

	* login.c: move environment stuff to separate file, allow
	specifying list of environment files via login.conf

2000-06-21  Assar Westerlund  <assar@@sics.se>

	* Makefile.am (LDADD): add otp
	* login.c: add reading of /etc/environment.  From Ake Sandgren
	<ake@@cs.umu.se>
	add otp support. From Daniel Kouril <kouril@@ics.muni.cz>

2000-06-09  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): work-around for setuid and capabilities bug
	fixed in Linux 2.2.16

2000-04-09  Assar Westerlund  <assar@@sics.se>

	* login.c: allow conversion of v5 -> v4 tickets when logging in
	with forwarded tickets

@


1.1.1.3
log
@import of heimdal 0.3f
@
text
@a0 5
2001-02-08  Assar Westerlund  <assar@@sics.se>

	* utmp_login.c, utmpx_login.c: try to write a useful string as
	host in utmp, using the same algoritm as telnetd

@


1.1.1.4
log
@Import of Heimdal Kerberos from KTH repository circa 2002/02/17.
@
text
@a0 23
2001-09-17  Assar Westerlund  <assar@@sics.se>

	* login.c (do_login): add setpcred

2001-07-06  Assar Westerlund  <assar@@sics.se>

	* login.c: move osf2c magic earlier.  from Mark Davies
	<mark@@MCS.VUW.AC.NZ>

2001-06-19  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): dereference result from krb5_princ_realm.
	noted by Thomas Nystrom <thn@@saeab.se>

2001-06-04  Assar Westerlund  <assar@@sics.se>

	* update copyright messages on Wietse Venema's code.

2001-05-31  Assar Westerlund  <assar@@sics.se>

	* login.c (krb5_to4): look for [realms]<realm>krb4_get_tickets to
	decide whether to get kerberos 4 tickets

@


1.1.1.5
log
@Import of Heimdal Kerberos from KTH repository circa 2002/08/29.
@
text
@a0 20
2002-08-23  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: if motd is set in login.conf, output its contents
	before starting the shell

2002-02-27  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: reset signals to default, needed on solaris 8

2002-02-19  Johan Danielsson  <joda@@pdc.kth.se>

	* login_locl.h: include netgroup.h and rpcsvc/ypclnt.h

	* login.c: make this build without krb5

2001-09-22  Assar Westerlund  <assar@@sics.se>

	* login_locl.h: kludge: use absolute path to find prot.h so we do
	not get confused by athena's prot.h

@


1.1.1.6
log
@Vendor import of Heimdal 0.6.
@
text
@a0 15
2003-03-24  Johan Danielsson  <joda@@pdc.kth.se>

	* Makefile.am: install man pages

	* login.1: manpage for login

	* login.c: allow "welcome" as well as "motd" in login.conf

	* login.access.5: login.access manual page

2003-03-18  Love Hrnquist strand <lha@@it.su.se>
	
	* login.c: also need pag_set
	* login.c: if there is kerberos 5, call krb5_afslog\*
	
@


1.1.1.6.4.1
log
@MFC update Heimdal 0.6.1 -> 0.6.3.
@
text
@a0 5
2004-09-08  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: pull up 1.62->1.63: use krb5_appdefault_boolean instead
	of krb5_config_get_bool

@


1.1.1.7
log
@Vendor import of Heimdal 0.6.3.
@
text
@a0 5
2004-09-08  Johan Danielsson  <joda@@pdc.kth.se>

	* login.c: pull up 1.62->1.63: use krb5_appdefault_boolean instead
	of krb5_config_get_bool

@


1.1.1.8
log
@Vendor import of Heimdal 1.1
@
text
@a0 63
2006-12-05  Love Hrnquist strand  <lha@@it.su.se>

	* limits_conf.c: Clear errno before calling the strtol
	functions. From Paul Stoeber to OpenBSD by Ray Lai and Bjrn
	Sandell.

	* limits_conf.c: Report to syslog strings that start with NUL;
	prevents negative index array access. Ray Lai of OpenBSD via Bjrn
	Sandell.
	
2006-10-07  Love Hrnquist strand  <lha@@it.su.se>
	
	* Makefile.am: Add man_MANS to EXTRA_DIST

2006-09-22  Love Hrnquist strand  <lha@@it.su.se>

	* read_string.c: try to not call signaction for signal 0 and use
	NSIG if it exists to determin how many signals there exists, also,
	only restore those signalhandlers that we got out.
	
2006-04-27  Love Hrnquist strand  <lha@@it.su.se>

	* login_locl.h: Include "loginpaths.h"
	
	* loginpaths.h: Shared paths between login and rshd.
	
2006-01-09 Johan Danielsson <joda@@blubb.pdc.kth.se>

	* login.c: log successful logins
	
2005-08-08  Love Hrnquist strand <lha@@it.su.se>

	* login.c (do_login): only do krb4_get_afs_tokens if we have done
	v4 authentication or done a 5to4 conversion of tickets. This is to
	avoid delays on a realm that only support Kerberos 5 and drop
	Kerberos 4 requests.

2005-05-10  Dave Love  <fx@@gnu.org>

	* login.c: Include <crypt.h>.

2005-05-02  Dave Love  <fx@@gnu.org>

	* limits_conf.c: Check RLIMIT_MEMLOCK, not RLIMIT_LOCK.

2005-04-28  Dave Love  <fx@@gnu.org>

	* limits_conf.c: Maybe include sys/resource.h.  Use various
	RLIMIT_ macros conditionally.  For Solaris, Irix and Tru64.

2005-04-22  Johan Danielsson  <joda@@pdc.kth.se>

	* login.1: document limits.conf
	
	* Makefile.am: limits_conf.c
	
	* login_locl.h: template for limits.conf
	
	* login.c: read limits.conf (from /etc/security by default,
	overridable in login.conf)
	
	* limits_conf.c: implement a parser for limits.conf
	
d3 2
a4 4
	* login.c: use krb5_appdefault_boolean instead of
	krb5_config_get_bool

2003-09-03  Love Hrnquist strand <lha@@it.su.se>
a5 6
	* login.c (krb5_to4): set client princ of the mcred
	
2003-07-07  Love Hrnquist strand <lha@@it.su.se>

	* login.c (krb5_to4): use krb5_cc_clear_mcred
	
@


