summaryrefslogtreecommitdiffstats
path: root/usr.sbin/rpc.yppasswdd
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove unused include.asmodai2000-04-291-1/+0
|
* remove extern int errno; include errno.himp2000-04-141-1/+0
|
* Remove more single-space hard sentence breaks.sheldonh2000-03-021-5/+10
|
* Remove single-space hard sentence breaks. These degrade the qualitysheldonh2000-03-011-24/+48
| | | | | of the typeset output, tend to make diffs harder to read and provide bad examples for new-comers to mdoc.
* Revert the libcrypt/libmd stuff back to how it was. This should not havepeter1999-12-181-2/+2
| | | | | | | | happened as it was working around problems elsewhere (ie: binutils/ld not doing the right thing according to the ELF design). libcrypt has been adjusted to not need the runtime -lmd. It's still not quite right (ld is supposed to work damnit) but at least it doesn't impact all the users of libcrypt in Marcel's cross-build model.
* Add libmd (or move it after libcrypt). We don't want the linker to bemarcel1999-12-161-2/+2
| | | | | smart because it will definitely get it wrong. This popped up during cross-linking.
* $Id$ -> $FreeBSD$peter1999-08-289-9/+9
|
* Host names are case-insensitive.brian1999-03-161-2/+2
|
* Protect errno in signal handlers, like in portmap.wpaul1998-06-041-1/+6
|
* Removed bogus dependencies of generated .c files on generated headers.bde1998-05-101-5/+5
|
* Fixed `make -j9' by putting generated headers in ${SRCS}. Removed bogusbde1998-04-261-7/+6
| | | | | dependencies of generated .c files on generated headers (these made `make -JN' work provided `depend' was made first). Sorted sources lists.
* .Sh AUTHOR -> .Sh AUTHORS. Use .An/.Aq.charnier1998-03-231-2/+2
|
* Remove multiply defined Id string. Hide sccsid string.charnier1997-10-136-46/+54
|
* Modify rpc.yppasswdd to use the new AF_LOCAL transport in the RPC librarywpaul1997-07-297-449/+104
| | | | | instead of its own kludged up version. This makes the special 'superuser-only' update procedure work just like a real RPC service.
* compare return value from getopt against -1 rather than EOF, per the finalimp1997-03-311-3/+3
| | | | posix standard on the topic.
* Revert $FreeBSD$ to $Id$peter1997-02-229-13/+13
|
* Sort cross references.wosch1997-01-201-3/+3
|
* Make the long-awaited change from $Id$ to $FreeBSD$jkh1997-01-149-13/+13
| | | | | | | | This will make a number of things easier in the future, as well as (finally!) avoiding the Id-smashing problem which has plagued developers for so long. Boy, I'm glad we're not using sup anymore. This update would have been insane otherwise.
* oops, forgot to commit this. the sockaddr_un init code was missingpeter1996-11-151-4/+6
| | | | | | initialisers for sun_len and not accounting for it in the sizeof calculation. Ie: it was potentially sending an unterminated string into the kernel.
* Fix harmless bugs found while hunting for chpass nis failurepeter1996-11-152-6/+6
|
* Uninitialised length variable passed to accept(), causing random accept()peter1996-11-151-2/+3
| | | | | | failures due to EFAULT. This is screaming out to go into 2.2
* add PATH variable, use itwosch1996-11-041-5/+6
|
* Add extra sanity checking to the in-place update routine. Sometimes youwpaul1996-10-231-2/+33
| | | | | | | | | | | | | find two users with the same UID (i.e. root and toor), but yp_mkdb(8) forbits duplicate keys, so only one of them will end up in the *.byuid maps (probably toor, since it comes after root in the template file). If I asked rpc.yppasswdd(8) to change toor's password, it would update the *.byname maps correctly, but incorrectly modify root's entry in the *.byuid maps since the only matching record with UID=0 in those maps belongs to root. To fix this, we check that both the name and UID are correct before trying to write new entries to the maps.
* Make error messages more informative.wpaul1996-10-231-4/+9
|
* Two small changes that were in my development sources at homewpaul1996-10-221-25/+7
| | | | | | | but never made it here for some reason: - 'u' option was missing from getopt string - Use daemon() to become daemonic.
* Since rpc.yppasswdd(8) also supports adding entries to thewpaul1996-10-221-8/+25
| | | | | | | /var/yp/master.passwd template file and it uses the same kind of code as chpass(1), it may also be vulnerable to the bug from PR #1519. May as well deal with it since I'm in the area. (yppasswdd in -stable doesn't do additions, therefore it shouldn't be have this problem.)
* Fixed DPADD.bde1996-09-051-2/+3
|
* When updating a password via the standard RPC handler, reset the passwordwpaul1996-09-051-2/+3
| | | | change time (pw_change) to zero.
