head	1.2;
access;
symbols
	RELENG_8_4:1.2.0.2
	RELENG_9_1_0_RELEASE:1.1.1.6
	RELENG_9_1:1.1.1.6.0.16
	RELENG_9_1_BP:1.1.1.6
	RELENG_8_3_0_RELEASE:1.1.1.6
	RELENG_8_3:1.1.1.6.0.14
	RELENG_8_3_BP:1.1.1.6
	RELENG_9_0_0_RELEASE:1.1.1.6
	RELENG_9_0:1.1.1.6.0.12
	RELENG_9_0_BP:1.1.1.6
	RELENG_9:1.1.1.6.0.10
	RELENG_9_BP:1.1.1.6
	RELENG_7_4_0_RELEASE:1.1.1.5
	RELENG_8_2_0_RELEASE:1.1.1.6
	RELENG_7_4:1.1.1.5.0.34
	RELENG_7_4_BP:1.1.1.5
	RELENG_8_2:1.1.1.6.0.8
	RELENG_8_2_BP:1.1.1.6
	RELENG_8_1_0_RELEASE:1.1.1.6
	RELENG_8_1:1.1.1.6.0.6
	RELENG_8_1_BP:1.1.1.6
	RELENG_7_3_0_RELEASE:1.1.1.5
	RELENG_7_3:1.1.1.5.0.32
	RELENG_7_3_BP:1.1.1.5
	RELENG_8_0_0_RELEASE:1.1.1.6
	RELENG_8_0:1.1.1.6.0.4
	RELENG_8_0_BP:1.1.1.6
	RELENG_8:1.1.1.6.0.2
	RELENG_8_BP:1.1.1.6
	RELENG_7_2_0_RELEASE:1.1.1.5
	RELENG_7_2:1.1.1.5.0.30
	RELENG_7_2_BP:1.1.1.5
	RELENG_7_1_0_RELEASE:1.1.1.5
	RELENG_6_4_0_RELEASE:1.1.1.5
	RELENG_7_1:1.1.1.5.0.28
	RELENG_7_1_BP:1.1.1.5
	RELENG_6_4:1.1.1.5.0.26
	RELENG_6_4_BP:1.1.1.5
	v_1_1_0:1.1.1.6
	RELENG_7_0_0_RELEASE:1.1.1.5
	RELENG_6_3_0_RELEASE:1.1.1.5
	RELENG_7_0:1.1.1.5.0.24
	RELENG_7_0_BP:1.1.1.5
	RELENG_6_3:1.1.1.5.0.22
	RELENG_6_3_BP:1.1.1.5
	RELENG_7:1.1.1.5.0.20
	RELENG_7_BP:1.1.1.5
	RELENG_6_2_0_RELEASE:1.1.1.5
	RELENG_6_2:1.1.1.5.0.18
	RELENG_6_2_BP:1.1.1.5
	RELENG_5_5_0_RELEASE:1.1.1.5
	RELENG_5_5:1.1.1.5.0.16
	RELENG_5_5_BP:1.1.1.5
	RELENG_6_1_0_RELEASE:1.1.1.5
	RELENG_6_1:1.1.1.5.0.14
	RELENG_6_1_BP:1.1.1.5
	RELENG_6_0_0_RELEASE:1.1.1.5
	RELENG_6_0:1.1.1.5.0.12
	RELENG_6_0_BP:1.1.1.5
	RELENG_6:1.1.1.5.0.10
	RELENG_6_BP:1.1.1.5
	RELENG_5_4_0_RELEASE:1.1.1.5
	RELENG_5_4:1.1.1.5.0.8
	RELENG_5_4_BP:1.1.1.5
	v_0_6_3:1.1.1.5
	RELENG_4_11_0_RELEASE:1.1.1.1.2.3
	RELENG_4_11:1.1.1.1.2.3.0.10
	RELENG_4_11_BP:1.1.1.1.2.3
	RELENG_5_3_0_RELEASE:1.1.1.5
	RELENG_5_3:1.1.1.5.0.6
	RELENG_5_3_BP:1.1.1.5
	RELENG_5:1.1.1.5.0.4
	RELENG_5_BP:1.1.1.5
	RELENG_4_10_0_RELEASE:1.1.1.1.2.3
	RELENG_4_10:1.1.1.1.2.3.0.8
	RELENG_4_10_BP:1.1.1.1.2.3
	v_0_6_1:1.1.1.5
	RELENG_5_2_1_RELEASE:1.1.1.5
	RELENG_5_2_0_RELEASE:1.1.1.5
	RELENG_5_2:1.1.1.5.0.2
	RELENG_5_2_BP:1.1.1.5
	RELENG_4_9_0_RELEASE:1.1.1.1.2.3
	RELENG_4_9:1.1.1.1.2.3.0.6
	RELENG_4_9_BP:1.1.1.1.2.3
	v_0_6:1.1.1.5
	RELENG_5_1_0_RELEASE:1.1.1.4
	RELENG_5_1:1.1.1.4.0.4
	RELENG_5_1_BP:1.1.1.4
	RELENG_4_8_0_RELEASE:1.1.1.1.2.3
	RELENG_4_8:1.1.1.1.2.3.0.4
	RELENG_4_8_BP:1.1.1.1.2.3
	RELENG_5_0_0_RELEASE:1.1.1.4
	RELENG_5_0:1.1.1.4.0.2
	RELENG_5_0_BP:1.1.1.4
	v_0_5_1:1.1.1.4
	RELENG_4_7_0_RELEASE:1.1.1.1.2.3
	RELENG_4_7:1.1.1.1.2.3.0.2
	RELENG_4_7_BP:1.1.1.1.2.3
	cvs_20020916:1.1.1.4
	cvs_20020829:1.1.1.4
	RELENG_4_6_2_RELEASE:1.1.1.1.2.2
	RELENG_4_6_1_RELEASE:1.1.1.1.2.2
	RELENG_4_6_0_RELEASE:1.1.1.1.2.2
	RELENG_4_6:1.1.1.1.2.2.0.2
	RELENG_4_6_BP:1.1.1.1.2.2
	cvs_20020217:1.1.1.3
	RELENG_4_5_0_RELEASE:1.1.1.1.2.1
	RELENG_4_5:1.1.1.1.2.1.0.6
	RELENG_4_5_BP:1.1.1.1.2.1
	v_0_3_f_patch:1.1.1.2
	RELENG_4_4_0_RELEASE:1.1.1.1.2.1
	RELENG_4_4:1.1.1.1.2.1.0.4
	RELENG_4_4_BP:1.1.1.1.2.1
	v_0_3_f:1.1.1.2
	RELENG_4_3_0_RELEASE:1.1.1.1.2.1
	RELENG_4_3:1.1.1.1.2.1.0.2
	RELENG_4_3_BP:1.1.1.1.2.1
	v_0_3_e:1.1.1.2
	RELENG_4_2_0_RELEASE:1.1.1.1
	RELENG_4_1_1_RELEASE:1.1.1.1
	PRE_SMPNG:1.1.1.1
	RELENG_4_1_0_RELEASE:1.1.1.1
	RELENG_4_0_0_RELEASE:1.1.1.1
	RELENG_4:1.1.1.1.0.2
	RELENG_4_BP:1.1.1.1
	v_0_2_p:1.1.1.1
	v_0_2_o:1.1.1.1
	v_0_2_n:1.1.1.1
	v_0_2_m:1.1.1.1
	KTH:1.1.1;
locks; strict;
comment	@# @;


