2004-03-14 Love Hörnquist Åstrand * ftpd/ftpd.c: 1.169: (main): setpag if there is krb4 OR krb5 support 2003-08-20 Love Hörnquist Åstrand * ftpd/ftpd.8: 1.20->1.21: document --gss-bindings * ftpd/ftpd.c: 1.166->1.168: wrap gssapi stuff with KRB5, (args): add gss-bindings * ftp/main.c: 1.33->1.35: wrap gssapi stuff with KRB5, (args): add gss-bindings (main): set ftp_do_gss_bindings to 1 to make client use them * ftp/security.h: 1.9->1.10: add ftp_do_gss_bindings * ftp/gssapi.c: 1.24->1.25: Optionally support gss bindings, client does it by default, server not. This is to make it work for clients behind NAT. * ftp/ftp.1: 1.12->1.15: gssapi bindings + madoc fixes 2003-08-15 Love Hörnquist Åstrand * ftp/gssapi.c: 1.23->1.24: (gss_adat): fix name allocation bug 2003-04-16 Love Hörnquist Åstrand * ftpd/ftpd.c: make sure argument to is* functions are unsigned 2003-04-06 Love Hörnquist Åstrand * ftpd/ftpd.8: s/kerberos/Kerberos/ 2003-03-23 Assar Westerlund * ftpd/pathnames.h (_PATH_FTPUSERS): conditionalize 2003-03-18 Love Hörnquist Åstrand * ftpd/ftpd.c (krb5_verify): always do krb5_afslog, remove setpag (its done in main) * ftpd/gss_userok.c: drop setpag * ftpd/ftpd.c (main): set afs PAG * ftpd/gss_userok.c: always try krb5_afslog, and while here do a setpag too * ftpd/ftpd_locl.h: always include kafs 2003-03-16 Love Hörnquist Åstrand * ftp/gssapi.c (gss_adat): now that gss_export_name exports a principal, bandaid with gss_display_name, and check that oid is GSS_KRB5_NT_PRINCIPAL_NAME, also free memory 2003-02-25 Love Hörnquist Åstrand * ftp/gssapi.c (gss_auth): print out the name we authenticated too 2003-02-25 Love Hörnquist Åstrand * ftpd/ls.c: use readlink with bufsize - 1, From NetBSD * ftp/ftp.1: s/utilizes/uses/ from NetBSD * ftpd/ftpd.8: s/utilize/use/ from NetBSD 2003-02-10 Assar Westerlund * ftpd/ftpd.c (accept_with_timeout): use socklen_t 2002-10-29 Johan Danielsson * ftp/main.c: reinstate -n flag (from Torbjörn Granlund) 2002-10-16 Johan Danielsson * ftp/ftp.c: fix parsing of epsv ports (from Love) 2002-09-05 Johan Danielsson * ftp/security.c (sec_vfprintf): free encoded data * ftp/gssapi.c (gss_decode): release buffer * ftp/ftp.c (active_mode): no need to allocate buffer for EPRT 2002-08-28 Johan Danielsson * ftp/ftp.c (command): clean up va_{start,end}ing (from NetBSD) 2002-08-23 Assar Westerlund * ftp/main.c: start using getarg 2002-08-22 Johan Danielsson * ftpd/ls.c: uxp/v lacks _S_IFMT, but has S_IFMT 2002-08-20 Johan Danielsson * ftp/gssapi.c: remove unused variable 2002-04-24 Johan Danielsson * ftp/ftp.c: fix buffer overrun when receiving long replies 2002-04-02 Johan Danielsson * ftpd/popen.c: make sure gl_pathc != 0 before referencing gl_pathv 2002-03-15 Johan Danielsson * ftp/gssapi.c (gss_adat): if accept_sec_context fails, syslog a reason and give a temporary error message 2002-02-28 Johan Danielsson * ftpd/ftpd.c: if builtin_ls failes, return error * ftpd/ls.c (builtin_ls): return status; also don't print fatal error messages to the output stream, instead use syslog 2001-09-14 Johan Danielsson * ftpd/ls.c: make sure we don't include . in recursive listings 2001-09-13 Johan Danielsson * ftpd/ftpd.c (dataconn): don't wait forever on accept 2001-09-04 Assar Westerlund * ftp/gssapi.c (gss_adat): leak less memory and check return value from asprintf 2001-08-28 Jacques Vidrine * ftpd/ftpd.c, ftpd/ftpd.8: On systems with IP_PORTRANGE, have ftpd use `high-numbered' ports by default. Add a -U option to get the old behavior. 