* Fix a couple of bogons. The first two were brought to my attentionwpaul1996-08-041-9/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | by Peter Wemm: - In yppasswdproc_update_1_svc(), I wasn't paying attention and put a couple of lines of code _after_ a return() instead of before. (*blush*) - The removal of certain temp files didn't always work (this showed up mostly if you were using /etc/master.passwd as your NIS passwd template instead of /var/yp/master.passwd). This is because the whole temp file creation mechanism I was using was tragically broken (you can't rename across filesystems). This problem I found myself: - If you have a very large password database (30,000 or more entries), there can be a delay of several seconds while pw_copy() copies the ASCII template file and subsitutes in the modified/new entry. During this time, the clnt_udp() code in the RPC library may get impatient and retry its request. This will get queued at the server and be treated as a second request. By then the password change will have been completed and the second request will fail (the old password is no longer valid). To attempt to fix this, we save the IP address and port of each request and ignore any subsequent requests from the same IP and same port that arrive within five minutes of each other.
* Implement incremental passwd database updates. This is done by ading a '-u'guido1996-07-013-8/+14
| | | | | | | | | | | | | | option to pwd_mkdb and adding this option to utilities invoking it. Further, the filling of both the secure and insecure databases has been merged into one loop giving also a performance improvemnet. Note that I did *not* change the adduser command. I don't read perl (it is a write only language anyway). The change will drastically improve performance for passwd and friends with large passwd files. Vipw's performance won't change. In order to do that some kind of diff should be made between the old and new master.passwd and depending the amount of changes, an incremental or complete update of the databases should be agreed upon.
* Whoops: had a couple of hardcoded instances of '/var/yp/' that shouldn'twpaul1996-06-233-9/+15
| | | | have been there. Fixed to use yp_dir, which can be set on the command line.
* Somehow, I truncated yp_dbwrite.c in the SRCS line to yp_dbwrite. Curiously,wpaul1996-06-061-2/+2
| | | | this did not stop 'make' from working, but it did break 'make depend.'
* Added support for in-place updates:wpaul1996-06-056-42/+195
| | | | | | | | | | | | | | | | | If rpc.yppasswdd is invoked with the -i flag, password changes will be made to the master.passwd template file and the hash map files in-place, which means it won't have to run a complete map update. Instead, it calls /var/yp/Makefile with the 'pushpw' target, which just pushes the maps to the slaves and runs yp_mkdb -c to tell the local ypserv to flush its database cache. The server will check the passwd.byname and passwd.byuid maps to see if they were built in 'insecure' or 'secure' mode (i.e. with real encrypted passwords in them or without) and update them accordingly. This combined with rpc.ypxfrd greatly reduces the amount of time it takes to complete an NIS password change, especially with very large passwd databases.
* Fix 'multidomain' code. It returns a pointer to memory that it doesn'twpaul1996-05-081-8/+6
| | | | | | | | | | | | | | | | | really own (and which can end up being mangled later). The manifestation of this bug is that the first attempt by a user to change their NIS password succeeds, but all subsequent attempts fail. rpc.yppasswdd also logs a message about not being able to find a file called '/var/yp/<some garbage string>/master.passwd.' (Note that for some bizarre reason, this doesn't happen with the malloc() from FreeBSD 2.1.0. I suppose this means we can chalk up another victory for phkmalloc. :) This bug only occurs if you use the -m flag with rpc.yppasswdd. Fix this by copying the domain name to a static buffer and returning a pointer to that instead. Reported by: Jian-Da Li (jdli@csie.nctu.edu.tw)
* Correct some man page xrefs, and some other minor changes to bring somempp1996-04-081-2/+2
| | | | | | man pages up to mdoc guidelines and fix some minor formatting glitches. Also fixed a number of man pages to not abuse the .Xr macro to display functions and path names and a lot of other junk.
* Make yppwupdate script redirect stderr to stdout; if we don't do this,wpaul1996-03-051-3/+3
| | | | | the error messages (if any) from yppush will end up on the system console instead of the /var/yp/ypupdate.log file.
* Add securenets support (uses same access control mechanism as ypserv,wpaul1996-02-245-12/+75
| | | | | | | | | | | | | | | also controlled by /var/yp/securenets). Add -u flag to turn off the privileged port check done by yp_access(); some commercial systems (IRIX, Solaris 2.x, HP-UX, and probably others) don't use a reserved port for submitting yppasswd updates. If we always enforce the check, these client systems will be unable to submit updates to us. Document securenets support and -u flag in man page. Like ypserv, you can compile rpc.yppasswdd to use the tcpwrapper package instead of securenets if you want to.
* This commit was generated by cvs2svn to compensate for changes in r14062,wpaul1996-02-1211-0/+2155
which included commits to RCS files with non-trunk default branches.
OpenPOWER on IntegriCloud