Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 1 | Programming: |
Damien Miller | 3380426 | 2001-02-04 23:20:18 +1100 | [diff] [blame] | 2 | - Grep for 'XXX' comments and fix |
| 3 | |
Damien Miller | 883631b | 2001-03-21 11:12:55 +1100 | [diff] [blame] | 4 | - Link order is incorrect for some systems using Kerberos 4 and AFS. Result |
Damien Miller | 771bbac | 2001-03-27 16:10:22 +1000 | [diff] [blame] | 5 | is multiple inclusion of DES symbols. Holger Trapp |
| 6 | <holger.trapp@hrz.tu-chemnitz.de> reports that changing the configure |
| 7 | generated link order from: |
| 8 | -lresolv -lkrb -lz -lnsl -lutil -lkafs -lkrb -ldes -lcrypto |
| 9 | to: |
| 10 | -lresolv -lkrb -lz -lnsl -lutil -lcrypto -lkafs -lkrb -ldes |
| 11 | fixing the problem. |
Damien Miller | 883631b | 2001-03-21 11:12:55 +1100 | [diff] [blame] | 12 | |
Damien Miller | b8b8ecf | 2001-02-08 10:47:43 +1100 | [diff] [blame] | 13 | - Write a test program that calls stat() to search for EGD/PRNGd socket |
Damien Miller | dd97de7 | 2001-03-05 23:33:24 +1100 | [diff] [blame] | 14 | rather than use the (non-portable) "test -S". |
Damien Miller | b8b8ecf | 2001-02-08 10:47:43 +1100 | [diff] [blame] | 15 | |
Damien Miller | a8ed44b | 2003-01-10 09:53:12 +1100 | [diff] [blame] | 16 | - More platforms for for setproctitle() emulation (testing needed) |
Damien Miller | 356a0b0 | 1999-11-08 15:30:59 +1100 | [diff] [blame] | 17 | |
Damien Miller | dd97de7 | 2001-03-05 23:33:24 +1100 | [diff] [blame] | 18 | - Handle changing passwords for the non-PAM expired password case |
| 19 | |
Damien Miller | c7b38ce | 1999-11-09 10:28:04 +1100 | [diff] [blame] | 20 | - Improve PAM support (a pam_lastlog module will cause sshd to exit) |
Damien Miller | 5399838 | 2002-09-05 16:32:02 +1000 | [diff] [blame] | 21 | and maybe support alternate forms of authentications like OPIE via |
Ben Lindstrom | c72745a | 2000-12-02 19:03:54 +0000 | [diff] [blame] | 22 | pam? |
Damien Miller | 356a0b0 | 1999-11-08 15:30:59 +1100 | [diff] [blame] | 23 | |
Damien Miller | dd97de7 | 2001-03-05 23:33:24 +1100 | [diff] [blame] | 24 | - Rework PAM ChallengeResponseAuthentication |
| 25 | - Use kbdint request packet with 0 prompts for informational messages |
| 26 | - Use different PAM service name for kbdint vs regular auth (suggest from |
| 27 | Solar Designer) |
| 28 | - Ability to select which ChallengeResponseAuthentications may be used |
| 29 | and order to try them in e.g. "ChallengeResponseAuthentication skey, pam" |
| 30 | |
Damien Miller | ad833b3 | 2000-08-23 10:46:23 +1000 | [diff] [blame] | 31 | - Complete Tru64 SIA support |
Damien Miller | fdbcb5d | 2001-09-25 13:01:49 +1000 | [diff] [blame] | 32 | - It looks like we could merge it into the password auth code to cut down |
| 33 | on diff size. Maybe PAM password auth too? |
Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 34 | |
| 35 | - Finish integrating kernel-level auditing code for IRIX and SOLARIS |
| 36 | (Gilbert.r.loomis@saic.com) |
| 37 | |
Ben Lindstrom | 48b2f73 | 2001-01-08 06:20:38 +0000 | [diff] [blame] | 38 | - sftp-server: Rework to step down to 32bit ints if the platform |
| 39 | lacks 'long long' == 64bit (Notable SCO w/ SCO compiler) |
Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 40 | |
Ben Lindstrom | a15e39b | 2000-12-02 04:58:57 +0000 | [diff] [blame] | 41 | - Linux hangs for 20 seconds when you do "sleep 20&exit". All current |
| 42 | solutions break scp or leaves processes hanging around after the ssh |
| 43 | connection has ended. It seems to be linked to two things. One |
| 44 | select() under Linux is not as nice as others, and two the children |
Damien Miller | 5399838 | 2002-09-05 16:32:02 +1000 | [diff] [blame] | 45 | of the shell are not killed on exiting the shell. |
| 46 | A short run-down of what happens: |
| 47 | - The shell starts up, and starts its own session. As a side-effect, it |
| 48 | gets its own process group. |
| 49 | - The child forks off sleep, and because it's in the background, puts it |
| 50 | into its own process group. The sleep command inherits a copy of the |
| 51 | shell's descriptor for the tty as its stdout. |
| 52 | - The shell exits, but doesn't SIGHUP all of its child PIDs like it probably |
| 53 | should(?) |
| 54 | - The sshd server attempts to read from the master side of the pty, and |
| 55 | while there are still process with the pty open, no EOF is produced. |
| 56 | - The sleep command exits, closes its descriptor, sshd detects the EOF, and |
| 57 | the connection gets closed. |
| 58 | Ways we've tried fixing this in sshd, and why they didn't work out: |
| 59 | - SIGHUP the sshd's process group. |
| 60 | - The shell is in its own process group. |
| 61 | - Track process group IDs of all children before we reap them (via an extra |
| 62 | field in Session structures which holds the pgid for each child pid), and |
| 63 | SIGHUP the pgid when we reap. |
| 64 | - Background commands are in yet another process group. |
| 65 | - Close the connection when the child dies. |
| 66 | - Background commands may need to write data to the connection. Also |
| 67 | prematurely truncates output from some commands (scp server, the |
| 68 | famous "dd if=/dev/zero bs=1000 count=100" case). |
| 69 | Known workarounds: |
| 70 | - bash: shopt huponexit on |
| 71 | - tcsh: none |
| 72 | - zsh: setopt HUP (usually the default setting) |
| 73 | (taken from email from Jason Stone to openssh-unix-dev, 5 May 2001) |
| 74 | - pdksh: ? |
| 75 | This appears to affect NetKit rsh under Linux as well: it behaves the same |
| 76 | with 'sleep 20 & exit'. |
Ben Lindstrom | a15e39b | 2000-12-02 04:58:57 +0000 | [diff] [blame] | 77 | |
Damien Miller | b848158 | 2000-12-03 11:51:51 +1100 | [diff] [blame] | 78 | - Build an automated test suite |
| 79 | |
Kevin Steves | 55fb9a9 | 2001-03-19 14:58:47 +0000 | [diff] [blame] | 80 | - 64-bit builds on HP-UX 11.X (stevesk@pobox.com): |
| 81 | - utmp/wtmp get corrupted (something in loginrec?) |
Kevin Steves | 55fb9a9 | 2001-03-19 14:58:47 +0000 | [diff] [blame] | 82 | - can't build with PAM (no 64-bit libpam yet) |
| 83 | |
Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 84 | Documentation: |
| 85 | - More and better |
| 86 | |
| 87 | - Install FAQ? |
| 88 | |
| 89 | - General FAQ on S/Key, TIS, RSA, RSA2, DSA, etc and suggestions on when it |
| 90 | would be best to use them. |
| 91 | |
| 92 | - Create a Documentation/ directory? |
