Gitiles
Code Review Sign In
gerrit-public.fairphone.software / platform / external / openssh / a8e06cef35c205e1aa562513c6d034a10c8c9a6d / . / TODO
blob: 03e268594d24d451e41b0514f449585398458149 [file] [log] [blame]
Damien Miller0b8e9002003-05-18 21:44:07 +1000[diff] [blame]1Documentation:
2
3- Update the docs
4 - Update README
5 - Update INSTALL
6 - Merge INSTALL & README.privsep
7
8- Install FAQ?
9
10- General FAQ on S/Key, TIS, RSA, RSA2, DSA, etc and suggestions on when it
Damien Millera8e06ce2003-11-21 23:48:55 +1100[diff] [blame^]11 would be best to use them.
Damien Miller0b8e9002003-05-18 21:44:07 +1000[diff] [blame]12
13- Create a Documentation/ directory?
14
Ben Lindstrom4a1d9162000-11-21 10:45:31 +0000[diff] [blame]15Programming:
Damien Miller0b8e9002003-05-18 21:44:07 +1000[diff] [blame]16
Damien Miller33804262001-02-04 23:20:18 +1100[diff] [blame]17- Grep for 'XXX' comments and fix
18
Damien Miller883631b2001-03-21 11:12:55 +1100[diff] [blame]19- Link order is incorrect for some systems using Kerberos 4 and AFS. Result
Damien Millera8e06ce2003-11-21 23:48:55 +1100[diff] [blame^]20 is multiple inclusion of DES symbols. Holger Trapp
Damien Miller771bbac2001-03-27 16:10:22 +1000[diff] [blame]21 <holger.trapp@hrz.tu-chemnitz.de> reports that changing the configure
22 generated link order from:
23 -lresolv -lkrb -lz -lnsl -lutil -lkafs -lkrb -ldes -lcrypto
24 to:
25 -lresolv -lkrb -lz -lnsl -lutil -lcrypto -lkafs -lkrb -ldes
26 fixing the problem.
Damien Miller883631b2001-03-21 11:12:55 +1100[diff] [blame]27
Damien Millerb8b8ecf2001-02-08 10:47:43 +1100[diff] [blame]28- Write a test program that calls stat() to search for EGD/PRNGd socket
Damien Millera8e06ce2003-11-21 23:48:55 +1100[diff] [blame^]29 rather than use the (non-portable) "test -S".
Damien Millerb8b8ecf2001-02-08 10:47:43 +1100[diff] [blame]30
Damien Millera8ed44b2003-01-10 09:53:12 +1100[diff] [blame]31- More platforms for for setproctitle() emulation (testing needed)
Damien Miller356a0b01999-11-08 15:30:59 +1100[diff] [blame]32
Damien Millerdd97de72001-03-05 23:33:24 +1100[diff] [blame]33- Handle changing passwords for the non-PAM expired password case
34
Damien Millerc7b38ce1999-11-09 10:28:04 +1100[diff] [blame]35- Improve PAM support (a pam_lastlog module will cause sshd to exit)
Damien Miller53998382002-09-05 16:32:02 +1000[diff] [blame]36 and maybe support alternate forms of authentications like OPIE via
Ben Lindstromc72745a2000-12-02 19:03:54 +0000[diff] [blame]37 pam?
Damien Miller356a0b01999-11-08 15:30:59 +1100[diff] [blame]38
Damien Miller0b8e9002003-05-18 21:44:07 +1000[diff] [blame]39- Improve PAM ChallengeResponseAuthentication
40 - Informational messages
41 - chauthtok
Damien Millerdd97de72001-03-05 23:33:24 +1100[diff] [blame]42 - Use different PAM service name for kbdint vs regular auth (suggest from
43 Solar Designer)
44 - Ability to select which ChallengeResponseAuthentications may be used
45 and order to try them in e.g. "ChallengeResponseAuthentication skey, pam"
46
Damien Millerad833b32000-08-23 10:46:23 +1000[diff] [blame]47- Complete Tru64 SIA support
Damien Millerfdbcb5d2001-09-25 13:01:49 +1000[diff] [blame]48 - It looks like we could merge it into the password auth code to cut down
49 on diff size. Maybe PAM password auth too?
Ben Lindstrom4a1d9162000-11-21 10:45:31 +0000[diff] [blame]50
51- Finish integrating kernel-level auditing code for IRIX and SOLARIS
52 (Gilbert.r.loomis@saic.com)
53
Kevin Steves55fb9a92001-03-19 14:58:47 +0000[diff] [blame]54- 64-bit builds on HP-UX 11.X (stevesk@pobox.com):
55 - utmp/wtmp get corrupted (something in loginrec?)
