1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
|
2002-02-18 Johan Danielsson <joda@pdc.kth.se>
* rshd.c: don't show options that doesn't apply
* rsh.c: don't show options that doesn't apply
* rsh_locl.h: if we're not building with any kerberos support,
just call read/write directly
* common.c: if we're not building with any kerberos support, just
call read/write directly
* rshd.c: make this build without krb5; also use the addrinfo
interface to mini_inetd, and set the keepalive option if requested
* rsh.c: make this build without krb5
* rsh_locl.h: make this build without krb5
* common.c: make this build without krb5
2001-11-30 Johan Danielsson <joda@pdc.kth.se>
* rshd.c: make the syslog messages somewhat more informative
2001-08-15 Johan Danielsson <joda@pdc.kth.se>
* rsh.c: only complain about encryption flag when old
authentication is requested
2001-08-07 Johan Danielsson <joda@pdc.kth.se>
* rsh.c: don't try broken auth if rresvport failed; try to give
some more informative error messages
2001-07-31 Johan Danielsson <joda@pdc.kth.se>
* rshd.8: add an EXAMPLE
* rshd.8: manual page
* rshd.c: add some compat flags
* rsh.1: manual page
* rsh.c: iff -d, set the SO_DEBUG flags of the stdout and stderr
socket; implement parsing user@host
2001-07-19 Assar Westerlund <assar@sics.se>
* rshd.c (fatal): use vsnprintf correctly
2001-02-07 Assar Westerlund <assar@sics.se>
* Makefile.am: add login_access
* rshd.c (login_access): add prototype
(syslog_and_die, fatal): add printf attributes
(*): AIX -> _AIX
(doit): use login_access
based on patches from Ake Sandgren <ake@cs.umu.se>
2001-01-09 Assar Westerlund <assar@sics.se>
* rshd.c (save_krb5_creds): use krb5_rd_cred2 instead of
krb5_rd_cred
2000-12-31 Assar Westerlund <assar@sics.se>
* rshd.c (main): handle krb5_init_context failure consistently
* rsh.c (main): handle krb5_init_context failure consistently
2000-12-05 Johan Danielsson <joda@pdc.kth.se>
* rshd.c: require encryption if passed -x
2000-11-15 Assar Westerlund <assar@sics.se>
* rshd.c (loop): check that the fd's aren't too large to select on
* rsh.c (loop, proto): check that the fd's aren't too large to
select on
2000-08-10 Assar Westerlund <assar@sics.se>
* rsh.c: move code to do config/command parsing correctly.
2000-08-09 Assar Westerlund <assar@sics.se>
* rsh.c (main): only fetch stuff from krb5.conf when no option has
been given
2000-08-01 Assar Westerlund <assar@sics.se>
* rsh.c (doit): loop until we create an error socket of an
supported socket family
2000-07-02 Assar Westerlund <assar@sics.se>
* rshd.c: DCE stuff from Ake Sandgren <ake@cs.umu.se>
do not call syslog with a variable as format string
* rsh_locl.h (_PATH_ETC_ENVIRONMENT): add
2000-06-09 Assar Westerlund <assar@sics.se>
* rsh.c (main): work-around for setuid and capabilities bug fixed
in Linux 2.2.16
2000-06-06 Johan Danielsson <joda@pdc.kth.se>
* rsh.c: nuke long option from -z
* rsh.c: don't try to encrypt if auth is broken (Daniel Kouril)
2000-06-03 Assar Westerlund <assar@sics.se>
* rshd.c (doit): check return value of getspnam. From
<haba@pdc.kth.se>
2000-05-23 Assar Westerlund <assar@sics.se>
* rsh.c (proto): select on the normal socket when waiting for the
daemon to connect back to the stderr port, so that we discover
when data arrives there before. when that happens, we assume that
the daemon did not manage to connect (because of NAT/whatever) and
continue as if `-e' was given
* rshd.c (doit): if we fail to connect back to the stderr port,
act as if `-e' was given on the client side, i.e. without the
special TCP-connection. This tries to make things better when
running the head against a NAT wall, for example.
