summaryrefslogtreecommitdiffstats
path: root/libexec/login_radius
AgeCommit message (Collapse)AuthorFilesLines
2021-01-02Check auth_mkvalue(3) return value for NULL (malloc failure).millert1-11/+21
For constant strings we don't actually need to use auth_mkvalue(3). Problem reported by Ross L Richardson.
2019-06-28When system calls indicate an error they return -1, not some arbitraryderaadt1-2/+2
value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.
2017-04-27challenge is an array, not a pointer, therefore cannot be NULL.millert1-2/+2
Quiets a clang warning.
2016-09-03convert to use readpassphrase() instead of DEPRECATED/getpass()gsoares1-3/+7
OK millert@
2015-11-26pledge in login_radius(8).yasuoka1-1/+5
ok deraadt
2015-10-05Use explicit_bzero() instead of memset() for zeroing out secrets.millert1-1/+2
OK deraadt@
2015-10-02Talk about 'RADIUS server' in most cases, rather than referring specificallysthen1-28/+31
to radiusd(8) (which doesn't support everything that login_radius(8) talks about) - theo buehler (who provided previous diff) agrees with this. Capitalise RADIUS as per the naming in the RFC. Add STANDARDS section referring to the RFC. Discussed with/suggestions from jmc.
2015-10-01some radiusd updates, from theo buehlerjmc1-11/+6
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers wherederaadt1-3/+3
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
2014-08-10Only need <stdint.h> and not all of <inttypes.h> hereguenther1-2/+2
2013-11-27unsigned char for ctypederaadt2-7/+7
ok okan kettenis
2013-08-14some Bx/Ox conversion;jmc1-4/+5
From: Jan Stary
2012-12-04remove some unnecessary sys/param.h inclusionsderaadt1-2/+1
2012-02-01improve synopsis markup of login_* utilities; use a more standardsobrado1-6/+6
phrasing when listing flags; add missing arguments to flags in the DESCRIPTION section of the manual page. use of .Li (literal text) macros and standard wording suggested by jmc@ ok jmc@
2007-12-14Add radius-port login.conf variable to allow people to configure amillert2-17/+25
non-standard port name or number for use when connecting to radiusd.
2007-05-31convert to new .Dd format;jmc1-2/+2
2007-03-21remove extra *p tests, from charles longeautedu1-2/+2
ok deraadt millert
2006-09-20Recommit non-static array fix.ray1-2/+3
2006-08-14Document debug mode. OK jmc@millert1-1/+6
2006-08-14Fix typo introduced in rev 1.16; fixes "login" authentication style.millert1-2/+2
2005-11-19No longer need volatile since longjmp has been removed.millert1-4/+4
Ironically silences a gcc warning.
2005-11-12use snprintf; ok cloder dhill@mindcry.orgderaadt1-6/+2
2005-03-02More network randomness. PIDs on my machine are none of anyone else'scloder1-5/+5
business. Submitted by Bruno Rohee. OK cloder@ millert@
2004-09-11Verify packets from the server were md5'd with the same sharedmillert1-4/+16
secret we used in the request. OK deraadt@
2004-03-10More checking for a NULL return value from getpass(). otto@ OKmillert1-5/+6
2004-03-03assign servtimeout to sa.sa_handler to actually use the alternatejcs1-1/+2
radius server ok millert
2003-07-29spacesderaadt1-2/+2
2003-07-06proto in scopederaadt3-3/+25
2003-03-11files with dead .Xr's;jmc1-5/+5
left .Xr, but removed man page number as suggested by mpech@ more help and ok millert@
2003-03-06.Xr typos;jmc1-5/+5
ok deraadt@
2002-11-21Add a caveat on /etc/raddb/servers and permissions.millert1-1/+13
2002-11-21Install this setgid _radius, not setuid rootmillert1-3/+3
2002-09-29BSD-licensed as per Stephen Diercouff of tfm associatesmillert2-23/+49
2002-09-29re-add; license will be fixed by millert sometime tonightderaadt1-0/+586
2002-09-26Makefilederaadt1-586/+0
2002-09-06ansi; ok millert pvalchevderaadt1-2/+2
2002-06-28minor indent cleanupderaadt1-6/+6
2002-06-02minor KNFderaadt1-3/+3
2002-05-22a bunch more strcpy -> strlcpy and sprintf -> snprintfderaadt1-4/+6
2002-03-13login(8) -> login(1)marc1-3/+3
2001-12-07Kill longjmp by not restarting system calls on receipt of SIGALRM.millert1-10/+13
We can then just check the flag to see that the alarm ran out.
2001-08-18better handle things; spotted by millertderaadt1-2/+3
2001-08-18strlcpy invades the treederaadt1-2/+2
2001-07-26Typo: radius-timout -> radius-timeout; noted by brad@millert2-4/+4
2001-07-09Use socklen_t, not size_t for type of length arg to recvfrom()millert1-2/+2
2001-07-08cleanup and document login.conf variablesmillert1-21/+52
2001-07-08o make signal handler safemillert1-62/+66
o add some missing args to prototypes o some KNF o use memcpy() to copy random bytes into the vector instead of hand copying o if servers files ends w/o a newline, alloc space and copy the line o remove unused function argument "length" from parse_challenge()
2001-07-08BSD auth module for radius authentication, from BSDi.millert4-0/+909