summaryrefslogtreecommitdiffstats
path: root/gnu/usr.sbin
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug pointed out by user on c.u.b.f.m: commenting out NOPUSH=truewpaul1995-08-111-5/+5
| | | | | for master/slave configuration doesn't work because DOMAIN isn't correctly defined.
* Install source files with the -c flag, not with the optional flag ${COPY}.bde1995-08-061-3/+3
|
* Change `install' to `${INSTALL}' so that default install flags can bebde1995-07-252-5/+5
| | | | specified in the top level Makefiles.
* Updates, fixes and cleanups -- oh my.wpaul1995-07-199-143/+206
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In ypserv: yp_svc.c: - small signal handler tweak (hopefully the last): just use sigemptyset() to clear sa_mask. Makefile.yp: - Let the user specify the location of master.passwd when updating maps (e.g. make MASTER_PASSWD=/some/path/to/master.passwd). Editing the file to change the location of master.passwd still works. This is mostly to let yppassswdd specify the name of the master.passwd file itself. In yppasswdd: yppasswdd.c: - Roll in some minor changes (mostly casts) from Olaf Kirch's latest yppasswd package release (version 0.7). - Use daemon() instead of doing all the deamonizing gruntwork ourselves. - Call pw_init() after daemonizing ourselves. pw_init() sets up some resource limits and blocks some signals for us. We used to do this before every password change, but there's really no point in calling it more than once during the life of the program. - Change install_reaper() so that we can use it to de-install the SIGCHLD handler if we need to (and we do in pw_mkdb() -- this is what I get for splicing code from two different programs together). - Use sigemptyset(&act.sa_mask) rather than act.sa_mask = 0: the latter is decidedly non-portable. (In IRIX, HP-UX and Solaris, sigset_t is an array of longs, not an int.) update.c: - Roll in change from new version (check that we're not modifying an NIS entry in validate_args()). - Get rid of call to pw_init() (moved to yppasswdd.c). - Check return values from pw_util routines and return error status to yppasswd clients if there's a problem. - Straighten out password file copying mechanism a little. Keep a grip on the original password file rather than summarily overwriting it so that we can restore everything if we fail to fork() a process to update the NIS maps. - Pass the name of the password template file (specified with -m or /etc/master.passwd by default) to the yppwupdate script, which in turn should now pass it to /var/yp/Makefile. pw_util.c: - Nuke the pw_edit() and pw_prompt() functions -- we don't need them. - Change all warn()s, warnx()s and err()s to syslog()s. - Make sure we return error status to caller rather than bailing out in pw_lock() and pw_tmp(). - Don't block SIGTERM in pw_init() (by ignoring SIGTERM, we prevent yppasswdd from being shut down cleanly). - Don't let pw_error() exit. (This stuff was stolen from chpass and vipw which are interactive programs; it's okay to let pw_error() bail out for these programs, but not in a daemon like yppasswdd). - Fix signal handling in pw_mkdb (we need to temporarily de-install the SIGCHLD handler so that we can wait on the pwd_mkdb child ourselves). pw_copy.c: - Change all warn()s, warnx()s and err()s to syslog()s. - Add a bunch of returns() and make pw_copy() return and int ( 0 on success, -1 on failure) so that update.c can flag errors properly. - Return -1 after calling pw_error() to signal failures rather than relying on pw_error() to bail out. - Abort copying if we discover that we've been asked to change an entry for a user that exists in the NIS passwd maps but not in the master.passwd template file. This can happen if the passwd maps and the template file fall out of sync with each other (or if somebody tries to spoof us). The old behavior was to create add the entry to the password file, which yppasswdd should not do under any circumstances. Makefile: - update VERSION to 0.7 yppasswdd.8: - fix typo (forgot a carriage return somewhere) - remove bogus reference to pwunconv(8) which FreeBSD doesn't have. - bump version from 0.5 to 0.7 - Reflect changes in password file handling. yppwupdate: - Log map rebuilds to /var/yp/ypupdate.log. - Pass the name of the template password file to /var/yp/Makefile as $MASTER_PASSWD.