Kevin Steves55fb9a92001-03-19 14:58:47 +0000[diff] [blame]56 - can't build with PAM (no 64-bit libpam yet)
57
Ben Lindstrom4a1d9162000-11-21 10:45:31 +0000[diff] [blame]58Clean up configure/makefiles:
Tim Riceb89e6942001-10-29 18:50:39 -0800[diff] [blame]59- Clean up configure.ac - There are a few double #defined variables
Damien Millerdd97de72001-03-05 23:33:24 +1100[diff] [blame]60 left to do. HAVE_LOGIN is one of them. Consider NOT looking for
61 information in wtmpx or utmpx or any of that stuff if it's not detected
62 from the start
Ben Lindstrom4a1d9162000-11-21 10:45:31 +0000[diff] [blame]63
Damien Miller0b8e9002003-05-18 21:44:07 +1000[diff] [blame]64- Fails to compile when cross compile. (vinschen@redhat.com)
Ben Lindstrom4a1d9162000-11-21 10:45:31 +0000[diff] [blame]65
66- Replace the whole u_intXX_t evilness in acconfig.h with something better???
Damien Miller47907722003-01-13 10:00:34 +1100[diff] [blame]67 - Do it in configure.ac
Ben Lindstrom4a1d9162000-11-21 10:45:31 +0000[diff] [blame]68
Ben Lindstrom28bfc0d2000-12-18 19:58:57 +0000[diff] [blame]69- Consider splitting the u_intXX_t test for sys/bitype.h into seperate test
70 to allow people to (right/wrongfully) link against Bind directly.
71
Damien Millerc68d4332002-01-22 22:26:20 +1100[diff] [blame]72- Consider splitting configure.ac into seperate files which do logically
Damien Millera8e06ce2003-11-21 23:48:55 +1100[diff] [blame^]73 similar tests. E.g move all the type detection stuff into one file,
Damien Millerc68d4332002-01-22 22:26:20 +1100[diff] [blame]74 entropy related stuff into another.
75
Ben Lindstrom4a1d9162000-11-21 10:45:31 +0000[diff] [blame]76Packaging:
77- Solaris: Update packaging scripts and build new sysv startup scripts
Damien Millerdd97de72001-03-05 23:33:24 +1100[diff] [blame]78 Ideally the package metadata should be generated by autoconf.
Ben Lindstrom4a1d9162000-11-21 10:45:31 +0000[diff] [blame]79 (gilbert.r.loomis@saic.com)
80
Kevin Steves55fb9a92001-03-19 14:58:47 +0000[diff] [blame]81- HP-UX: Provide DEPOT package scripts.
Ben Lindstrom4a1d9162000-11-21 10:45:31 +0000[diff] [blame]82 (gilbert.r.loomis@saic.com)
Damien Millere9cf3572001-02-09 12:55:35 +1100[diff] [blame]83
Ben Lindstromaa83b982002-06-25 02:28:22 +0000[diff] [blame]84PrivSep Issues:
85- mmap() issues.
Ben Lindstromacfef052002-06-25 14:14:30 +0000[diff] [blame]86 + /dev/zero solution (Solaris)
87 + No/broken MAP_ANON (Irix)
88 + broken /dev/zero parse (Linux)
Damien Millera8e06ce2003-11-21 23:48:55 +1100[diff] [blame^]89- PAM
Ben Lindstromaa83b982002-06-25 02:28:22 +0000[diff] [blame]90 + See above PAM notes
91- AIX
Darren Tuckerbc976f92003-06-11 23:56:41 +1000[diff] [blame]92 + usrinfo() does not set TTY, but only required for legacy systems. Works
Ben Lindstromb129be62002-06-25 17:12:26 +0000[diff] [blame]93 with PrivSep.
Ben Lindstromaa83b982002-06-25 02:28:22 +0000[diff] [blame]94- OSF
95 + SIA is broken
Ben Lindstrom2f0de482002-06-25 14:01:55 +0000[diff] [blame]96- Cygwin
97 + Privsep for Pre-auth only (no fd passing)
Ben Lindstromaa83b982002-06-25 02:28:22 +0000[diff] [blame]98
Damien Millera8e06ce2003-11-21 23:48:55 +1100[diff] [blame^]99$Id: TODO,v 1.56 2003/11/21 12:48:55 djm Exp $