| 93 | |
| 94 | Clean up configure/makefiles: |
Tim Rice | b89e694 | 2001-10-29 18:50:39 -0800 | [diff] [blame] | 95 | - Clean up configure.ac - There are a few double #defined variables |
Damien Miller | dd97de7 | 2001-03-05 23:33:24 +1100 | [diff] [blame] | 96 | left to do. HAVE_LOGIN is one of them. Consider NOT looking for |
| 97 | information in wtmpx or utmpx or any of that stuff if it's not detected |
| 98 | from the start |
Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 99 | |
Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 100 | - Fails to compile when cross compile. |
| 101 | (vinschen@redhat.com) |
| 102 | |
| 103 | - Replace the whole u_intXX_t evilness in acconfig.h with something better??? |
Damien Miller | 4790772 | 2003-01-13 10:00:34 +1100 | [diff] [blame] | 104 | - Do it in configure.ac |
Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 105 | |
Ben Lindstrom | 28bfc0d | 2000-12-18 19:58:57 +0000 | [diff] [blame] | 106 | - Consider splitting the u_intXX_t test for sys/bitype.h into seperate test |
| 107 | to allow people to (right/wrongfully) link against Bind directly. |
| 108 | |
Damien Miller | c68d433 | 2002-01-22 22:26:20 +1100 | [diff] [blame] | 109 | - Consider splitting configure.ac into seperate files which do logically |
| 110 | similar tests. E.g move all the type detection stuff into one file, |
| 111 | entropy related stuff into another. |
| 112 | |
Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 113 | Packaging: |
| 114 | - Solaris: Update packaging scripts and build new sysv startup scripts |
Damien Miller | dd97de7 | 2001-03-05 23:33:24 +1100 | [diff] [blame] | 115 | Ideally the package metadata should be generated by autoconf. |
Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 116 | (gilbert.r.loomis@saic.com) |
| 117 | |
Kevin Steves | 55fb9a9 | 2001-03-19 14:58:47 +0000 | [diff] [blame] | 118 | - HP-UX: Provide DEPOT package scripts. |
Ben Lindstrom | 4a1d916 | 2000-11-21 10:45:31 +0000 | [diff] [blame] | 119 | (gilbert.r.loomis@saic.com) |
Damien Miller | e9cf357 | 2001-02-09 12:55:35 +1100 | [diff] [blame] | 120 | |
Ben Lindstrom | aa83b98 | 2002-06-25 02:28:22 +0000 | [diff] [blame] | 121 | |
| 122 | PrivSep Issues: |
| 123 | - mmap() issues. |
Ben Lindstrom | acfef05 | 2002-06-25 14:14:30 +0000 | [diff] [blame] | 124 | + /dev/zero solution (Solaris) |
| 125 | + No/broken MAP_ANON (Irix) |
| 126 | + broken /dev/zero parse (Linux) |
Ben Lindstrom | aa83b98 | 2002-06-25 02:28:22 +0000 | [diff] [blame] | 127 | - PAM |
| 128 | + See above PAM notes |
| 129 | - AIX |
Ben Lindstrom | b129be6 | 2002-06-25 17:12:26 +0000 | [diff] [blame] | 130 | + usrinfo() does not set TTY, but only required for legicy systems. Works |
| 131 | with PrivSep. |
Ben Lindstrom | aa83b98 | 2002-06-25 02:28:22 +0000 | [diff] [blame] | 132 | - OSF |
| 133 | + SIA is broken |
Ben Lindstrom | 2f0de48 | 2002-06-25 14:01:55 +0000 | [diff] [blame] | 134 | - Cygwin |
| 135 | + Privsep for Pre-auth only (no fd passing) |
Ben Lindstrom | aa83b98 | 2002-06-25 02:28:22 +0000 | [diff] [blame] | 136 | |
Damien Miller | 4790772 | 2003-01-13 10:00:34 +1100 | [diff] [blame] | 137 | $Id: TODO,v 1.53 2003/01/12 23:00:34 djm Exp $ |