summaryrefslogtreecommitdiffstats
path: root/libexec/login_chpass
AgeCommit message (Collapse)AuthorFilesLines
2018-04-26Use <fcntl.h> instead of <sys/file.h> for open() and friends.guenther1-11/+2
Delete a bunch of unnecessary #includes and sort to match style(9) while doing the above cleanup. ok deraadt@ krw@
2015-11-26Delete YP password related code. As a result, these can also bederaadt2-167/+6
pledged. Keep an eye out for regressions, because they could be uncomfortable. ok beck semarie
2015-10-25No need to declare pwd_gensalt; it's unused and gone.ajacoutot1-2/+1
ok tedu@
2015-10-22use crypt_checkpass instead of doing things the hard way with crypt.tedu2-11/+6
2015-10-05Use explicit_bzero() instead of memset() for zeroing out secrets.millert1-2/+2
OK deraadt@
2014-04-22Remove KERBEROS5 from the Makefiles (except ssh for now, where it isreyk1-9/+2
already manually disabled). ok deraadt@
2012-12-04remove some unnecessary sys/param.h inclusionsderaadt1-2/+1
2010-10-13The heimdal code switched to using DES from libcrypto when 0.7.2jsg1-3/+3
was imported over four years ago, so we don't need to link libdes for kerberos anymore. ok mikeb@ deraadt@
2008-01-02Update commented out kerberos bits in case someone wants to add missingmillert1-7/+7
kerb5 support to login_chpass.
2007-05-31convert to new .Dd format;jmc1-2/+2
2006-03-09Foil potential timing attacks by using the correct password hashmillert1-4/+11
instead of "xx". In practice this means bcrypt() will be used for non-existent users instead of DES crypt(). Adapted from a patch by Peter Philipp. OK deraadt@
2005-04-14drop some krb4 stuffbiorn1-2/+1
ok beck@
2004-09-28pass lintderaadt1-2/+7
2004-03-10More checking for a NULL return value from getpass(). otto@ OKmillert1-3/+5
2003-08-12Cleanup obsolete kerberos 4 stuff.hin2-89/+4
ok millert@
2003-07-15stop using libcom_err, it is built into krb5deraadt1-3/+3
2003-05-14Remove krb4 support.mho1-7/+9
2003-02-03typos;jmc1-3/+3
ipsecadm(8): examples ho@ help and ok markus@
2002-09-06ansi; ok millert pvalchevderaadt1-16/+8
2002-06-28minor indent cleanupderaadt1-10/+10
2002-06-02minor KNFderaadt1-3/+3
2002-05-26pid_t cleanupderaadt1-3/+3
2002-05-11Add missing libraries to bsd.prog.mk (mostly kerberosV)espie1-2/+2
Use them in DPADD throughout the tree. Fix a few mispells (LIBMATH -> LIBM...) Wipe obsolete lib (LIBRESOLV) Sort added missing libraries, move obsolete stuff apart. Synch documentation in bsd.README ok deraadt@
2002-03-13login(8) -> login(1)marc1-3/+3
2002-02-16Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.millert1-9/+9
2002-01-06Don't let root change it's password via login_l?chpass(8).millert1-8/+13
At some point in the future, passwd(1) may call these auth methods at which time we will need a flag to allow root to do a password change and also to allow account w/o a password to be given one.
2001-12-07o Use writev() to send status on the backchannel instead of fdopen()ingmillert1-14/+35
fd 3 and using stdio. o Add SIGINT/SIGQUIT signal handler for yp_chpass() now that getpass() is interuptible. o Block SIGINT/SIGQUIT in krb_chpass() until it is made to clean up after itself properly.
2001-12-06Do not set handler for SIGINT and SIGQUIT to SIG_IGN since it preventsmillert1-3/+1
getpass()/readpassphrase() from being able to restore the tty mode on keyboard interrupt. Along with the recent readpassphrase.c commit this means that if you ^C things that use login scripts (like su(1)) with a non-CBREAK shell your tty mode will be restored nicely. TODO: The various login scripts need to install handlers to avoid leaving turd files or otherwise ending in a bad state. It would also be nice to send BI_REJECT to the back channel.
2001-10-24getopt(3) returns -1 when out of args, not EOF.mpech1-2/+2
millert@ ok
2001-07-08Remove extraneous .Pp after .Shmillert1-2/+1
2000-12-12chpass login script; changes local, yp, or kerberos passwordmillert3-0/+430
will be used when BSD authentication is enabled