Timeline


and

07/13/02:

21:29 Changeset [17749] by zacheiss
Client shouldn't enforce overly strict permissions; "l" bits are sufficient for this operation.

07/05/02:

17:34 Changeset [17748] by zacheiss
Remove setjmp/longjmp code, which only works for the first time anyway, since we're not using sigsetjmp/siglongjmp. A SIGALRM handler that just returns is clearer and sufficient for interrupting connect().
17:32 Changeset [17747] by zacheiss
Lower OLCD_TIMEOUT from 10 to 5.
01:56 Changeset [17746] by zacheiss
Redo syslogging of root logins to only occur in one place, and to not happen until authentication has successfully occured.

07/02/02:

23:02 Changeset [17745] by zacheiss
Don't allow foreign zephyrd to request a triplet with a non-wildcard recipient.
17:49 Changeset [17744] by zacheiss
Disable ChallengeResponseAuthentication (which was functionally disabled anyway, since we don't compile in either of the BSD_AUTH or SKEY mechanisms) and PAM keyboard interactive authentication (we don't have PAM enabled, but it might reassure someone reading the config file).
17:47 Changeset [17743] by zacheiss
Patches from OpenSSH 3.4 to fix vulnerabilities in auth mechanisms we don't have enabled.

07/01/02:

17:30 Changeset [17742] by rbasch
Revert back to using the native compiler on IRIX, to avoid stdio-related problems in unexec'ing a binary built with gcc 3.0.3, which broke no-window mode.
11:08 Changeset [17741] by zacheiss
Add --with-md5-passwords, since some of our Linux machines are configured to use them. Doesn't matter on Irix or Solaris, since they'll never have passwords salted with the magic md5 salt.
01:16 Changeset [17740] by zacheiss
Add a default Reply-To: header for mail responses from olcr (but not OLTA, or any other OLC-alike services).

06/29/02:

15:02 Changeset [17739] by zacheiss
TKT_FIL_ACC error message should mention the need to reset $KRB5CCNAME in addition to $KRBTKFILE.
03:00 Changeset [17738] by ghudson
Revert the last two changes, and change the descriptive text to note the real problem, which is variable values equal to "!". ([ ! = ! ] works on Red Hat 7.3 but fails on Solaris 8 and IRIX 6.5.3.) Thanks to jmorzins for pointing this out.

06/28/02:

13:34 Changeset [17737] by ghudson
Similarly, you don't need to use the unnatural literal = "$varname" format for comparing to a literal.
13:32 Changeset [17736] by ghudson
Don't need x$variable when comparing one variable to another, actually. [ -foo = -foo ] works fine.
01:42 Changeset [17735] by ghudson
Pull up 1.58 to athena-9_1 branch.
01:42 Changeset [17734] by ghudson
From rbasch: update space checks for IRIX.
01:21 Changeset [17733] by ghudson
Pull up 1.2 to athena-9_1 branch.
01:20 Changeset [17732] by zacheiss
Pullups from OpenAFS mainline. We never want to get ESTALE for the AFS root, and clear the alloc'ed flag so we don't free something we never allocated.
01:16 Changeset [17731] by ghudson
Pull up 1.2 to athena-9_1 branch.
01:14 Changeset [17730] by ghudson
Use a larger ID space; the five-digit space is too likely to have collisions.
01:12 Changeset [17729] by ghudson
Point 9.1 branch at 9.1 source tree.

06/27/02:

21:54 Changeset [17728] by ghudson
Relax uid checks so that root can destroy anyone's tickets.

