wireguard-openbsd/libexec/login_passwd, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/libexec/login_passwd?h=jd%2Fqueueboosts 2020-05-15T17:25:39Z Fix handling of passwd entries with an empty password. 2020-05-15T17:25:39Z millert millert@openbsd.org 2020-05-15T17:25:39Z urn:sha1:e3568ce26f9d04b69ade188334bcaa0cba896d64 Initialize "pass" to the empty string instead of NULL, otherwise crypt_checkpass() will dereference NULL. From Yuichiro Naito via yasuoka@. OK deraadt@ Merge two missed fixes from login.c to login_passwd.c. 2019-12-24T13:13:33Z millert millert@openbsd.org 2019-12-24T13:13:33Z urn:sha1:d89a8fc2b45c1859b22176d1afae3924a603e375 - use the correct length when checking for "-v lastchance=yes" - don't try to zero pass if it is NULL From miod@ Replace modular version with origin BSDi version with our updates. 2019-12-21T18:56:27Z millert millert@openbsd.org 2019-12-21T18:56:27Z urn:sha1:d8f5a4ae7e0885da2ff7be0217a576cc9c44c666 In 2001 login_passwd was made modular so we could use the same source for passwd and kerberos auth. Now that we no longer have kerberos integrated we can simplify login_passwd. OK deraadt@ Return BI_SILENT not BI_AUTH if the challenge service is requested. 2019-12-14T15:22:48Z millert millert@openbsd.org 2019-12-14T15:22:48Z urn:sha1:b4d71eb7c05ce44efa40ad23958e7304abd440cf This bug was introduced in the login_passwd rewrite back in 2001. From Tom Longshine. I am retiring my old email address; replace it with my OpenBSD one. 2019-01-25T00:19:25Z millert millert@openbsd.org 2019-01-25T00:19:25Z urn:sha1:bf198cc6eba0ca1f6d79f71e8e2243d386241fa8 Remove the hopefully last remnants of kerberos in there: arg_login, 2018-09-30T13:29:24Z ajacoutot ajacoutot@openbsd.org 2018-09-30T13:29:24Z urn:sha1:fbe777cf517e1f601d6e06f07f8d2518f90c562a arg_notickets and invokinguser. ok kn@ millert@ Call pledge(2) earlier before opening the auth channel and readpassphrase() 2018-06-13T15:02:09Z reyk reyk@openbsd.org 2018-06-13T15:02:09Z urn:sha1:05b936d72ee5fae83075fc48ac7f709308fde3fb Before this change, only the password validation was pledged, now it also includes some more code including the "Password:" prompt. To pledge the code earlier, the getpwnam_shadow() had to be moved up - it works under "getpw" but it does not return the actual password hash under pledge. This also works with yp(ldap). OK deraadt@ tb@ brynet@ Remove #ifdef PASSWD, it was always enabled and is a leftover from krb5 days. 2018-06-13T14:54:42Z reyk reyk@openbsd.org 2018-06-13T14:54:42Z urn:sha1:9b203ab7c3f4e076af3bee6e51616885cc6063c0 No other uses of -DPASSWD were found in the tree. OK deraadt@ tb@ brynet@ set password to return of readpassphrase(), not always the buffer. 2016-09-03T11:24:40Z tedu tedu@openbsd.org 2016-09-03T11:24:40Z urn:sha1:f3a44ca3fc203a7c20a5430474577d5afbc5bd4a convert to use readpassphrase() instead of DEPRECATED/getpass() 2016-09-03T10:50:16Z gsoares gsoares@openbsd.org 2016-09-03T10:50:16Z urn:sha1:efe4d82692c65798896a2a64ed206b80cc8a867d OK millert@