1.2
date	2012.03.22.08.48.42;	author stas;	state Exp;
branches
	1.2.2.1;
next	1.1;

1.1
date	2000.01.09.20.57.27;	author markm;	state Exp;
branches
	1.1.1.1;
next	;

1.2.2.1
date	2012.03.22.08.48.42;	author svnexp;	state dead;
branches;
next	1.2.2.2;

1.2.2.2
date	2013.03.28.13.02.15;	author svnexp;	state Exp;
branches;
next	;

1.1.1.1
date	2000.01.09.20.57.27;	author markm;	state Exp;
branches
	1.1.1.1.2.1;
next	1.1.1.2;

1.1.1.2
date	2001.02.13.16.44.18;	author assar;	state Exp;
branches;
next	1.1.1.3;

1.1.1.3
date	2002.02.19.15.46.06;	author nectar;	state Exp;
branches;
next	1.1.1.4;

1.1.1.4
date	2002.08.30.21.22.57;	author nectar;	state Exp;
branches;
next	1.1.1.5;

1.1.1.5
date	2003.10.09.19.36.19;	author nectar;	state Exp;
branches;
next	1.1.1.6;

1.1.1.6
date	2008.05.07.13.39.19;	author dfr;	state Exp;
branches;
next	;

1.1.1.1.2.1
date	2001.03.04.13.29.07;	author markm;	state Exp;
branches;
next	1.1.1.1.2.2;

1.1.1.1.2.2
date	2002.04.30.14.49.14;	author nectar;	state Exp;
branches;
next	1.1.1.1.2.3;

