Commit Graph

160 Commits

Author SHA1 Message Date
Paul Traina
278022fad4 Make the DB/DBM routines generic (ifdef FreeBSD considered evil), and
also fix a string allocation bug.

Submitted by: Havard Eidnes
1995-08-02 23:08:18 +00:00
Paul Traina
f97a38cd65 Program to receive and process a new kerberos database (this is run on
the slave server).

NOTE: This code should not be built, there is no documentation, and this
      method of database transfer is highly suboptimal.  It's here just
      for those of us who actually have multiple K4 servers and want
      something more secure than the other distribution mechanisms.

Obtained from: MIT Project Athena
1995-08-02 22:14:27 +00:00
Paul Traina
fa84c42025 Import an updated revision of the MIT kprop program for distributing
kerberos databases to slave servers.

NOTE: This method was abandoned by MIT long ago, this code is close to
      garbage,  but it is slightly more secure than using rdist.
      There is no documentation available on how to use it, and
      it should -not- be built by default.

Obtained from:	MIT Project Athena
1995-08-02 22:11:44 +00:00
Justin T. Gibbs
e0deda6676 Make kadmind safe to run on multi-homed machines.
Reviewed by: Garrett A. Wollman (wollman@FreeBSD.org)
1995-08-02 18:31:08 +00:00
Andrey A. Chernov
9ed77b336f Final cleanup pass through Makefiles, now this stuff
autodetect kerberos/eBones and work even with eBones,
but with reduced functionality (don't pick up des/krb stuff
in this case)
1995-07-24 22:55:59 +00:00
Andrey A. Chernov
dbd07ffcc0 Add -ldescrypt, or wrong crypt version can be picked from libc
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 22:01:01 +00:00
Andrey A. Chernov
6b370f4c7e Add LDADD+= -ldescrypt
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 21:57:58 +00:00
Andrey A. Chernov
b6c080f6bc Move -ldes under kerb stuff, my fault
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 21:49:06 +00:00
Andrey A. Chernov
e74d115547 Since this stuff not works with eBones, ifdef kerberos stuff
with MAKE_KERBEROS to allow other things to live
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 21:47:30 +00:00
Andrey A. Chernov
3b901a0b79 Since this stuff not works with eBones, ifdef kerberos stuff
with MAKE_KERBEROS to allow other things to live
Submitted by:
Obtained from:
1995-07-24 21:38:32 +00:00
Andrey A. Chernov
4109d6bfef Add comment about new_rnd_key.c module needed from original
libdes (and not present in eBones libdes)
1995-07-24 21:12:57 +00:00
Andrey A. Chernov
7170827e21 Add comment about new_rbd_key.c module needed from
original libdes
1995-07-24 21:10:47 +00:00
Andrey A. Chernov
f8e556c37d Fix dependances, typing errors, etc.
Note: this thing need original libdes not Eric Young libdes from eBones
Submitted by:
Obtained from:
1995-07-24 20:40:03 +00:00
Andrey A. Chernov
bfdd0041fc Fix many bogus things, typing error, dependance errors, etc.,
now it compiles.
Note: this stuff requires original libdes, not libdes from
Eric Yang which we have in eBones.
1995-07-24 20:29:12 +00:00
Rodney W. Grimes
4b6cee4dd6 date: 1995/07/12 13:10:58; author: jkh; state: Exp; lines: +3 -2
Sync with Mark M's latest suggestions.
Submitted by:   markm

[This is being pulled from RELENG_2_0_5, it was commited there after the
release, and we need it here and in RELENG_2_1_0, it will be cvs admin -o'ed
off the RELENG_2_0_5 branch after this commit.]
1995-07-22 04:24:05 +00:00
Paul Traina
4a0834a5a2 When hostname len > 8, name replaced with dot notation when -u flag
not specified (default case).
Use _PATH_* for utmp/wtmp.

Support for >32 PTYs.
>Submitted by:   Heikki Suonsivu <hsu@cs.hut.fi>

Plug already known security hole. (Brought over from 1.1.5):
Fixed security problem with telnetd, which allowed
   telnet -l -hcert.org localhost
to change the user's host in utmp.
Thanks to Matthew Green <mrgreen@@mame.mu.oz.au> for showing me this one.

