summaryrefslogtreecommitdiffstats
path: root/usr.sbin/pw
Commit message (Collapse)AuthorAgeFilesLines
* Fix an apparent mis-merge that happened in r274082. Before that, on theian2014-11-091-1/+1
| | | | | | | 10-stable branch, this makefile had WARNS=2, and on head the value is still 2, but in the MFC done in r274082 it got changed to 3, causing build failures when building with gcc. This direct commit to 10 goes back to WARNS=2.
* MFC: 272445,272578,273772,273779,273782,273786,273787,273791bapt2014-11-049-5/+199
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a test for bug 191427 where pw(8) will go into an infinite loop Add some tests for modifying groups When a group is renamed then the group has been invalidated for sure. In that case get the group information using the new name. Fix a regression in pw usermod -G list The user was perperly adding the to different groups from "list" but was not removed from the other groups it could have belong to. Do not delete the group wheel when bad argument is passed to pw groupdel -g Check that the -g argument is actually a number, if not report an error. This argument is converted without checking with atoi(3) later so without this check it converts any alpha entries into 0 meaning it deletes the group wheel Ensure pw userdel -u <invalid> do not try to remove root Check the uid passed is actually a number as early as possible Fix renaming a group via the gr_copy function Add a regression test to pw(8) because the bug was discovered via using: pw groupmod PR: 193704 [1], 185666 [2], 90114 [3], 187189 [4] Submitted by: Marc de la Gueronniere [4] Reported by: az [1], sub.mesa@gmail.com [2], bkoenig@cs.tu-berlin.de [3], mcdouga9@egr.msu.edu [4]
* MFH (r272830): change the hardcoded default back to DESdes2014-10-131-2/+2
| | | | MFH (r272833): remove last vestige of MD5 password hashes
* MFC revisions 262864-262865, 263114, 267970:dteske2014-09-262-22/+42
| | | | | | | | | | | | r262864: Stop pw(8) from segfaulting when given certain input (julian) r262865: Part 2 of bug 187310 (julian) r263114: Fix pw(8) edge-case deletion of group "username" on userdel r267970: Fix infinite-loop during deletion of users from groups PR: 187310, 169471, 191427 Submitted by: Voradesh Yenbut, Alexander Pyhalov, Kim Shrier Obtained from: bug Approved by: re (gjb)
* MFH: r264781, r267669, r267670bapt2014-07-063-38/+15
| | | | | | | | | | | | Simplify reading pw.conf(5) by using getline(3) Removed compatibility with pre FreeBSD 2.2 pw_mkdb command [1] Fix some broken indentattion [1] Fix changing the username [2] PR: 189172 [1], 189173 [2] Submitted by: fullermd@over-yonder.net [1][2]
* Fall back to sha512 if passwd_format is not set.des2013-07-041-1/+1
| | | | MFC after: 3 days
* There is no reason to disallow setting the password or account expirydes2013-07-031-4/+0
| | | | | | date to the current date. MFC after: 3 days
* Fix -Wunsequenced warningkientzle2013-06-291-1/+1
| | | | Submitted by: dt71@gmx.com
* mdoc sweepjoel2013-05-131-1/+1
|
* Prevent a null pointer dereference in pw userdel when deletingdeischen2013-02-011-1/+1
| | | | a user whose group != username.
* Remove unused variableseadler2013-01-161-2/+0
| | | | | Approved by: cperciva MFC After: 3 days
* pw: free group returned by gr_addmjg2013-01-061-0/+1
|
* Simplify vnextgrent and vnextpwent reusing pw_scan and gr_scan from libutil.bapt2012-12-271-169/+67
|
* Fix a regression in "pw group show" introduced r242349:bapt2012-12-271-1/+1
| | | | | | | print a newline after printing each group line. PR: bin/174731 Submitted by: Jan Beich <jbeich@tormail.org>
* Simplify the code by using the new gr_add functionbapt2012-12-271-15/+9
|
* Simplify copying of group members by using memcpybapt2012-12-261-2/+1
| | | | Submitted by: Christoph Mallon <christoph.mallon@gmx.de>
* Fix off-by-one error in memory allocation: j entries, one new and a nullbapt2012-12-261-1/+1
| | | | | | terminator is j + 2. Submitted by: Christoph Mallon <christoph.mallon@gmx.de>
* In case of the deletion of a user those whole database has to be regenerated,bapt2012-12-261-1/+5
| | | | | otherwise the user planned to be deleted remain in the pwd.db while removed from the plain text password file.