2001-08-28 Johan Danielsson * ftp/gssapi.c: try using "host" if there's no "ftp" principal 2001-08-26 Johan Danielsson * ftpd/ls.c: implement -R 2001-08-08 Assar Westerlund * ftpd/ls.c: make -a and -A do the same as in ls(1) 2001-08-05 Assar Westerlund * ftpd/ftpcmd.y: add some (unsigned char) casts to is* * ftp/cmds.c: add some (unsigned char) casts to is* * ftpd/gss_userok.c (gss_userok): make argument to printf type correct 2001-08-05 Assar Westerlund * ftp/cmds.c (setpeer): __NetBSD__ is also a unix-like OS 2001-06-19 Assar Westerlund * ftpd/popen.c, ftpd/ftpd.c: try to handle GLOB_MAXPATH (FreeBSD) 2001-04-19 Johan Danielsson * ftpd/ftpd.c (do_store): call closefunc before claiming that everything went ok, if the close fails the file might not have been stored properly 2001-03-26 Assar Westerlund * ftpd/ftpd.c, ftpd/popen.c: always use GLOB_LIMIT * ftpd/popen.c (ftpd_popen): use GLOB_LIMIT if defined * ftpd/ftpd.c (send_file_list): use GLOB_LIMIT if defined 2001-02-15 Assar Westerlund * ftp/cmds.c (setpeer): handle both service names and port numbers for the second optional argument. also make parsing more robust 2001-02-07 Assar Westerlund * ftp/security.c (sec_end): only clean app_data if there is any (*): do realloc consistently 2001-02-05 Assar Westerlund * ftpd/popen.c (ftpd_popen): avoid overwriting the bounds of argv and gargv 2001-01-30 Assar Westerlund * ftpd/gss_userok.c: use gss_krb5_copy_ccache 2001-01-29 Assar Westerlund * ftpd/Makefile.am: move up LIB_otp so we do not end up picking one from /usr/athena 2001-01-25 Johan Danielsson * ftpd/ls.c: fix bug in previous; make it easier to build test version 2001-01-19 Johan Danielsson * ftpd/ls.c (lstat_file): handle case where file lives in `/' 2001-01-18 Johan Danielsson * ftpd/ftpd.c (pasv): close already open passive port 2000-12-14 Johan Danielsson * ftpd/ls.c: reverse time and size sort order (pointed out by tege) 2000-12-11 Johan Danielsson * ftpd/ftpd.c: make it possible to set list of good filename characters from command line 2000-12-10 Johan Danielsson * ftpd/ftpd.c: some spec-violating mirror software assumes that you can do things like `LIST -CF'; don't pass `--' to ls so this actually works * ftpd/ls.c: implement -1CFx flags 2000-12-08 Assar Westerlund * ftpd/gss_userok.c (gss_userok): handle getpwnam failing * ftp/gssapi.c (gss_auth): be more explicit in error message 2000-11-29 Johan Danielsson * ftpd/ftpd.8: close list 2000-11-15 Assar Westerlund * ftp/main.c: add `-l' for no line-editing * ftp/globals.c (readline): add * ftp/ftp_var.h (lineedit): add variable indicated if we should use readline 2000-11-09 Johan Danielsson * ftp/security.c (sec_read): fix bug in previous (from Jacques A. Vidrine ) 2000-11-05 Johan Danielsson * ftpd/ftpcmd.y: only allow pasv if logged in 2000-10-23 Johan Danielsson * ftpd/ftpd.c: change bad filename message slightly * common/buffer.c: HAVE_ST_BLKSIZE -> HAVE_STRUCT_STAT_ST_BLKSIZE 2000-10-08 Assar Westerlund * ftp/ftp.c (*): check that fds are not too large to select on * ftp/main.c (cmdscanner): print a newline upon EOF 2000-09-19 Assar Westerlund * ftp/security.h: add some attributes to prototypes of sec* * ftp/extern.h (command): add attributes 2000-08-31 Johan Danielsson * ftpd/ftpd.c: change redundant password message to something people can understand 2000-07-27 Assar Westerlund * ftpd/gss_userok.c (gss_userok): only do AFS iff KRB4 * ftpd/ftpd.c (krb5_verify): only do AFS stuff if KRB4 2000-07-07 Assar Westerlund * ftpd/ftpd.c: do not call setproctitle with a variable as the format string 2000-07-01 Assar Westerlund * ftpd/ftpd_locl.h: krb5.h before kafs.h * ftpd/ftpd.c (krb5_verify): static-ize * ftpd/ftpd.c (krb5_verify): conditionalize on KRB5 2000-06-21 Assar Westerlund * ftpd: support for authenticating passwords with krb5, by Daniel Kouril 2000-06-06 Johan Danielsson * ftpd/ftpcmd.y: change unix test to be negative 2000-05-18 Assar Westerlund * ftpd/ftpd.c (args): should use `debug'. From Onno van der Linden . 