| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Previously, there were two copies of telnet; a non-crypto version
that lived in the usual places, and a crypto version that lived in
crypto/telnet/. The latter was built in a broken manner somewhat akin
to other "contribified" sources. This meant that there were 4 telnets
competing with each other at build time - KerberosIV, Kerberos5,
plain-old-secure and base. KerberosIV is no longer in the running, but
the other three took it in turns to jump all over each other during a
"make buildworld".
As the crypto issue has been clarified, and crypto _calls_ are not
a problem, crypto/telnet has been repo-copied to contrib/telnet,
and with this commit, all telnets are now "contribified". The contrib
path was chosen to not destroy history in the repository, and differs
from other contrib/ entries in that it may be worked on as "normal"
BSD code. There is no dangerous crypto in these sources, only a
very weak system less strong than enigma(1).
Kerberos5 telnet and Secure telnet are now selected by using the usual
macros in /etc/make.conf, and the build process is unsurprising and
less treacherous.
|
|
|
|
| |
Reported by: jhay
|
|
|
|
| |
#if cleanup.
|
|
|
|
| |
so it must be linked before libcrypto to work right.
|
|
|
|
|
|
|
|
|
| |
directly (except in the definition of MINUSLPAM in bsd.libnames.mk)
since it doesn't give all the lbraries necessary for static linkage.
Fixed new and old bugs in DPADD. ${LIBPAM} was missing, and the
library order was different from that in LDADD so `make checkdpadd'
reported a non-bug.
|
|
|
|
|
| |
doesn't solve the problem of root being allowed to log in, but that sort
of thing is something PAM should be doing anyway.
|
|
|
|
| |
Approved by: markm
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- TELNETOBJDIR is gone. `buildworld' already installs libtelnet.a
in ${WORLDTMP}/usr/lib, and we have LIBRARY_PATH pointing there.
- SSHDIR (formerly SSHSRC) is now shared between all SSH modules.
New LIBSSH is introduced for libssh.a (an internal static lib).
Previously, build without prior `obj' was broken; SSH modules
always looked for libssh.a in ${.OBJDIR}. Also, the dependancies
on the libssh.a were missing.
- libtelnet/ did not install the crypto version of telnet.h into
/usr/include/arpa.
- Removed BINOWN, BINMODE, BINDIR and SRCS with default values.
Reviewed by: markm
- MAN[1-9] -> MAN.
|
|
|
|
|
|
|
|
|
|
|
| |
o Don't b uild libdes.
o Crypto is now housed in libcrypto (with a compatability symlink to
libdes)
o RSA may depend on RSAREF at your locale.
o OpenSSH is now a part of the base system.
|
|
|
|
|
|
|
| |
ftp, telnet, ftpd, faithd
also telnet related sync with crypto, secure, kerberosIV
Obtained from: KAME project
|
|
|
|
| |
bug any more.
|
| |
|
|
|
|
| |
Submitted by: Nick Sayer
|
| |
|
|
|
|
| |
an alternate /usr/bin/login type program to be run.
|
| |
|
|
|
|
| |
The look much more like BSD Makefiles now.
|
|
|
|
| |
SRCS, DPADD cleanup
|
| |
|
|
|
|
| |
Zap only needed LD_* variables
|
|
|
|
| |
Submitted by: Sam Hartman <hartmans@mit.edu>
|
|
|
|
| |
of missing functionality in our libkrb which is no longer a problem.
|
|
|
|
| |
secure reference the libraries that were just build instead of in /usr/lib.
|
| |
|
|
|
|
|
|
| |
the move of startslave().
telnetd.c: fix bug introduced with the move of startslave()...the number
of arguments was wrong and "level" and "user_name" had to be made globals.
|
| |
|
|
|
|
| |
Submitted by: John Capo & Peter Wemm
|
|
|
|
| |
Submitted by: Peter Wemm & John Capo
|
| |
|
|
|
|
| |
missng defines for krb4encpwd and rsaencpwd and missing rsa library too.
|
|
|
|
|
|
| |
Reviewed by:
Submitted by:
Obtained from:
|
|
|
|
|
|
| |
autodetect kerberos/eBones and work even with eBones,
but with reduced functionality (don't pick up des/krb stuff
in this case)
|
|
|
|
|
|
| |
Reviewed by:
Submitted by:
Obtained from:
|
|
|
|
|
|
|
| |
with MAKE_KERBEROS to allow other things to live
Reviewed by:
Submitted by:
Obtained from:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
not specified (default case).
Use _PATH_* for utmp/wtmp.
Support for >32 PTYs.
>Submitted by: Heikki Suonsivu <hsu@cs.hut.fi>
Plug already known security hole. (Brought over from 1.1.5):
Fixed security problem with telnetd, which allowed
telnet -l -hcert.org localhost
to change the user's host in utmp.
Thanks to Matthew Green <mrgreen@@mame.mu.oz.au> for showing me this one.
>Reviewed by: karl, guido
>Submitted by: mrgreen@mame.mu.oz.au
Obtained from: FreeBSD insecure telnetd
|
|
|
|
|
|
|
|
|
|
|
| |
causes some clients that do not support linemode to mis-interpret the return
key (i.e. double returns).
The fix is to only do the state check for binary options if linemode will
be used.
Closes PR#505.
Submitted by: Charles Henrich
Obtained from: FreeBSD insecure telnetd
|
|
|
|
| |
Obtained from: Dave Borman <dab@cray.com>
|
| |
|
| |
|
|
This needs tidying up and having makefiles sorted out later.
Reviewed by: Geoff Rehmet
|