- djm@cvs.openbsd.org 2010/01/30 02:54:53

[openssh.git] / TODO

diff --git a/TODO b/TODO
index 484e8f81bf0b625815daae0cae798a8b8cc2f25b..06f1fe53a07c3dde7b0a28302a7cdd3db138c8ba 100644 (file)
--- a/TODO
+++ b/TODO
@@ -8,7 +8,7 @@ Documentation:
 - Install FAQ?
 
 - General FAQ on S/Key, TIS, RSA, RSA2, DSA, etc and suggestions on when it
 - Install FAQ?
 
 - General FAQ on S/Key, TIS, RSA, RSA2, DSA, etc and suggestions on when it

-  would be best to use them.  
+  would be best to use them.

 
 - Create a Documentation/ directory?
 
 
 - Create a Documentation/ directory?
 


@@ -17,7 +17,7 @@ Programming:
 - Grep for 'XXX' comments and fix
 
 - Link order is incorrect for some systems using Kerberos 4 and AFS. Result
 - Grep for 'XXX' comments and fix
 
 - Link order is incorrect for some systems using Kerberos 4 and AFS. Result

-  is multiple inclusion of DES symbols. Holger Trapp 
+  is multiple inclusion of DES symbols. Holger Trapp

   <holger.trapp@hrz.tu-chemnitz.de> reports that changing the configure
   generated link order from:
        -lresolv -lkrb -lz -lnsl  -lutil -lkafs -lkrb -ldes -lcrypto
   <holger.trapp@hrz.tu-chemnitz.de> reports that changing the configure
   generated link order from:
        -lresolv -lkrb -lz -lnsl  -lutil -lkafs -lkrb -ldes -lcrypto


@@ -26,19 +26,12 @@ Programming:
   fixing the problem.
 
 - Write a test program that calls stat() to search for EGD/PRNGd socket
   fixing the problem.
 
 - Write a test program that calls stat() to search for EGD/PRNGd socket

-  rather than use the (non-portable) "test -S". 
+  rather than use the (non-portable) "test -S".

 
 - More platforms for for setproctitle() emulation (testing needed)
 
 
 - More platforms for for setproctitle() emulation (testing needed)
 

-- Handle changing passwords for the non-PAM expired password case
-
-- Improve PAM support (a pam_lastlog module will cause sshd to exit)
-  and maybe support alternate forms of authentications like OPIE via
-  pam?
-

 - Improve PAM ChallengeResponseAuthentication
  - Informational messages
 - Improve PAM ChallengeResponseAuthentication
  - Informational messages

- - chauthtok

  - Use different PAM service name for kbdint vs regular auth (suggest from
    Solar Designer)
  - Ability to select which ChallengeResponseAuthentications may be used
  - Use different PAM service name for kbdint vs regular auth (suggest from
    Solar Designer)
  - Ability to select which ChallengeResponseAuthentications may be used


@@ -61,8 +54,6 @@ Clean up configure/makefiles:
   information in wtmpx or utmpx or any of that stuff if it's not detected
   from the start
 
   information in wtmpx or utmpx or any of that stuff if it's not detected
   from the start
 

-- Fails to compile when cross compile. (vinschen@redhat.com)
-

 - Replace the whole u_intXX_t evilness in acconfig.h with something better???
  - Do it in configure.ac
 
 - Replace the whole u_intXX_t evilness in acconfig.h with something better???
  - Do it in configure.ac
 


@@ -70,14 +61,10 @@ Clean up configure/makefiles:
   to allow people to (right/wrongfully) link against Bind directly.
 
 - Consider splitting configure.ac into seperate files which do logically
   to allow people to (right/wrongfully) link against Bind directly.
 
 - Consider splitting configure.ac into seperate files which do logically

-  similar tests. E.g move all the type detection stuff into one file, 
+  similar tests. E.g move all the type detection stuff into one file,

   entropy related stuff into another.
 
 Packaging:
   entropy related stuff into another.
 
 Packaging:

-- Solaris: Update packaging scripts and build new sysv startup scripts
-  Ideally the package metadata should be generated by autoconf.
-  (gilbert.r.loomis@saic.com)
-

 - HP-UX: Provide DEPOT package scripts.
   (gilbert.r.loomis@saic.com)
 
 - HP-UX: Provide DEPOT package scripts.
   (gilbert.r.loomis@saic.com)
 


@@ -86,7 +73,7 @@ PrivSep Issues:
   + /dev/zero solution (Solaris)
   + No/broken MAP_ANON (Irix)
   + broken /dev/zero parse (Linux)
   + /dev/zero solution (Solaris)
   + No/broken MAP_ANON (Irix)
   + broken /dev/zero parse (Linux)

-- PAM 
+- PAM

   + See above PAM notes
 - AIX
   + usrinfo() does not set TTY, but only required for legacy systems.  Works
   + See above PAM notes
 - AIX
   + usrinfo() does not set TTY, but only required for legacy systems.  Works