2000-04-25 Assar Westerlund * ftp/ftp.c (login): re-structure code so that we prompt for password for ftp/anonymous 2000-04-11 Assar Westerlund * ftp/ftp.c (login): initialize tmp before calling fgets 2000-04-02 Assar Westerlund * ftpd/ls.c: rename all st_mtime variables to avoid conflict with #define. * ftpd/ftpcmd.y: rename all st_mtime variables to avoid conflict with #define. * ftp/cmds.c: rename all st_mtime variables to avoid conflict with #define. 2000-03-26 Assar Westerlund * ftpd/ls.c, ftpd/ftpcmd.y, ftp/cmds.c: make sure to always call time, ctime, and gmtime with `time_t's. there were some types (like in lastlog) that we believed to always be time_t. this has proven wrong on Solaris 8 in 64-bit mode, where they are stored as 32-bit quantities but time_t has gone up to 64 bits 2000-03-09 Johan Danielsson * call list_file for broken usages of nlst too * ftpd/ftpd.c: call list_file for broken usages of nlst too 2000-02-07 Assar Westerlund * ftp/security.c (sec_read): more paranoia with return value from sec_get_data 2000-01-08 Assar Westerlund * ftp/ftp.c (hookup): handle ai_canonname being set in any of the addresses returnedby getaddrinfo. glibc apparently returns the reverse lookup of every address in ai_canonname. * ftp/ruserpass.c (guess_domain): dito 1999-12-21 Assar Westerlund * ftpd/ftpd.c: don't use sa_len as a parameter, it's defined on Irix 1999-12-21 Johan Danielsson * ftpd/ftpd.c (dataconn): make sure from points to actual data 1999-12-16 Assar Westerlund * ftp/ruserpass.c (guess_domain): handle ai_canonname not being set * ftp/ftp.c (hookup): handle ai_canonname not being set 1999-12-06 Assar Westerlund * ftp/krb4.c (krb4_auth): the nat-IP address might not be realm bounded. 1999-12-05 Assar Westerlund * ftpd/ftpd.c (dolog): update prototype * ftpd/ftpd.c (dolog): use getnameinfo_verified * ftpd/ftpd.c: replace inaddr2str by getnameinfo 1999-12-04 Assar Westerlund * ftp/ruserpass.c (guess_domain): re-write to use getaddrinfo * ftp/ftp.c (hookup): re-write to use getaddrinfo 1999-11-30 Assar Westerlund * ftpd/ftpd.c (getdatasock): make sure to keep the port-number of the outgoing connections. It has to be `ftp-data' or some people might get upset. * ftpd/ftpd.c (args): set correct variable when `-l' so that logging actually works 1999-11-29 Assar Westerlund * ftp/security.c (sec_login): check return value from realloc (sec_end): set app_data to NULL 1999-11-25 Assar Westerlund * ftp/krb4.c (krb4_auth): obtain the `local' address when doing NAT. also turn on passive mode. From 1999-11-20 Assar Westerlund * ftpd/ls.c (make_fileinfo): cast to allow for non-const prototypes of readlink 1999-11-12 Assar Westerlund * ftpd/ftpd.c (args): use arg_counter for `l' 1999-11-04 Assar Westerlund * ftpd/ls.c (S_ISSOCK, S_ISLNK): fallback definitions for systems that don't have them (such as ultrix) 1999-10-29 Assar Westerlund * ftpd/ls.c (make_fileinfo): cast uid's and gid's to unsigned in printf, we don't know what types they might be. (lstat_file): conditionalize the kafs part on KRB4 * ftpd/ftpd_locl.h: is needed for kafs.h 1999-10-28 Assar Westerlund * ftpd/ls.c (lstat_file): don't set st_mode, it should already be correct * ftpd/ls.c: don't use warnx to print errors * ftpd/ls.c (builtin_ls): fix typo, 'd' shouldn't imply 'f' * ftpd/ls.c (lstat_file): new function for avoiding stating AFS mount points. From Love (list_files): use `lstat_file' * ftpd/ftpd.c: some const-poisoning * ftpd/ftpd.c (args): add `-B' as an alias for `--builtin-ls' to allow for stupid inetds that only support two arguments. From Love 1999-10-26 Assar Westerlund * ftpd/ftpcmd.y (help): it's unnecessary to interpret help strings as printf commands * ftpd/ftpd.c (show_issue): don't interpret contents of /etc/issue* as printf commands. From Brian A May 1999-10-21 