>Reviewed by:    karl, guido
>Submitted by:   mrgreen@mame.mu.oz.au

Obtained from:	FreeBSD insecure telnetd
1995-07-20 12:35:01 +00:00
Paul Traina
4fd39f708a The final negotiation of DO_BINARY in the LINEMODE portion of the telnetd code
causes some clients that do not support linemode to mis-interpret the return
key (i.e. double returns).
The fix is to only do the state check for binary options if linemode will
be used.
Closes PR#505.

Submitted by:   Charles Henrich
Obtained from:	FreeBSD insecure telnetd
1995-07-20 12:32:40 +00:00
Paul Traina
9809ff32f6 Update telnet to the 95.05.31 release.
Obtained from:	Dave Borman <dab@cray.com>
1995-07-20 11:40:06 +00:00
Rodney W. Grimes
d3628763db Merge RELENG_2_0_5 into HEAD 1995-06-11 19:33:05 +00:00
Rodney W. Grimes
7799f52a32 Remove trailing whitespace. 1995-05-30 06:41:30 +00:00
Rodney W. Grimes
5ebc7e6281 Remove trailing whitespace. 1995-05-30 06:12:45 +00:00
Garrett Wollman
2b50c84ac1 Make certain that random keys havethe correct parity, for interoperation with
MIT v4 implementations.

Submitted by: Reece R. Pollack <reece@eco.twg.com>
1995-05-09 18:05:15 +00:00
Dima Ruban
399e5b4411 Security fixes.
CERT Advisory CA-95:03.telnet.encryption