* Some small signal handling tweaks: be sure to keep wait3()ing until allwpaul1995-07-152-8/+6
| | | | | children are reaped and make sure to block SIGCHLD delivery during handler execution when installing SIGCHLD handler with sigaction().
* Add missing 'break' statement in failure case of ypxfr switch clause.wpaul1995-07-151-3/+6
|
* server.c: When 'securenets' (actually TCP_WRAPPERS) is enabled, don'twpaul1995-07-143-2/+10
| | | | | | | | | | | syslog connections unless they were rejected. This helps save wear and tear on the syslog facility in large networks with many clienst systems. yp_svc.c: Be a little smarter about using sigaction() -- set the SA_RESTART flag. svc_run: Be doubly paranoid about killing off child processes. Do a flag chack and a pid check before letting child 'threads' self-destruct.
* ypserv performance improvements:wpaul1995-07-124-18/+126
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - There are two cases where the server can potentially block for a long time while servicing a request: when handling a yp_all() request, which could take a while to complete if the map being transfered is large (e.g. 'ypcat passwd' where passwd.byname has 10,000 entries in it), and while doing DNS lookups when in SunOS compat mode (with the -dns flag), since some DNS lookups can take a long time to complete. While ypserv is blocked, other clients making requests to the server will also block. To fix this, we fork() ypall and DNS lookups into subprocesses and let the parent ypserv process go on servicing other incoming requests. We place a cap on the number of simultaneous processes that ypserv can fork (set at 20 for now) and go back to 'linear mode' if it hits the limit (which just means it won't fork() anymore until the number of simultaneous processes drops under 20 again). The cap does not apply to fork()s done as a result of ypxfr calls, since we want to do our best to insure that map transfers from master servers succeed. To make this work, we need our own special copy of svc_run() so that we can properly terminate child processes once the RPC dispatch functions have run. (I have no idea what SunOS does in this situation. The only other possibility I can think of is async socket I/O, but that seems like a headache and a half to implement.) - Do the politically correct thing and use sigaction() instead of signal() to install the SIGCHLD handler and to ignore SIGPIPEs. - Doing a yp_all() is sometimes slow due to the way read_database() is implemented. This is turn is due to a certain deficiency in the DB hash method: the R_CURSOR flag doesn't work, which means that when handed a key and asked to return the key/data pair for the _next_ key in the map, we have to reset the DB pointer to the start of the database, step through until we find the requested key, step one space ahead to the _next_ key, and then use that. (The original ypserv code used GDBM has a function called gdbm_nextkey() that does this for you.) This can get really slow for large maps. However, when doing a ypall, it seems that all database access are sequential, so we can forgo the first step (the 'search the database until we find the key') since the database should remain open and the cursor should be positioned at the right place until the yp_all() call finishes. We can't make this assumption for arbitrary yp_first()s and yp_next()s however (since we may have requests from several clients for different maps all arriving at different times) so those we have to handle the old way. (This would be much easier if R_CURSOR really worked. Maybe I should be using something other than the hash method.)
* Fix two typos in a comment.ats1995-07-081-3/+3
|
* Oh fer cryin' out loud... While playing with the ypserv code on a differentwpaul1995-07-041-1/+8
| | | | | | | | | platform, I discovered the following: if you use ypcat (or anything that does a yp_all() for that matter) to dump out a map and then hit ^C before it finishes, ypserv gets hit with a SIGPIPE and dies. (The ypall() service is implemented using TCP.) Fix: ignore SIGPIPEs.
* Small touchups in open_database():wpaul1995-07-021-5/+3
| | | | | | | - Use one sprintf() to put together the path to the map database instead of strcat()s and strcpy()s. - Make the 'error opening database' Perror() statement sane.
* Fixed awk scripts for 'netgroup,' 'ethers.*' and 'bootparams' targets so thatwpaul1995-06-181-5/+5
| | | | | | corresponding map databases are created correctly. This fixes the problem Ken Wilcox noted on the freebsd-bugs list.
* Remove trailing whitespace.rgrimes1995-05-3012-423/+423
|
* Added a NOMAN= macro as this subdir doesn't have a manpage yet.ats1995-05-282-0/+2
|
* Replaced the whole former Makefile with a more BSD conformant Makefile.ats1995-05-281-17/+4
|
* Reviewed by: with the allowance of Rod :-).ats1995-05-281-0/+1
| | | | | | | Add a NOMAN= . It doesn't have a manual page yet. Please don't cry :-). I ask Rod first. the whole isdn subdir is not used in the moment and is only dead source code in the tree.
