Replace modular version with origin BSDi version with our updates.
In 2001 login_passwd was made modular so we could use the same
source for passwd and kerberos auth. Now that we no longer have
kerb

Replace modular version with origin BSDi version with our updates.
In 2001 login_passwd was made modular so we could use the same
source for passwd and kerberos auth. Now that we no longer have
kerberos integrated we can simplify login_passwd. OK deraadt@

show more ...

Remove #ifdef PASSWD, it was always enabled and is a leftover from krb5 days.

No other uses of -DPASSWD were found in the tree.

OK deraadt@ tb@ brynet@

Don't compile pwd_gensalt, it's not needed since we use crypt_checkpass.

ok tedu@

Foil potential timing attacks by using the correct password hash
instead of "xx". In practice this means bcrypt() will be used for
non-existent users instead of DES crypt().
Adapted from a patch by

Foil potential timing attacks by using the correct password hash
instead of "xx". In practice this means bcrypt() will be used for
non-existent users instead of DES crypt().
Adapted from a patch by Peter Philipp. OK deraadt@

show more ...

login_passwd needs to be setuid root after all for "secure" YP maps.

login_passwd is now setgid _shadow instead of setuid root.

Cleanup and unify login_passwd, login_krb4, login_krb4-or-pwd, login_krb5 and
login_krb5-or-pwd.

passwd login script; authenticates the user via passwd/yp
will be used when BSD authentication is enabled