2000-02-07 Assar Westerlund <assar@sics.se>
* Makefile.am (LDADD): make sure we use the heimdal libdes
2000-02-06 Assar Westerlund <assar@sics.se>
* *: conditionalize des stuff on KRB4
1999-12-16 Assar Westerlund <assar@sics.se>
* rsh.c (doit): addrinfo returned from getaddrinfo() is not usable
directly as hints. copy it and set AI_PASSIVE.
1999-11-20 Assar Westerlund <assar@sics.se>
* rsh.c (main): remember to close the priviledged sockets before
calling rlogin
1999-11-02 Assar Westerlund <assar@sics.se>
* rsh.c (main): redo the v4/v5 selection for consistency. -4 ->
try only v4 -5 -> try only v5 none, -45 -> try v5, v4
1999-10-26 Assar Westerlund <assar@sics.se>
* rshd.c (main): ignore SIGPIPE
* common.c (do_read): the encoded length can be longer than the
buffer being used, allocate memory for it dynamically. From Brian
A May <bmay@dgs.monash.edu.au>
1999-10-14 Assar Westerlund <assar@sics.se>
* rsh.c (proto): be more careful and don't print errno when read()
returns 0
1999-09-20 Assar Westerlund <assar@sics.se>
* rshd.c (recv_krb4_auth): set `iv'
1999-08-16 Assar Westerlund <assar@sics.se>
* common.c (do_read): be careful with the return value from
krb5_net_read
1999-08-05 Assar Westerlund <assar@sics.se>
* rsh.c: call freehostent
* rsh.c: remove some dead code
1999-08-04 Assar Westerlund <assar@sics.se>
* rshd.c: re-write the handling of forwarded credentials and
stuff. From Miroslav Ruda <ruda@ics.muni.cz>
* rsh_locl.h: always include kafs.h
* rsh.c: add `-z' and `-G' options
* rsh.c (loop): shutdown one side of the TCP connection on EOF.
From Brian A May <bmay@dgs.monash.edu.au>
* common.c (do_read): handle EOF. From Brian A May
<bmay@dgs.monash.edu.au>
1999-08-01 Assar Westerlund <assar@sics.se>
* rsh.c: const fixes
1999-07-29 Assar Westerlund <assar@sics.se>
* rshd.c: v6-ify
* rsh.c: v6-ify
1999-07-28 Assar Westerlund <assar@sics.se>
* rsh_locl.h: move around kafs.h
1999-07-24 Assar Westerlund <assar@sics.se>
* rsh_locl.h: <shadow.h>
* rsh.c, rshd.c: improve forwarding and implement unique ccache on
server. From Miroslav Ruda <ruda@ics.muni.cz>
1999-07-03 Assar Westerlund <assar@sics.se>
* rsh.c (construct_command): handle argc == 0 for generality
1999-06-23 Assar Westerlund <assar@sics.se>
* rsh.c: new option `-e' for not trying to open an stderr socket
1999-06-17 Assar Westerlund <assar@sics.se>
* rsh_locl.h (RSH_BUFSIZ): bump to 16 * 1024 to be sure that we
don't leave any data inside des_enc_read. (that constant should
really be exported in some way...)
1999-06-15 Assar Westerlund <assar@sics.se>
* rsh.c: use get_default_username and resulting const pollution
1999-05-21 Assar Westerlund <assar@sics.se>
* rsh.c (main): try $USERNAME
1999-05-14 Assar Westerlund <assar@sics.se>
* rshd.c (doit): afslog correctly
1999-05-11 Assar Westerlund <assar@sics.se>
* rsh.c (main): add fallback to rlogin
1999-05-10 Assar Westerlund <assar@sics.se>
* rsh.c (send_krb5_auth): call krb5_sendauth with ccache == NULL.
check return value from krb5_crypto_init
* common.c (do_write, do_read): always return -1 for failure
(net_write, net_read): remove. they already exist in libroken
1999-05-09 Assar Westerlund <assar@sics.se>
* rsh.c: make sure it tries with all other authentication methods
after one has failed
* rsh.c (main): detect the case of no command given.