Obtained from: CERT
1995-02-17 03:57:00 +00:00
Andrey A. Chernov
3d70f09304 Build kpasswd from normal passwd sources now
Submitted by: mark@grondar.za
1995-02-11 18:25:38 +00:00
Jordan K. Hubbard
2b6645c034 Various documentation changes.
Submitted by:	Mark Murray <mark@grondar.za>
1995-02-08 10:54:30 +00:00
Andrey A. Chernov
ac6802b11c Fix database deletion, we don't have .dir & .pag, use .db instead 1995-01-25 19:57:27 +00:00
Andrey A. Chernov
06b1dd511a Fix database rename, we don't have .dr & .pag, use .db instead 1995-01-25 19:45:25 +00:00
Justin T. Gibbs
8d4b2d911c Less expensive fix for the freeing of uninitialized fields in the hostdata
struct.  Simply test the "no_host" variable, which if true implies that
the hostdata contains bogus data, and act accordingly.
1995-01-25 06:37:33 +00:00
Justin T. Gibbs
33ac11112d bzero hostdata in send_to_kdc so that if we immediately jump to the
cleanup routine, we don't look at bogus data to determine wheter or not
to free the fields of the hostdata struct.  This cures the "klogin segfaults
when no kerberos servers are availible" problem.
1995-01-25 05:40:00 +00:00
Andrey A. Chernov
5ba6fadf2f Add missing newline (or messages concatenated) 1995-01-25 02:27:00 +00:00
Garrett Wollman
745bdc24b4 Print out error messages from libkadm correctly (i.e., using com_err). 1995-01-23 22:54:08 +00:00
Garrett Wollman
422c275a72 Add ksrvutil. 1995-01-20 22:40:02 +00:00
Garrett Wollman
8c5c9f2577 Add last piece in fully-functional Kerberos implementation: ksrvutil,
a program to manage /etc/srvtab.
1995-01-20 22:38:30 +00:00
Garrett Wollman
218a5dcf33 Added Kerberized passwd. 1995-01-20 22:16:47 +00:00
Garrett Wollman
788c8e2ea4 Password-changing program with Kerberos support via the `kadmin'
protocol.  Replaces passwd(1) when eBones is installed.  As before, HOW-TO
explains the gory details.
1995-01-20 22:14:14 +00:00
Garrett Wollman
01ae44681d Fix bonehead /usr/lib -> /usr/bin. 1995-01-20 22:08:14 +00:00
Garrett Wollman
4ed9828579 Add kadmind. 1995-01-20 03:13:48 +00:00
Garrett Wollman
acfdd75a53 Add kadmind. HOW-TO documents how to get here from raw eBones. 1995-01-20 03:13:00 +00:00
Garrett Wollman
703273c507 Add kadmin. 1995-01-20 02:49:47 +00:00
Garrett Wollman
516345750a The user side of the kadmin protocol. HOW-TO describes how to recreate
this based just on the eBones distribution.
1995-01-20 02:47:50 +00:00
Garrett Wollman
a15e22a637 Add the library used by kadmin' and kadmind'. Oddly enough, this
little library is actually exportable (we think) even though it's pretty
useless iwithout the (non-exportable) clients.
1995-01-20 02:02:54 +00:00
Garrett Wollman
1c8f305817 Don't install kadm.h from here; it's done by the libkadm directory. 1995-01-20 02:01:11 +00:00
Garrett Wollman
51c716bd1c Do all libraries first. Don't do `include' twice. 1995-01-20 02:00:34 +00:00
Garrett Wollman
35042b3093 Don't break existing users of libkrb.so.2.0 who aren't using libcom_err. 1995-01-20 01:44:47 +00:00
Garrett Wollman
bf836b9a51 Kill more bogus man pages. (The correct ones are with their programs.) 1995-01-20 01:26:53 +00:00
Garrett Wollman
3df56e5197 A more correct fix for the new compile_et. Also, add beforeinstall
rule to ensure that krb_err.h gets installed (some other programs need
it).
1995-01-20 01:12:19 +00:00
Garrett Wollman
da626a6f54 Remove obsolete `-n' flag from compile_et command line. 1995-01-14 22:32:48 +00:00
Garrett Wollman
f6e8b72cb5 Reflect the fact that compile_et is now a `system' utility. 1995-01-14 20:51:05 +00:00
Garrett Wollman
0d003156dd Reflect the fact that compile_et has been moved and is now a `system'
utility.
1995-01-14 20:50:37 +00:00
Garrett Wollman
d477883788 Don't install bogus tftp, tftpd, tcom manual pages from the MIT Kerberos
distribution.  They don't apply here.
1994-11-20 23:41:23 +00:00
Garrett Wollman
1b6e011b0d Add a help-distribute' target which does a distribute' in our subdirs,
then goes into all the directories a `make kprog' would have and
does it there, too.  This should complete the krbdist, except that P-HK
has to figure out where in his build process he wants to build and install
this stuff.
1994-11-20 23:39:44 +00:00
Garrett Wollman
36e95c3186 Add DISTRIBUTION=krb for P-HK. 1994-11-20 23:16:51 +00:00
Garrett Wollman
36a87f80de Zap 4.0 libkdb as well. 1994-10-06 00:48:55 +00:00
Garrett Wollman
04467f3807 A few fixes:
- register, registerd, and make_keypair don't compile (and are bogus anyway)
- don't forget to put back the obj directory when doing `kprog'
- while we're at it make the `kprog' commands overrideable from the command
  line
- add a bootstrap target which does the following:
	install includes
	cleandir and obj
	zap old version 4.0 shared libraries (these will screw the build)
	depend all install
	rebuild stuff in the main source tree which depends on kerberos
1994-10-06 00:32:42 +00:00
Geoff Rehmet
60643d379b Initial import of eBones.
(Including all changes for FreeBSD - importing the original eBones distribution
would be too complex at this stage, since I don't have access to Piero's 
CVS.)
(If you want to include eBones in your system, don't forget to include
MAKE_EBONES in /etc/make.conf.)
(This stuff is now also suppable from braae.ru.ac.za.)

Bones originally from MIT SIPB.
Original port to FreeBSD 1.x  by Piero Serini.
Moved to FreeBSD 2.0 by Doug Rabson and Geoff Rehmet.
Nice bug fixes from Doug Rabson.
1994-09-30 14:50:09 +00:00
Rodney W. Grimes
6897a8a75d Change all references to LIBTERM and -ltermlib to LIBTERMCAP and -ltermcap 1994-09-11 21:53:28 +00:00
Geoff Rehmet
eb3ae6fd94 The telnet version with encryption in in.
Reviewed by:	geoff.
1994-08-27 15:48:54 +00:00
Geoff Rehmet
daf079cb54 Move the telnetd with encryption to src/secure
This needs tidying up and having makefiles sorted out later.
Reviewed by:	Geoff Rehmet
1994-08-12 22:53:46 +00:00
Geoff Rehmet
040d596f3e Libtelnet with encryption goes walkies to src/secure/lib
Reviewed by:	Geoff Rehmet
1994-08-12 22:03:01 +00:00
Rodney W. Grimes
ee765d4857 BSD 4.4 Lite KerberosIV Sources 1994-05-27 05:12:12 +00:00