* Fix creating a user and adding it to a groupbapt2012-12-261-7/+8
| | | | Reported by: "Sam Fourman Jr." <sfourman@gmail.com>, dim
* Simplify string duplication: use strdup instead of malloc + strcpyeadler2012-12-051-6/+5
| | | | | | Submitted by: db Approved by: cperciva MFC after: 2 weeks
* Avoid overflowing the file buffereadler2012-12-051-1/+1
| | | | | | Submitted by: db Approved by: cperciva MFC after: 2 weeks
* Use strdup instead of malloc + strcpyeadler2012-12-051-6/+4
| | | | | | Submitted by: db Approved by: cperciva MFC after: 2 weeks
* Avoid overflow of file buffereadler2012-12-051-1/+1
| | | | | | Submitted by: db Approved by: cperciva MFC after: 2 weeks
* Remove useless check for NULL prior to free.eadler2012-12-052-4/+2
| | | | | Approved by: cperciva MFC after: 2 weeks
* In NIS mode first chmod(2) the temporary file and is succeed then rename(2)bapt2012-11-201-2/+2
|
* Correctly set the password file mode after renaming in NIS modebapt2012-11-201-0/+2
|
* Teach pw(8) about how to use pw/gr API to reduce code duplicationbapt2012-10-3014-620/+175
| | | | MFC after: 2 months
* Do not treat empty name as an uid 0bapt2012-10-011-1/+2
| | | | Reported by: Robert Bonomi <bonomi@mail.r-bonomi.com>
* Remove useless atoi(3), previous strspn(3) makes sure that a_name->val is abapt2012-10-011-2/+1
| | | | | | | | | number. This also allow pw user show to work as expected. PR: bin/172112 Submitted by: "Ilya A. Arkhipov" <rum1cro@yandex.ru> MFC after: 1 month
* Make sure that each va_start has one and only one matching va_end,kevlo2012-09-281-0/+1
| | | | especially in error cases.
* Handle NULL return from crypt(3). Mostly from DragonFlykevlo2012-02-221-1/+5
|
* readlink len-1kevlo2012-02-141-1/+1
|
* Spelling fixes for usr.sbin/uqs2011-12-301-4/+4
|
* - document the -l option to usermodeadler2011-12-221-1/+12
| | | | | | | PR: docs/161588 Submitted by: "Luchesar V. ILIEV" <luchesar.iliev@gmail.com> Approved by: gjb MFC after: 1 week
* In usr.sbin/pw/pw_user.c, use the correct printf length modifier for adim2011-12-171-1/+1
| | | | | | ptrdiff_t. MFC after: 1 week
* Backout r223115 which potentially caused a POLA violation, by restoringdelphij2011-07-311-1/+1
| | | | | | | | historic behavior (create the default base directory in pw.conf) before I came up with a better fix for this. Requested by: nwhitehorn Approved by: re (kib)
* Don't attempt to create the base directory when -d is specified.delphij2011-06-151-1/+1
| | | | MFC after: 1 month
* Stop hard-coding default directory mode as 0777.jkim2011-03-084-9/+9
|
* Do not let pw.conf(5) or -M option affect creation of basehome, e.g., /home.jkim2011-02-041-5/+5
| | | | | | | | | | When the basehome does not exist, it creates all intermediate directories as required, which is logically equivalent to mkdir(1) with -m and -p options. However, it modifies all intermediate directories, not just the final home directory unlike mkdir. This problem was introduced in two revisions, i.e., r1.59 (SVN r167919) and r1.60 (SVN r168044). MFC after: 1 month
* mdoc: drop redundant .Pp and .LP callsuqs2010-10-081-4/+0
| | | | They have no effect when coming in pairs, or before .Bl/.Bd
* Revert the unrelated patch crept in the previous commit.jkim2010-10-051-5/+5
|
* Prefer pmap_unmapbios() over pmap_unmapdev(). The binary does not changejkim2010-10-051-5/+5
| | | | after this because pmap_unmapbios() is a macro for pmap_unmapdev() on amd64.
* The last big commit: let usr.sbin/ use WARNS=6 by default.ed2010-01-021-0/+2
|
* Make pw(8) build without <utmp.h>.ed2009-12-061-5/+0
| | | | | | The size of the username record in utmp files should not influence the maximum username length. Right now ut_user/ut_name is big enough, so in this case it's dead code anyway.
* Use arc4random_uniform() to avoid "modulo bias"ache2008-08-161-55/+2
| | | | | | Remove pw_getrand() unneded now: arc4random_uniform() is stronger then pw_getrand()'s MD5 tricks (inactive) and its active version, mixing arc4random() bytes in one, not make things better at all.
* Before updating the password database, the pw(8) utility first performs ajhb2008-07-171-1/+2
| | | | | | | | sanity check by invoking "pwd_mkdb -C". However, if this failed it silently returned success. Fix this so it fails the update operation instead. MFC after: 1 week
* - Increase the size of the salt in pw(8) from 8 to 32 (same as in pam_unix(8)).antoine2008-05-271-5/+7
| | | | | | | | | | | This makes blowfish password hashes look normal when set using pw(8)/adduser(8). [1] - Make it possible to have a '/' in the salt. PR: 121146 [1] Submitted by: Jaakko Heinonen [1] Approved by: rwatson (mentor) MFC after: 1 month
* Add the groupmod '-d' option to pw to allow the deletion of existing usersscf2008-02-233-16/+92
| | | | | | | | | | from a group without the need to perform the same operation by replacing the existing list via the '-M' option. The '-M' option requires someone to fetch the existing members with pw, deleting the undesired members from the list and sending the altered list back to pw. Approved by: wes (mentor) MFC after: 5 days
* style(9) (verified no object changes)scf2008-02-232-3/+2
| | | | | Approved by: wes (mentor) MFC after: 5 days
* Clarify in what formats the grouplist for the '-G' switch may be accepted.mtm2008-01-251-1/+1
| | | | Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru>
OpenPOWER on IntegriCloud