1.1.1.1.2.3
date	2002.09.01.04.21.34;	author nectar;	state Exp;
branches;
next	;


desc
@@


1.2
log
@SVN rev 233294 on 2012-03-22 08:48:42Z by stas

- Update FreeBSD Heimdal distribution to version 1.5.1.  This also brings
  several new kerberos related libraries and applications to FreeBSD:
  o kgetcred(1) allows one to manually get a ticket for a particular service.
  o kf(1) securily forwards ticket to another host through an authenticated
    and encrypted stream.
  o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1)
    and other user kerberos operations. klist and kswitch are just symlinks
    to kcc(1) now.
  o kswitch(1) allows you to easily switch between kerberos credentials if
    you're running KCM.
  o hxtool(1) is a certificate management tool to use with PKINIT.
  o string2key(1) maps a password into key.
  o kdigest(8) is a userland tool to access the KDC's digest interface.
  o kimpersonate(8) creates a "fake" ticket for a service.

  We also now install manpages for some lirbaries that were not installed
  before, libheimntlm and libhx509.

- The new HEIMDAL version no longer supports Kerberos 4.  All users are
  recommended to switch to Kerberos 5.

- Weak ciphers are now disabled by default.  To enable DES support (used
  by telnet(8)), use "allow_weak_crypto" option in krb5.conf.

- libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings
  disabled due to the function they use (krb5_get_err_text(3)) being
  deprecated.  I plan to work on this next.

- Heimdal's KDC now require sqlite to operate.  We use the bundled version
  and install it as libheimsqlite.  If some other FreeBSD components will
  require it in the future we can rename it to libbsdsqlite and use for these
  components as well.

- This is not a latest Heimdal version, the new one was released while I was
  working on the update.  I will update it to 1.5.2 soon, as it fixes some
  important bugs and security issues.
@
text
@2008-07-15  Love Hörnquist Åstrand  <lha@@it.su.se>

	* Makefile.am: no krb4

	* su.c: Drop kerberos 4 support.

2007-10-19  Love Hörnquist Åstrand  <lha@@it.su.se>

	* su.c: read environment from _PATH_ETC_ENVIRONMENT

	* supaths.c: paths

2007-08-02  Love Hörnquist Åstrand  <lha@@it.su.se>

	* su.c: Check all local realms when su-ing, from Magnus Holmberg.

2007-06-19  Love Hörnquist Åstrand  <lha@@it.su.se>

	* su.c: If not root and not setuid, print warning.

2006-01-17  Love Hörnquist Åstrand  <lha@@it.su.se>

	* su.c (group_member_p): rename from group_member to avoid name
	pollution from glibc headers. Fixed based on report from David Love.

2006-01-12  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: fix reversed logic when deciding to print tty or not
	
2005-10-22  Love Hörnquist Åstrand  <lha@@it.su.se>

	* su.c: Check return value from asprintf instead of string != NULL
	since it undefined behavior on Linux. From Björn Sandell
	
2005-05-10  Dave Love  <fx@@gnu.org>

	* su.c: Include <crypt.h>.

2003-09-03  Love Hörnquist Åstrand  <lha@@it.su.se>

	* su.c: s/des_read_pw_string/UI_UTIL_read_pw_string/
	
2003-05-06  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: remove accidentally committed code that prints the command
	being executed

2003-03-18  Love Hörnquist Åstrand  <lha@@it.su.se>

	* su.c (krb5_start_session): krb5_afslog doesn't depend on KRB4
	any more

2002-02-19  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: make this build without krb5

2002-01-09  Jacques Vidrine <n@@nectar.cc>
	
	* su.c: Don't use getlogin() to determine whether we are root.
	Patch by joda.

2001-06-12  Assar Westerlund  <assar@@sics.se>

	* su.c: check memory allocations.  add some const

2000-12-31  Assar Westerlund  <assar@@sics.se>

	* su.c (krb5_verify): handle krb5_init_context failure
	consistently

2000-08-28  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: set KRBTKFILE

2000-07-10  Assar Westerlund  <assar@@sics.se>

	* Makefile.am: actually install su
	* su.c (krb5_verify): try harder freeing.  do not get upset on
	interrupted password read

2000-06-09  Assar Westerlund  <assar@@sics.se>

	* su.c (main): work-around for setuid and capabilities bug fixed
	in Linux 2.2.16

