summaryrefslogtreecommitdiffstats
path: root/libexec/login_chpass (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Use <fcntl.h> instead of <sys/file.h> for open() and friends.guenther2018-04-261-11/+2
| | | | | | | Delete a bunch of unnecessary #includes and sort to match style(9) while doing the above cleanup. ok deraadt@ krw@
* Delete YP password related code. As a result, these can also bederaadt2015-11-262-167/+6
| | | | | | pledged. Keep an eye out for regressions, because they could be uncomfortable. ok beck semarie
* No need to declare pwd_gensalt; it's unused and gone.ajacoutot2015-10-251-2/+1
| | | | ok tedu@
* use crypt_checkpass instead of doing things the hard way with crypt.tedu2015-10-222-11/+6
|
* Use explicit_bzero() instead of memset() for zeroing out secrets.millert2015-10-051-2/+2
| | | | OK deraadt@
* Remove KERBEROS5 from the Makefiles (except ssh for now, where it isreyk2014-04-221-9/+2
| | | | | | already manually disabled). ok deraadt@
* remove some unnecessary sys/param.h inclusionsderaadt2012-12-041-2/+1
|
* The heimdal code switched to using DES from libcrypto when 0.7.2jsg2010-10-131-3/+3
| | | | | | | was imported over four years ago, so we don't need to link libdes for kerberos anymore. ok mikeb@ deraadt@
* Update commented out kerberos bits in case someone wants to add missingmillert2008-01-021-7/+7
| | | | kerb5 support to login_chpass.
* convert to new .Dd format;jmc2007-05-311-2/+2
|
* Foil potential timing attacks by using the correct password hashmillert2006-03-091-4/+11
| | | | | | instead of "xx". In practice this means bcrypt() will be used for non-existent users instead of DES crypt(). Adapted from a patch by Peter Philipp. OK deraadt@
* drop some krb4 stuffbiorn2005-04-141-2/+1
| | | | ok beck@
* pass lintderaadt2004-09-281-2/+7
|
* More checking for a NULL return value from getpass(). otto@ OKmillert2004-03-101-3/+5
|
* Cleanup obsolete kerberos 4 stuff.hin2003-08-122-89/+4
| | | | ok millert@
* stop using libcom_err, it is built into krb5deraadt2003-07-151-3/+3
|
* Remove krb4 support.mho2003-05-141-7/+9
|
* typos;jmc2003-02-031-3/+3
| | | | | ipsecadm(8): examples ho@ help and ok markus@
* ansi; ok millert pvalchevderaadt2002-09-061-16/+8
|
* minor indent cleanupderaadt2002-06-281-10/+10
|
* minor KNFderaadt2002-06-021-3/+3
|
* pid_t cleanupderaadt2002-05-261-3/+3
|
* Add missing libraries to bsd.prog.mk (mostly kerberosV)espie2002-05-111-2/+2
| | | | | | | | | | Use them in DPADD throughout the tree. Fix a few mispells (LIBMATH -> LIBM...) Wipe obsolete lib (LIBRESOLV) Sort added missing libraries, move obsolete stuff apart. Synch documentation in bsd.README ok deraadt@
* login(8) -> login(1)marc2002-03-131-3/+3
|
* Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.millert2002-02-161-9/+9
|
* Don't let root change it's password via login_l?chpass(8).millert2002-01-061-8/+13
| | | | | | At some point in the future, passwd(1) may call these auth methods at which time we will need a flag to allow root to do a password change and also to allow account w/o a password to be given one.
* o Use writev() to send status on the backchannel instead of fdopen()ingmillert2001-12-071-14/+35
| | | | | | | | | | fd 3 and using stdio. o Add SIGINT/SIGQUIT signal handler for yp_chpass() now that getpass() is interuptible. o Block SIGINT/SIGQUIT in krb_chpass() until it is made to clean up after itself properly.
* Do not set handler for SIGINT and SIGQUIT to SIG_IGN since it preventsmillert2001-12-061-3/+1
| | | | | | | | | | | | getpass()/readpassphrase() from being able to restore the tty mode on keyboard interrupt. Along with the recent readpassphrase.c commit this means that if you ^C things that use login scripts (like su(1)) with a non-CBREAK shell your tty mode will be restored nicely. TODO: The various login scripts need to install handlers to avoid leaving turd files or otherwise ending in a bad state. It would also be nice to send BI_REJECT to the back channel.
* getopt(3) returns -1 when out of args, not EOF.mpech2001-10-241-2/+2
| | | | millert@ ok
* Remove extraneous .Pp after .Shmillert2001-07-081-2/+1
|
* chpass login script; changes local, yp, or kerberos passwordmillert2000-12-123-0/+430
will be used when BSD authentication is enabled