1999-04-11 Assar Westerlund <assar@sics.se>
* rsh.c: new option --forwardable. use print_version
Sat Apr 10 17:10:55 1999 Assar Westerlund <assar@sics.se>
* rshd.c (setup_copier): use `socketpair' instead of `pipe'. Some
shells don't think it's a rsh session if they find a pipe at the
other end.
(setup_environment): add SSH_CLIENT just to make bash happy
* common.c (do_read): use krb5_get_wrapped_length
Wed Mar 24 03:59:42 1999 Assar Westerlund <assar@sics.se>
* rsh.c (loop): more braces to make gcc happy
Tue Mar 23 17:08:32 1999 Johan Danielsson <joda@hella.pdc.kth.se>
* rsh_locl.h: kafs.h
* rshd.c: add `-P', `-v', and `-L' flags
Thu Mar 18 11:37:24 1999 Johan Danielsson <joda@hella.pdc.kth.se>
* Makefile.am: include Makefile.am.common
Tue Dec 1 14:44:44 1998 Johan Danielsson <joda@hella.pdc.kth.se>
* appl/rsh/rshd.c: update to new crypto framework
* appl/rsh/rsh_locl.h: update to new crypto framework
* appl/rsh/rsh.c: update to new crypto framework
* appl/rsh/common.c: update to new crypto framework
Mon Nov 2 01:15:06 1998 Assar Westerlund <assar@sics.se>
* appl/rsh/rsh.c (main): initialize host
* appl/rsh/rshd.c (recv_krb5_auth): disable `do_encrypt' if not
encrypting.
Thu Jul 30 23:12:17 1998 Assar Westerlund <assar@sics.se>
* appl/rsh/rsh.c: kludges for parsing `rsh hostname -l user'
Thu Jul 23 19:49:03 1998 Johan Danielsson <joda@emma.pdc.kth.se>
* appl/rsh/rshd.c: use krb5_verify_authenticator_checksum
Sat Apr 18 21:13:06 1998 Johan Danielsson <joda@emma.pdc.kth.se>
* appl/rsh/rsh.c: Don't try v5 if (only) `-4' is specified.
Sun Dec 21 09:44:05 1997 Assar Westerlund <assar@sics.se>
* appl/rsh/rshd.c (recv_krb5_auth): swap the order of the
`local_user' and the `remote_user'
* appl/rsh/rsh.c (send_krb5_auth): swap the order of the
`local_user' and the `remote_user'
Sat Nov 29 07:10:11 1997 Assar Westerlund <assar@sics.se>
* appl/rsh/rshd.c: updated to use getarg.
changed `struct fd_set' to `fd_set'.
implemented broken/BSD authentication (requires iruserok)
Wed Nov 12 02:35:57 1997 Assar Westerlund <assar@sics.se>
* appl/rsh/rsh_locl.h: add AUTH_BROKEN and PATH_RSH
* appl/rsh/Makefile.am: set BINDIR
* appl/rsh/rsh.c: implemented BSD-style reserved port
`authentication'
Sun Aug 24 08:06:54 1997 Assar Westerlund <assar@sics.se>
* appl/rsh/rshd.c: syslog remote shells
Tue Aug 12 01:29:46 1997 Assar Westerlund <assar@sics.se>
* appl/rshd/rshd.c: Use `krb5_sock_to_principal'. Send server
parameter to krb5_rd_req/krb5_recvauth. Set addresses in
auth_context.
Fri Jul 25 17:32:12 1997 Assar Westerlund <assar@sics.se>
* appl/rsh/rshd.c: implement forwarding
* appl/rsh/rsh.c: Use getarg. Implement forwarding.
Sun Jul 13 00:32:16 1997 Assar Westerlund <assar@sics.se>
* appl/rsh: Conditionalize the krb4-support.
Wed Jul 9 06:58:00 1997 Assar Westerlund <assar@sics.se>
* appl/rsh/rsh.c: use the correct user for the checksum
Mon Jul 7 11:15:51 1997 Assar Westerlund <assar@sics.se>
* appl/rsh/rshd.c: Now works. Also implementd encryption and
`-p'.
* appl/rsh/common.c: new file
Mon Jun 30 06:08:14 1997 Assar Westerlund <assar@sics.se>
* appl/rsh: New program.
|