2000-06-03  Assar Westerlund  <assar@@sics.se>

	* su.c (main): just ignore shadow information if getspnam returns
	NULL

1999-10-20  Assar Westerlund  <assar@@sics.se>

	* Makefile.am: use LIB_roken

1999-09-28  Assar Westerlund  <assar@@sics.se>

	* su.c (krb5_verify): use krb5_verify_user_lrealm

1999-08-04  Assar Westerlund  <assar@@sics.se>

	* su.c: add support for shadow passwords and rewrite some logic.
  	From Miroslav Ruda <ruda@@ics.muni.cz>

	* Makefile.am: add libkafs

1999-06-15  Assar Westerlund  <assar@@sics.se>

	* su.c (main): conditionalize `getlogin'

1999-05-11  Assar Westerlund  <assar@@sics.se>

	* su.c (verfiy_krb5): get the name out of the ccache before
 	closing it

1999-05-05  Assar Westerlund  <assar@@sics.se>

	* su.c: some more error checking

Wed Apr 21 21:04:36 1999  Assar Westerlund  <assar@@sics.se>

	* su.c (-f): implement

	* su.c: implement -i
	(verify_krb5): correct the ownership on the credential cache

Tue Apr 20 13:26:13 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* su.c: don't depend on paths.h

@


1.2.2.1
log
@file ChangeLog was added on branch RELENG_8_4 on 2013-03-28 13:02:15 +0000
@
text
@d1 129
@


1.2.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 123
2007-10-19  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: read environment from _PATH_ETC_ENVIRONMENT

	* supaths.c: paths

2007-08-02  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: Check all local realms when su-ing, from Magnus Holmberg.

2007-06-19  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: If not root and not setuid, print warning.

2006-01-17  Love Hrnquist strand  <lha@@it.su.se>

	* su.c (group_member_p): rename from group_member to avoid name
	pollution from glibc headers. Fixed based on report from David Love.

2006-01-12  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: fix reversed logic when deciding to print tty or not
	
2005-10-22  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: Check return value from asprintf instead of string != NULL
	since it undefined behavior on Linux. From Bjrn Sandell
	
2005-05-10  Dave Love  <fx@@gnu.org>

	* su.c: Include <crypt.h>.

2003-09-03  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: s/des_read_pw_string/UI_UTIL_read_pw_string/
	
2003-05-06  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: remove accidentally committed code that prints the command
	being executed

2003-03-18  Love Hrnquist strand  <lha@@it.su.se>

	* su.c (krb5_start_session): krb5_afslog doesn't depend on KRB4
	any more

2002-02-19  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: make this build without krb5

2002-01-09  Jacques Vidrine <n@@nectar.cc>
	
	* su.c: Don't use getlogin() to determine whether we are root.
	Patch by joda.

2001-06-12  Assar Westerlund  <assar@@sics.se>

	* su.c: check memory allocations.  add some const

2000-12-31  Assar Westerlund  <assar@@sics.se>

	* su.c (krb5_verify): handle krb5_init_context failure
	consistently

2000-08-28  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: set KRBTKFILE

2000-07-10  Assar Westerlund  <assar@@sics.se>

	* Makefile.am: actually install su
	* su.c (krb5_verify): try harder freeing.  do not get upset on
	interrupted password read

2000-06-09  Assar Westerlund  <assar@@sics.se>

	* su.c (main): work-around for setuid and capabilities bug fixed
	in Linux 2.2.16

2000-06-03  Assar Westerlund  <assar@@sics.se>

	* su.c (main): just ignore shadow information if getspnam returns
	NULL

1999-10-20  Assar Westerlund  <assar@@sics.se>

	* Makefile.am: use LIB_roken

1999-09-28  Assar Westerlund  <assar@@sics.se>

	* su.c (krb5_verify): use krb5_verify_user_lrealm

1999-08-04  Assar Westerlund  <assar@@sics.se>

	* su.c: add support for shadow passwords and rewrite some logic.
  	From Miroslav Ruda <ruda@@ics.muni.cz>

	* Makefile.am: add libkafs

1999-06-15  Assar Westerlund  <assar@@sics.se>

	* su.c (main): conditionalize `getlogin'

1999-05-11  Assar Westerlund  <assar@@sics.se>

	* su.c (verfiy_krb5): get the name out of the ccache before
 	closing it

1999-05-05  Assar Westerlund  <assar@@sics.se>

	* su.c: some more error checking

Wed Apr 21 21:04:36 1999  Assar Westerlund  <assar@@sics.se>

	* su.c (-f): implement

	* su.c: implement -i
	(verify_krb5): correct the ownership on the credential cache

