]> andersk Git - gssapi-openssh.git/blame - openssh/TODO
Import of OpenSSH 3.8p1
[gssapi-openssh.git] / openssh / TODO
CommitLineData
0fff78ff 1Documentation:
2
3- Update the docs
4 - Update README
5 - Update INSTALL
6 - Merge INSTALL & README.privsep
7
8- Install FAQ?
9
10- General FAQ on S/Key, TIS, RSA, RSA2, DSA, etc and suggestions on when it
cdd66111 11 would be best to use them.
0fff78ff 12
13- Create a Documentation/ directory?
14
3c0ef626 15Programming:
0fff78ff 16
3c0ef626 17- Grep for 'XXX' comments and fix
18
19- Link order is incorrect for some systems using Kerberos 4 and AFS. Result
cdd66111 20 is multiple inclusion of DES symbols. Holger Trapp
3c0ef626 21 <holger.trapp@hrz.tu-chemnitz.de> reports that changing the configure
22 generated link order from:
23 -lresolv -lkrb -lz -lnsl -lutil -lkafs -lkrb -ldes -lcrypto
24 to:
25 -lresolv -lkrb -lz -lnsl -lutil -lcrypto -lkafs -lkrb -ldes
26 fixing the problem.
27
28- Write a test program that calls stat() to search for EGD/PRNGd socket
cdd66111 29 rather than use the (non-portable) "test -S".
3c0ef626 30
6a9b3198 31- More platforms for for setproctitle() emulation (testing needed)
3c0ef626 32
3c0ef626 33- Improve PAM support (a pam_lastlog module will cause sshd to exit)
41b2f314 34 and maybe support alternate forms of authentications like OPIE via
3c0ef626 35 pam?
36
0fff78ff 37- Improve PAM ChallengeResponseAuthentication
38 - Informational messages
39 - chauthtok
3c0ef626 40 - Use different PAM service name for kbdint vs regular auth (suggest from
41 Solar Designer)
42 - Ability to select which ChallengeResponseAuthentications may be used
43 and order to try them in e.g. "ChallengeResponseAuthentication skey, pam"
44
45- Complete Tru64 SIA support
46 - It looks like we could merge it into the password auth code to cut down
47 on diff size. Maybe PAM password auth too?
48
49- Finish integrating kernel-level auditing code for IRIX and SOLARIS
50 (Gilbert.r.loomis@saic.com)
51
3c0ef626 52- 64-bit builds on HP-UX 11.X (stevesk@pobox.com):
53 - utmp/wtmp get corrupted (something in loginrec?)
54 - can't build with PAM (no 64-bit libpam yet)
55
3c0ef626 56Clean up configure/makefiles:
57- Clean up configure.ac - There are a few double #defined variables
58 left to do. HAVE_LOGIN is one of them. Consider NOT looking for
59 information in wtmpx or utmpx or any of that stuff if it's not detected
60 from the start
61
0fff78ff 62- Fails to compile when cross compile. (vinschen@redhat.com)
3c0ef626 63
64- Replace the whole u_intXX_t evilness in acconfig.h with something better???
6a9b3198 65 - Do it in configure.ac
3c0ef626 66
67- Consider splitting the u_intXX_t test for sys/bitype.h into seperate test
68 to allow people to (right/wrongfully) link against Bind directly.
69
e9a17296 70- Consider splitting configure.ac into seperate files which do logically
cdd66111 71 similar tests. E.g move all the type detection stuff into one file,
e9a17296 72 entropy related stuff into another.
73
3c0ef626 74Packaging:
75- Solaris: Update packaging scripts and build new sysv startup scripts
76 Ideally the package metadata should be generated by autoconf.
77 (gilbert.r.loomis@saic.com)
78
79- HP-UX: Provide DEPOT package scripts.
80 (gilbert.r.loomis@saic.com)
81
680cee3b 82PrivSep Issues:
83- mmap() issues.
84 + /dev/zero solution (Solaris)
85 + No/broken MAP_ANON (Irix)
86 + broken /dev/zero parse (Linux)
cdd66111 87- PAM
680cee3b 88 + See above PAM notes
89- AIX
0fff78ff 90 + usrinfo() does not set TTY, but only required for legacy systems. Works
680cee3b 91 with PrivSep.
92- OSF
93 + SIA is broken
94- Cygwin
95 + Privsep for Pre-auth only (no fd passing)
96
3c0ef626 97$Id$
This page took 0.12175 seconds and 5 git commands to generate.