* Small fix for yp_match implementation:wpaul1995-05-031-2/+2
| | | | | | | In the case where ypserv is started with the -dns flag, fall through to the DNS lookup code only if asked to match a map with the word 'host' in its name. This prevents failed matches on non-host maps from being incorrectly handed off to DNS.
* Added a new feature from Peter Eriksson's latest release of ypserv (0.13):wpaul1995-04-052-7/+40
| | | | | | | | | | | | | | | | | register ourselves as an NIS version 1 UDP server to pacify older SunOS 4 ypbinds that seem to insist on having one around. All this does is allow ypserv to respond to DOMAIN_NONACK requests that are periodically transmitted by ypbind: the server will not actually work as an NIS v1 server in any other way. Unlike the mainline code, which implements this as a compile-time option, this feature can be turned on with the newly-added -k flag at runtime. Bunped version number to 0.13. (What the hell.) Updated the man page to reflect this change, also made a couple of small edits to reflect the recent changes in the /etc/rc* setup.
* Spruce up Makefile.yp: add support for netgroups and bootparams maps,wpaul1995-04-021-41/+63
| | | | make use of yp_mkdb's -i, -o and -m flags.
* Log syslog messages at LOG_NOTICE priority.wpaul1995-04-011-2/+2
|
* Remove yppasswd_xdr.c and take out references to if from Makefile: usewpaul1995-04-011-3/+3
| | | | -lrpcsvc instead.
* One line fix to silently ignore entries that start with a '+' or '-'.wpaul1995-03-311-1/+2
| | | | This prevents yp_mkdb from adding magic NIS entries to NIS maps themselves.
* Added support for bootparams map.wpaul1995-03-051-10/+23
|
* More DESTDIR lossage. Hopefully this will solve the case of the missing NISwpaul1995-02-151-5/+5
| | | | scripts.
* Fix losing Makefile so that it properly honors DESTDIR when installingwpaul1995-02-151-9/+8
| | | | /var/yp/Makefile and /usr/libexec/mknetid. *grumble* *mutter* *mutter*
* This commit was generated by cvs2svn to compensate for changes in r6407,jkh1995-02-1555-0/+3446
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Import the ISDN userland utilities. Just about ready to start shakingjkh1995-02-1555-0/+3446
| | | | this baby out in earnest..
* Do proper job of reaping child 'ypxfr' processes (we could sometimeswpaul1995-02-072-7/+17
| | | | | | leave a zombie lying around until the next map transfer came alone). Also fixed some minor typos on the man page.
* Created manual page for ypserv and changed Makefile to install it.wpaul1995-02-043-4/+286
| | | | | Also tweaked server.c to support newer versions of tcpwrapper (log_tcp.h is now tcpd.h and FROM_UNKNOWN changed to STRING_UNKNOWN).
* Created yp_mkdb(8) manual page, modified Makefile to install it.wpaul1995-02-042-5/+131
|
* Changed some comments.wpaul1995-02-041-7/+4
|
* Fixed potential Makefile glitch that could arise if /var/yp doesn't exist yet.wpaul1995-02-031-1/+2
|
* Include <sys/types.h> explicitly to get declaration of u_long forbde1995-02-031-1/+2
| | | | <netinet/in.h> - don't depend on namespace pollution in <stdio.h>.
* Added ${.CURDIR}s to afterinstall target.wpaul1995-02-031-7/+3
|
* Put ${.CURDIR}s in front of Makefile.yp and mknetid in the required places.wpaul1995-02-031-8/+5
| | | | Also took out uneeded BINDIR & BINMODE stuff.
* Removed reference in comments to -o option of yppasswdd: -o optionwpaul1995-02-031-2/+2
| | | | no longer exists.
* Cleaned up and updated the yppasswdd man page to reflect FreeBSD-specificwpaul1995-02-021-70/+173
| | | | changes and new options. (more new man pages and an NIS tutorial to follow)
* Need to set a umask to avoid security problems (/var/yp/passwdwpaul1995-02-011-1/+2
| | | | world-writable).
