summaryrefslogtreecommitdiffstats
path: root/libexec/login_passwd (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Check auth_mkvalue(3) return value for NULL (malloc failure).millert2021-01-021-3/+2
| | | | | For constant strings we don't actually need to use auth_mkvalue(3). Problem reported by Ross L Richardson.
* Fix handling of passwd entries with an empty password.millert2020-05-151-4/+5
| | | | | | Initialize "pass" to the empty string instead of NULL, otherwise crypt_checkpass() will dereference NULL. From Yuichiro Naito via yasuoka@. OK deraadt@
* Merge two missed fixes from login.c to login_passwd.c.millert2019-12-241-4/+5
| | | | | | - use the correct length when checking for "-v lastchance=yes" - don't try to zero pass if it is NULL From miod@
* Replace modular version with origin BSDi version with our updates.millert2019-12-214-252/+133
| | | | | | In 2001 login_passwd was made modular so we could use the same source for passwd and kerberos auth. Now that we no longer have kerberos integrated we can simplify login_passwd. OK deraadt@
* Return BI_SILENT not BI_AUTH if the challenge service is requested.millert2019-12-141-2/+2
| | | | | This bug was introduced in the login_passwd rewrite back in 2001. From Tom Longshine.
* I am retiring my old email address; replace it with my OpenBSD one.millert2019-01-251-3/+3
|
* Remove the hopefully last remnants of kerberos in there: arg_login,ajacoutot2018-09-301-12/+1
| | | | | | arg_notickets and invokinguser. ok kn@ millert@
* Call pledge(2) earlier before opening the auth channel and readpassphrase()reyk2018-06-133-8/+15
| | | | | | | | | | | Before this change, only the password validation was pledged, now it also includes some more code including the "Password:" prompt. To pledge the code earlier, the getpwnam_shadow() had to be moved up - it works under "getpw" but it does not return the actual password hash under pledge. This also works with yp(ldap). OK deraadt@ tb@ brynet@
* Remove #ifdef PASSWD, it was always enabled and is a leftover from krb5 days.reyk2018-06-133-11/+5
| | | | | | No other uses of -DPASSWD were found in the tree. OK deraadt@ tb@ brynet@
* set password to return of readpassphrase(), not always the buffer.tedu2016-09-031-3/+2
|
* convert to use readpassphrase() instead of DEPRECATED/getpass()gsoares2016-09-032-4/+6
| | | | OK millert@
* krb5 bits should rest in peacegsoares2016-09-022-9/+2
| | | | OK deraadt
* remove unneeded caststedu2016-08-161-2/+2
|
* Call syslog() if login_* pledge fails; OK deraadt@millert2015-11-191-3/+5
|
* use _shadow getpw functions. these utilities obviously deal with hashes.tedu2015-11-181-2/+2
|
* Don't compile pwd_gensalt, it's not needed since we use crypt_checkpass.ajacoutot2015-10-242-5/+3
| | | | ok tedu@
* pledge "stdio rpath" is good enough for these mainline BSD auth loginderaadt2015-10-141-1/+5
| | | | | | programs. (I am very surprised pledge ended up working for programs like this) ok semarie millert
* Use explicit_bzero() instead of memset() for zeroing out secrets.millert2015-10-052-4/+4
| | | | OK deraadt@
* add some missing .Cm macros and drop some redundant .Bk while hereschwarze2015-09-111-8/+8
|
* Replace <sys/param.h> with <limits.h> and other less dirty headers wherederaadt2015-01-162-4/+4
| | | | | | | | | possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
* use crypt_checkpass function to make things simpletedu2014-09-161-22/+7
|
* add a krb5-noverify option for login.conf that disables verificationdlg2012-06-012-4/+4
| | | | | | | | of the server against a local host keytab file when you're authing users with login_krb5. useful for when you need to auth users but dealing with the domain admins is painful... ok sthen@ jj@ millert@
* improve synopsis markup of login_* utilities; use a more standardsobrado2012-02-011-4/+4
| | | | | | | | | phrasing when listing flags; add missing arguments to flags in the DESCRIPTION section of the manual page. use of .Li (literal text) macros and standard wording suggested by jmc@ ok jmc@
* convert to new .Dd format;jmc2007-05-311-2/+2
|
* a FALLTHROUGH and one size_t castderaadt2006-04-021-2/+3
|
* Foil potential timing attacks by using the correct password hashmillert2006-03-093-8/+17
| | | | | | instead of "xx". In practice this means bcrypt() will be used for non-existent users instead of DES crypt(). Adapted from a patch by Peter Philipp. OK deraadt@
* drop some krb4 stuffbiorn2005-04-142-8/+2
| | | | ok beck@
* login_passwd needs to be setuid root after all for "secure" YP maps.millert2004-05-121-3/+3
|
* More checking for a NULL return value from getpass(). otto@ OKmillert2004-03-102-3/+6
|
* spacesderaadt2003-07-291-2/+2
|
* Sync with share/misc/license.template and add missing DARPA creditmillert2003-06-171-8/+8
| | | | where applicable.
* Use an ISC-tyle license for all my code; it is simpler and more permissive.millert2003-06-031-22/+11
|
* login_passwd is now setgid _shadow instead of setuid root.millert2003-03-281-3/+3
|
* incorrect string length matching; ianm@cit.uws.edu.auderaadt2003-03-171-7/+7
|
* ansi; ok millert pvalchevderaadt2002-09-061-2/+1
|
* o) start new sentence on a new line;mpech2002-08-281-2/+2
| | | | | | | o) don't use .Nm w/o argument in .SYNOPSIS; I waste time, when fixing already cleaned pages. :( one man ok@
* minor KNFderaadt2002-06-021-4/+4
|
* Only accept the empty string for users with no password.millert2002-03-191-10/+13
| | | | Previously, any password was accepted (that's how crypt() behaves).
* Do not set handler for SIGINT and SIGQUIT to SIG_IGN since it preventsmillert2001-12-061-3/+1
| | | | | | | | | | | | getpass()/readpassphrase() from being able to restore the tty mode on keyboard interrupt. Along with the recent readpassphrase.c commit this means that if you ^C things that use login scripts (like su(1)) with a non-CBREAK shell your tty mode will be restored nicely. TODO: The various login scripts need to install handlers to avoid leaving turd files or otherwise ending in a bad state. It would also be nice to send BI_REJECT to the back channel.
* o) fix bogus .Xr usage;mpech2001-11-131-2/+3
| | | | | | | | o) start new sentence on a new line; o) don't use .Xr instead of .Pa tag; o) minimal -mdoc design fixes; millert@ ok;
* some KNFmillert2001-08-121-6/+6
|
* o wheel and lastchance are -v args (variable), not -s (service)millert2001-08-091-22/+25
| | | | | o an unknown service is a fatal error o some KNF
* Remove extraneous .Pp after .Shmillert2001-07-081-2/+1
|
* uglyderaadt2001-06-291-10/+9
|
* Cleanup and unify login_passwd, login_krb4, login_krb4-or-pwd, login_krb5 andhin2001-06-264-141/+266
| | | | login_krb5-or-pwd.
* Remove instance stuff now that su uses an explicit option to specifymillert2001-06-251-14/+2
| | | | the invoking user.
* Don't do the root instance handling stuff; su no longer does it.hin2001-06-251-17/+3
|
* passwd login script; authenticates the user via passwd/ypmillert2000-12-123-0/+323
will be used when BSD authentication is enabled
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.