Tue Apr 20 13:26:13 1999  Johan Danielsson  <joda@@hella.pdc.kth.se>

	* su.c: don't depend on paths.h

@


1.1
log
@Initial revision
@
text
@d1 90
@


1.1.1.1
log
@Import KTH Heimdal, which will be the core of our Kerberos5.
Userland to follow.
@
text
@@


1.1.1.1.2.1
log
@MFC: Heimdal 0.3e (MIT mucho-compatible) upgrade.
@
text
@a0 25
2000-12-31  Assar Westerlund  <assar@@sics.se>

	* su.c (krb5_verify): handle krb5_init_context failure
	consistently

2000-08-28  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: set KRBTKFILE

2000-07-10  Assar Westerlund  <assar@@sics.se>

	* Makefile.am: actually install su
	* su.c (krb5_verify): try harder freeing.  do not get upset on
	interrupted password read

2000-06-09  Assar Westerlund  <assar@@sics.se>

	* su.c (main): work-around for setuid and capabilities bug fixed
	in Linux 2.2.16

2000-06-03  Assar Westerlund  <assar@@sics.se>

	* su.c (main): just ignore shadow information if getspnam returns
	NULL

@


1.1.1.1.2.2
log
@MFC: Update Heimdal Kerberos to 0.4e around 2002/02/17.
@
text
@a0 8
2002-01-09  Jacques Vidrine <n@@nectar.cc>
	* su.c: Don't use getlogin() to determine whether we are root.
	Patch by joda.

2001-06-12  Assar Westerlund  <assar@@sics.se>

	* su.c: check memory allocations.  add some const

@


1.1.1.1.2.3
log
@MFC: Update Heimdal Kerberos to pre-0.5 around 2002/08/29.
@
text
@a0 4
2002-02-19  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: make this build without krb5

a1 1
	
@


1.1.1.2
log
@import of heimdal 0.3e
@
text
@a0 25
2000-12-31  Assar Westerlund  <assar@@sics.se>

	* su.c (krb5_verify): handle krb5_init_context failure
	consistently

2000-08-28  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: set KRBTKFILE

2000-07-10  Assar Westerlund  <assar@@sics.se>

	* Makefile.am: actually install su
	* su.c (krb5_verify): try harder freeing.  do not get upset on
	interrupted password read

2000-06-09  Assar Westerlund  <assar@@sics.se>

	* su.c (main): work-around for setuid and capabilities bug fixed
	in Linux 2.2.16

2000-06-03  Assar Westerlund  <assar@@sics.se>

	* su.c (main): just ignore shadow information if getspnam returns
	NULL

@


1.1.1.3
log
@Import of Heimdal Kerberos from KTH repository circa 2002/02/17.
@
text
@a0 8
2002-01-09  Jacques Vidrine <n@@nectar.cc>
	* su.c: Don't use getlogin() to determine whether we are root.
	Patch by joda.

2001-06-12  Assar Westerlund  <assar@@sics.se>

	* su.c: check memory allocations.  add some const

@


1.1.1.4
log
@Import of Heimdal Kerberos from KTH repository circa 2002/08/29.
@
text
@a0 4
2002-02-19  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: make this build without krb5

a1 1
	
@


1.1.1.5
log
@Vendor import of Heimdal 0.6.
@
text
@a0 10
2003-05-06  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: remove accidentally committed code that prints the command
	being executed

2003-03-18  Love Hrnquist strand <lha@@it.su.se>

	* su.c (krb5_start_session): krb5_afslog doesn't depend on KRB4
	any more

@


1.1.1.6
log
@Vendor import of Heimdal 1.1
@
text
@a0 36
2007-10-19  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: read environment from _PATH_ETC_ENVIRONMENT

	* supaths.c: paths

2007-08-02  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: Check all local realms when su-ing, from Magnus Holmberg.

2007-06-19  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: If not root and not setuid, print warning.

2006-01-17  Love Hrnquist strand  <lha@@it.su.se>

	* su.c (group_member_p): rename from group_member to avoid name
	pollution from glibc headers. Fixed based on report from David Love.

2006-01-12  Johan Danielsson  <joda@@pdc.kth.se>

	* su.c: fix reversed logic when deciding to print tty or not
	
2005-10-22  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: Check return value from asprintf instead of string != NULL
	since it undefined behavior on Linux. From Bjrn Sandell
	
2005-05-10  Dave Love  <fx@@gnu.org>

	* su.c: Include <crypt.h>.

2003-09-03  Love Hrnquist strand  <lha@@it.su.se>

	* su.c: s/des_read_pw_string/UI_UTIL_read_pw_string/
	
d6 1
a6 1
2003-03-18  Love Hrnquist strand  <lha@@it.su.se>
@