06/26/02:

18:43 Changeset [17727] by ghudson
Pull up 1.7-1.8 to athena-9_1 branch.
18:43 Changeset [17726] by ghudson
Pull up 1.1 to athena-9_1 branch.
18:43 Changeset [17725] by ghudson
Pull up 1.5 to athena-9_1 branch.
18:43 Changeset [17724] by ghudson
Pull up 1.27 to athena-9_1 branch.
18:43 Changeset [17723] by ghudson
Pull up 1.4 to athena-9_1 branch.
18:43 Changeset [17722] by ghudson
Pull up 1.7 to athena-9_1 branch.
18:43 Changeset [17721] by ghudson
Pull up 1.13 to athena-9_1 branch.
18:43 Changeset [17720] by ghudson
Pull up 1.1-1.3 to athena-9_1 branch.
18:43 Changeset [17719] by ghudson
Pull up 1.2 to athena-9_1 branch.
18:43 Changeset [17718] by ghudson
Pull up 1.3 to athena-9_1 branch.
18:43 Changeset [17717] by ghudson
Pull up 1.9 to athena-9_1 branch.
18:43 Changeset [17716] by ghudson
Pull up 1.6 to athena-9_1 branch.
18:43 Changeset [17715] by ghudson
Pull up 1.25 to athena-9_1 branch.
18:43 Changeset [17714] by ghudson
Pull up 1.56-1.57 to athena-9_1 branch.
18:42 Changeset [17713] by ghudson
Pull up 1.30 to athena-9_1 branch.
18:42 Changeset [17712] by ghudson
Pull up 1.174 to athena-9_1 branch.
18:42 Changeset [17711] by ghudson
Pull up 1.8 to athena-9_1 branch.
18:39 Changeset [17710]
This commit was manufactured by cvs2svn to create branch 'athena-9_1'.
18:39 Changeset [17709] by ghudson
root's crontab changed to add counterlog.
18:32 Changeset [17708] by ghudson
Use a world-readable mode for the ssh binary.
18:29 Changeset [17707] by ghudson
New script, counterlog, lives in /etc/athena. Run from cron once a day and at boot time, replacing the old Booting syslog. Logs the machine name, type, and version, and a randomly generated ID which can be used to track mobile machines using DHCP.
18:24 Changeset [17706] by ghudson
Remove penrose and julia screensavers; they are reported to wedge the Solaris 8 X server on Ultra 10s with m64 graphics.
18:23 Changeset [17705] by ghudson
Update space checks for the 9.1 release.

06/24/02:

23:46 Changeset [17704] by ghudson
New AFS module to fix denial of service vulnerability.
18:26 Changeset [17703] by rbasch
Spec file for gurlview.
18:25 Changeset [17702] by rbasch
Add gurlview.
15:52 Changeset [17701] by rbasch
setup-swap-boot now lives in /install/miniroot.
09:32 Changeset [17700] by rbasch
A simple utility which calls gnome_url_show() to display a URL in an appropriate viewer.
07:50 Changeset [17699] by rbasch
Increase spawn_wait_ms to 5000 (5 seconds).
07:49 Changeset [17698] by rbasch
Handle an esd spawn wait timeout of one second or greater.
02:28 Changeset [17697] by ghudson
Pull up 1.7 to athena-9_0 branch.
02:28 Changeset [17696] by ghudson
Pull up 1.1 to athena-9_0 branch.
02:28 Changeset [17695] by ghudson
Pull up 1.5 to athena-9_0 branch.
02:27 Changeset [17694]
This commit was manufactured by cvs2svn to create branch 'athena-9_0'.
02:27 Changeset [17693] by ghudson
Some security fixes for IRIX.

06/23/02:

18:28 Changeset [17692] by zacheiss
Redo previous revision to not break ticket forwarding from ssh.com clients.

06/21/02:

19:41 Changeset [17691] by rbasch
/etc/inetd.conf has changed on IRIX.
19:40 Changeset [17690] by rbasch
Disable xfsmd.
14:54 Changeset [17689] by zacheiss
#define CONFIG_SMP to 1, since the most recent Redhat kernel has headers that use #if CONFIG_SMP instead of #ifdef CONFIG_SMP.

06/18/02:

12:38 Changeset [17688] by zacheiss
Use execvp() instead of execv() when we re-exec() ourselves in response to a SIGHUP, in case we were run without an explicit path.
Note: See TracTimeline for information about the timeline view.