Johan Danielsson * ftpd/kauth.c (kauth): complain if protection level isn't `private' * ftp/krb4.c (krb4_decode): syslog failure reason * ftp/kauth.c (kauth): set private level earlier * ftp/security.c: get_command_prot; (sec_prot): partially match `command' and `data' 1999-10-18 Johan Danielsson * ftpd/ftpd.c: change `-l' flag to use arg_collect (this makes `-ll' work again) * ftpd/ftpd.c (list_file): pass filename to ls 1999-10-04 Johan Danielsson * ftpd/ftpcmd.y: FEAT 1999-10-03 Assar Westerlund * ftpd/ls.c: fall-back definitions for constans and casts for printfs 1999-10-03 Johan Danielsson * ftpd/ftpd.c (main): make this use getarg; add `list_file' * ftpd/ftpcmd.y (LIST): call list_file * ftpd/ls.c: add simple built-in ls * ftp/security.c: add `sec_vfprintf2' and `sec_fprintf2' that prints to the data stream * ftp/kauth.c (kauth): make sure we're using private protection level * ftp/security.c (set_command_prot): set command protection level * ftp/security.c: make it possible to set the command protection level with `prot' 1999-09-30 Assar Westerlund * ftpd/ftpd_locl.h: add prototype for fclose to make sunos happy 1999-08-19 Johan Danielsson * ftpd/ftpd.c (do_login): show issue-file (send_data): change handling of zero-byte files 1999-08-18 Assar Westerlund * ftp/cmds.c (getit): be more suspicious when parsing the result of MDTM. Do the comparison of timestamps correctly. 1999-08-13 Assar Westerlund * ftpd/ftpd.c (send_data): avoid calling mmap with `len == 0'. Some mmap:s rather dislike that (Solaris) and some munmap (Linux) get grumpy later. * ftp/ftp.c (copy_stream): avoid calling mmap with `len == 0'. Some mmap:s rather dislike that (Solaris) and some munmap (Linux) get grumpy later. 1999-08-03 Assar Westerlund * ftp/ftp.c (active_mode): hide failure of EPRT by setting verbose * ftp/gssapi.c (gss_auth): initialize application_data in bindings 1999-08-02 Assar Westerlund * ftpd/ftpcmd.y: save file names when doing commands that might get aborted (and longjmp:ed out of) to avoid overwriting them also remove extra closing brace 1999-08-01 Johan Danielsson * ftpd/ftpcmd.y: change `site find' to `site locate' (to match what it does, and other implementations) keep find as an alias 1999-07-28 Assar Westerlund * common/socket.c: moved to roken * common/socket.c: new file with generic socket functions * ftpd/ftpd.c: make it more AF-neutral and v6-capable * ftpd/ftpcmd.y: add EPRT and EPSV * ftpd/extern.h: update prototypes and variables * ftp/krb4.c: update to new types of addresses * ftp/gssapi.c: add support for both AF_INET and AF_INET6 addresses * ftp/ftp.c: make it more AF-neutral and v6-capable * ftp/extern.h (hookup): change prototype * common/common.h: add prototypes for functions in socket.c * common/Makefile.am (libcommon_a_SOURCES): add socket.c * ftp/gssapi.c (gss_auth): check return value from `gss_import_name' and print error messages if it fails 1999-06-15 Assar Westerlund * ftp/krb4.c (krb4_auth): type correctness 1999-06-02 Johan Danielsson * ftp/ftp.c (sendrequest): lmode != rmode 1999-05-21 Assar Westerlund * ftp/extern.h (sendrequest): update prototype * ftp/cmds.c: update calls to sendrequest and recvrequest to send "b" when appropriate * ftp/ftp.c (sendrequest): add argument for mode to open file in. 1999-05-08 Assar Westerlund * ftpd/ftpcmd.y: rename getline -> ftpd_getline * ftp/main.c (makeargv): fill in unused slots with NULL Thu Apr 8 15:06:40 1999 Johan Danielsson * ftpd/ftpd.c: remove definition of KRB_VERIFY_USER (moved to config.h) Wed Apr 7 16:15:21 1999 Johan Danielsson * ftp/gssapi.c (gss_auth): call gss_display_status to get a sane error message; return AUTH_{CONTINUE,ERROR}, where appropriate * ftp/krb4.c: return AUTH_{CONTINUE,ERROR}, where appropriate * ftp/security.c (sec_login): if mechanism returns AUTH_CONTINUE, just continue with the next mechanism, this fixes the case of having GSSAPI fail because of non-existant of expired tickets * ftp/security.h: add AUTH_{OK,CONTINUE,ERROR} Thu Apr 1 16:59:04 1999 Johan Danielsson * ftpd/Makefile.am: don't run check-local * ftp/Makefile.am: don't run check-local Mon Mar 22 22:15:18 1999 Assar Westerlund * ftpd/ftpd.c (pass): fall-back for KRB_VERIFY_SECURE * ftpd/ftpd.c (pass): 1 -> KRB_VERIFY_SECURE Thu Mar 18 12:07:09 1999 Johan Danielsson * ftpd/Makefile.am: clean ftpcmd.c * ftpd/ftpd_locl.h: remove krb5.h (breaks in ftpcmd.y) * ftpd/ftpd.c: move include of krb5.h here * ftpd/Makefile.am: include Makefile.am.common * Makefile.am: include Makefile.am.common * ftp/Makefile.am: include Makefile.am.common * common/Makefile.am: include Makefile.am.common Tue Mar 16 22:28:37 1999 Assar Westerlund * ftpd/ftpd_locl.h: add krb5.h to get heimdal_version * ftpd/ftpd.c: krb_verify_user_multiple -> krb_verify_user Thu Mar 11 14:54:59 1999 Johan Danielsson * ftp/Makefile.in: WFLAGS * ftp/ruserpass.c: add some if-braces Wed Mar 10 20:02:55 1999 Johan Danielsson * ftpd/ftpd_locl.h: remove ifdef HAVE_FNMATCH Mon Mar 8 21:29:24 1999 Johan Danielsson * ftpd/ftpd.c: re-add version in greeting message Mon Mar 1 10:49:38 1999 Johan Danielsson * ftpd/logwtmp.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_* Mon Feb 22 19:20:51 1999 Johan Danielsson * common/Makefile.in: remove glob Sat Feb 13 17:19:35 1999 Assar Westerlund * ftpd/ftpd.c (match): remove #ifdef HAVE_FNMATCH. We have a fnmatch implementation in roken and therefore always have it. * ftp/ftp.c (copy_stream): initialize `werr' Wed Jan 13 23:52:57 1999 Assar Westerlund * ftpd/ftpcmd.y: moved all check_login and check_login_no_guest to the end of the rules to ensure we don't generate several (independent) error messages. once again, having a yacc-grammar for FTP with embedded actions doesn't strike me as the most optimal way of doing it. Tue Dec 1 14:44:29 1998 Johan Danielsson * ftpd/Makefile.am: link with extra libs for aix Sun Nov 22 10:28:20 1998 Assar Westerlund * ftpd/ftpd.c (retrying): support on-the-fly decompression * ftpd/Makefile.in (WFLAGS): set * ftp/ruserpass.c (guess_domain): new function (ruserpass): use it * common/Makefile.in (WFLAGS): set * Makefile.in (WFLAGS): set Sat Nov 21 23:13:03 1998 Assar Westerlund * ftp/security.c: some more type correctness. * ftp/gssapi.c (gss_adat): more braces to shut up warnings Wed Nov 18 21:47:55 1998 Assar Westerlund * ftp/main.c (main): new option `-p' for enable passive mode. Mon Nov 2 01:57:49 1998 Assar Westerlund * ftp/ftp.c (getreply): remove extra `break' * ftp/gssapi.c (gss_auth): fixo typo(copyo?) * ftp/security.c (sec_login): fix loop and return value Tue Sep 1 16:56:42 1998 Johan Danielsson * ftp/cmds.c (quote1): fix % quoting bug Fri Aug 14 17:10:06 1998 Johan Danielsson * ftp/krb4.c: krb_put_int -> KRB_PUT_INT Tue Jun 30 18:07:15 1998 Assar Westerlund * ftp/security.c (auth): free `app_data' (sec_end): only destroy if it was initialized Tue Jun 9 21:01:59 1998 Johan Danielsson * ftp/krb4.c: pass client address to krb_rd_req Sat May 16 00:02:07 1998 Assar Westerlund * ftpd/Makefile.am: link with DBLIB Tue May 12 14:15:32 1998 Johan Danielsson * ftp/gssapi.c: Save client name for userok(). * ftpd/gss_userok.c: Userok for gssapi. Fri May 1 07:15:01 1998 Assar Westerlund * ftp/ftp.c: unifdef -DHAVE_H_ERRNO Fri Mar 27 00:46:07 1998 Johan Danielsson * Make compile w/o krb4. Thu Mar 26 03:49:12 1998 Johan Danielsson * ftp/*, ftpd/*: Changes for new framework. * ftp/gssapi.c: GSS-API backend for the new security framework. * ftp/krb4.c: Updated for new framework. * ftp/security.{c,h}: New unified security framework.