* Cleaned up usage() -- removed bogus references to opassfile, which isn'twpaul1995-02-012-8/+3
| | | | | | used anymore (/var/yp/Makefile creates a new /var/yp/passwd file from /var/yp/master.passwd using awk, so yppasswdd doesn't have to make it anymore).
* /var/yp/Makefile doesn't create passwd file from master.passwd filewpaul1995-02-011-2/+2
| | | | | | | correctly (specified wrong fields to awk). Note that the files in question are noe the local /etc/master.passwd and /etc/passwd files: this Makefile expects there to be a seperate master.passwd file under /var/yp for NIS database creation.
* Added the yppwupdate script. This is a small shell script that yppasswddwpaul1995-02-012-0/+13
| | | | | | | executes after it finishes updating the raw master.passwd file. The script is just there to invoke /var/yp/Makefile to build new maps and yppush them. We could have yppasswdd run /var/yp/Makefile directly, but this allws a bit more flexibility: the user may decide to run some other commands too.
* Added Makefile.yp and mknetid, which are needed to rebuild NIS maps.wpaul1995-02-013-1/+358
| | | | | mknetid is a script. Both are installed by an afterinstall which as been added to the main Makefile.
* New Makefiles for YP server stuff.wpaul1995-01-312-0/+9
|
* Obtained from: The NYS projectwpaul1995-01-318-0/+897
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a ported/modified version of yppasswd from the NYS yppasswd-0.5 package. This package has code in it from both Olaf Kirch and Theo de Raadt. There are GPL references and BSD-style copyright all over the place... hopefully I won't get flamed into oblivion for commiting this. This program has been modified from the original in the following ways: - Changed the ALLOW_CHFN and ALLOW_CHSH compile-time options into run-time options. - Demolished the password update functions and replaced them with routines to handle FreeBSD-style passwordd databases. It is expected that a seperate master.passwd file will be maintained for use with the NIS maps. yppasswd will have to be told where it is: % yppasswdd -m /var/yp/master.passwd A /var/yp/passwd file will be generated from /var/yp/master.passwd by /var/yp/Makefile. When yppasswdd has finished modifying the master.passwd file, it will invoke /usr/libexec/yppwupdate, which is a script that will run /var/yp/Makefile to generate new maps and push them. Note that there are copies if pw_util.c and pw_copy.c here. This is deliberate: they are *not* identical to the originals. Very similar, yes, but not identical. *sigh*
* Obtained from: The NYS projectwpaul1995-01-317-0/+2938
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a hacked-up port of the ypserv-0.11 server from the NYS project written by Peter Eriksson. The original package included some map creating and dumping tools and was based on GDBM. This version has been modified in the following ways: - GDBM replaced with DB and many weird hacks made to the read_database() function because of this. - implimented the ypxfr service (using ypxfr from the yps-0.21 package, aso from the NYS project) - added code to check the TCP port from which NIS requests originate: the server will refuse to serve the master.passwd.{byname|byuid} maps if the request doesn't come from a privileged port. Normally, only the superuser can issue such a request. Requests for the passwd.{bynam|byuid} maps aren't affected. There will be a small change made to getpwent.c in libc to complement this. - added code to do DNS lookups via actual resolver queries instead of relying on gethostbyname() and friends. The author noted in the original documentation that a loop condition could arise where the server would query itself for hostsname lookups. Using direct DNS lookups prevents this from happening. - added code to properly fork() the server into the background unless invoked with the -debug flag. - Added combined syslog/perror function. - fixed a few bugs (which were probably introduced by all the other changes) - Created a bmake Makefile. Note that this package can be linked against the tcp_wrapper package to provide address-based authentication, but this isn't done by default since the tcp_wrapper package isn't part of FreeBSD.
* Obtained from: The NYS projectwpaul1995-01-312-0/+252
This program is used for both generating and dumping NIS maps. It's very similar to the 'makedbm' command in SunOS. This program was ported from the yps-0.21 package. It's close to the original except for the GDBM to DB conversions. This was simple compared to the other YP components.
OpenPOWER on IntegriCloud