Imported from conserver-8.1.1.tar.gz

Imported from conserver-8.1.0.tar.gz
Imported from conserver-8.0.9.tar.gz
2025-06-24 17:55:08 +00:00 · 2004-02-10 07:26:45 -08:00 · 2004-01-18 09:31:24 -08:00 · 2003-12-10 10:37:48 -08:00 · 2003-12-02 08:40:59 -08:00 · 2003-11-20 06:49:09 -08:00
45 changed files with 3193 additions and 1522 deletions
--- a/55
+++ b/55
@ -1,6 +1,59 @@
 				CHANGES
 				=======

+version 8.1.1 (Feb 10, 2004):
+	- fixed mistake in Makefiles where rpmbuild fails - reported by
+	  Martin Evans <m.d.t.evans@qmul.ac.uk>
+	- fixed a couple typos - reported by Matt Selsky
+	  <selsky@columbia.edu>
+
+version 8.1.0 (Jan 18, 2004):
+	- fixes for HP-UX compilation - patch by Petter Reinholdtsen
+	  <pere@hungry.com>
+	- fixes for compilation under various operating systems -
+	  patch by Albert Chin <conserver-users@mlists.thewrittenword.com>
+	- added a 'protocol' option for either 'telnet' or 'raw' socket
+	  communication - also reflected in -i output
+	- changed the client/server protocol to use 0xff as a command
+	  character for sending control commands - similiar to the
+	  telnet protocol - improves the ^Ec| interaction
+	- client -E option now disables ssl encryption attempts, useful
+	  for broken SSL environents - suggested by Graydon Dodson
+	  <grdodson@lexmark.com>
+	- bad error message connecting non-ssl client with ssl-required
+	  server - reported by Graydon Dodson <grdodson@lexmark.com>
+	- added note about pam configuration to conserver.passwd.man -
+	  suggested by Erik Sjolund <erik.sjolund@sbc.su.se>
+	- improved telnet protocol option handling such that connections
+	  to standard telnet ports should work properly
+
+version 8.0.9 (Dec 10, 2003):
+	- fixed major bug in connect() handling which causes most
+	  socket-based consoles to timeout after 10 seconds - reported
+	  by Tom Rataski <trataski@intlsteel.com> 
+	- added a couple details to the 'logfilemax' manpage entry
+
+version 8.0.8 (Dec 2, 2003):
+	- added client ^Ec| sequence for running a command on the client
+	  and having it's I/O directed to the console - inspired by
+	  discussions with David Williamson
+	  <david+conserver@williamsons.net> years ago  ;-)
+	- touched up Makefiles to test against .h files
+	- fixed inability to replay the console log while the console is
+	  down - reported by Matt Selsky <selsky@columbia.edu>
+	- added a console 'logfilemax' option for rotating the console
+	  logfile once the file is greater than the specified size
+	- added sample configuration files to conserver.cf/samples
+	- tweaked some failure messages and initcmd notifications
+
+version 8.0.7 (Nov 20, 2003):
+	- renamed util.[ch] to cutil.[ch] to prevent name conflict with
+	  system util.h, reordered some #includes, and fixed a configure
+	  test for sys/proc.h to build on OpenBSD 3.4 (and probably
+	  others) - reported by Kurt Raschke <kurt@raschke.net>
+	- fixed missing semi-colon for cygwin build - reported by
+	  Raymond Richmond <raymond.richmond@ualberta.ca>
+
 version 8.0.6 (Nov 16, 2003):
 	- code was missing regarding the 'setproctitle' option - patch
 	  by Dmitry Morozovsky <marck@rinet.ru>
@ -616,5 +669,5 @@ before version 6.05:
 	  and enhancements of various types were applied.

 #
-#  $Id: CHANGES,v 1.131 2003/11/15 23:57:18 bryan Exp $
+#  $Id: CHANGES,v 1.150 2004/02/10 15:24:48 bryan Exp $
 #
--- a/10
+++ b/10
@ -10,6 +10,14 @@ Upgrading?
    new features added to the client if you're considering *not*
    upgrading.

+    Version 8.1.0
+
+	- The client/server protocol has changed to better protect 8-bit
+	  data and to allow programs invoked with '^Ec|' not have to
+	  worry about accidentally sending the escape sequence to the
+	  server.  Though it will look like things are mostly
+	  backward-compatible, don't count on it and just upgrade.
+
    Version 8.0.2

 	- I've added a '^Ec;' sequence to allow the client to signal the
@ -255,5 +263,5 @@ Other Information And Gotchas


 #
-#  $Id: INSTALL,v 1.34 2003/10/03 17:52:31 bryan Exp $
+#  $Id: INSTALL,v 1.35 2003/12/25 19:21:59 bryan Exp $
 #
--- a/26
+++ b/26
@ -11,13 +11,10 @@ Bryan Stansell
 ---------------------------------------------------------------------------

 - Telnet protocol should be improved
-    - Not even RFC 854 compliant
-    - Option negotiation ignored - should we negotiate anything?
+    - Not even RFC 854 compliant...or maybe it is (as of 8.1.0)
+    - Option negotiation semi-ignored - should we negotiate anything more?
    - Others?

- better shadow file support
-    - what does this mean?  i've forgotten.
-
 - syslog?
    Daniel E. Singer <des@cs.duke.edu> would like to see it - especially
    in regards to --use-libwrap code
@ -27,14 +24,20 @@ Bryan Stansell
    - hpux has bigcrypt() also, which we support, so maybe we're covered

 - config file examples for various configurations
+    - sample conserver.cf has some...but it's not explained well

 - per-line timestamps
    - only when not connected?

 - pipe input/output (console <-> program) via 'console'
    - some apps (net-ups thing, gdb) might need to talk to user
+    - ^Ec| does this, but the interact with user bits might not work
+    - actually, ^Ec| does work right with 8.1.0...one change that might
+      be nice is the ability to NOT watch the i/o pass to the local
+      command - try sending a big file to the local host with xmodem.

 - autologout?  setting per console?  gack, would have to interpret data.
+    - this will never happen...i don't want to interpret data

 - "listen" capability (watch all/multiple consoles)

@ -47,6 +50,7 @@ Bryan Stansell
    - passphrase...hmmm..could really use some sort of send/expect
      thing here.  you could write a wrapper script of sorts, but it
      really would be nice to have a raw socket and do the right thing.
+    - this does work, using the 'initcmd' option, so, all done?

 - cyclades ts1000/2000 port : "Moses, Joel" <jmoses@deloitte.com>

@ -58,8 +62,7 @@ Bryan Stansell

 - server -M flag should accept multiple addresses (comma separated)
    - should client as well?
-
- logfile rotation based on size
+    - this may never happen...does anyone really need it?

 - automatic log rotation in general : Egan Ford <egan@us.ibm.com>

@ -70,6 +73,7 @@ Bryan Stansell

 - suggestions by Trevor Fiatal <trevor@seven.com>
    - include server hostname on 'console -x' output
+	- i think the -i output covers it, but maybe not

 - ability to configure strings to be sent to a console periodically :
  Greg A. Woods <woods@planix.com>
@ -79,13 +83,17 @@ Bryan Stansell

 - redefine client escape sequence in conserver.cf : Toby Gerhart
  <toby.gerhart@eds.com>
+    - not even sure if this is possible w/o confusing the client,
+      but maybe with the new 8.1.0 client-server protocol, we can!

 - send a string when connected to a console, so you can set the
  xterm title, for example : Richard Threadgill <richardt@tellme.com>
+    - this probably requires a client config file, so could play well
+      with the client config file requirement above

- allows for very long replays (hundres of lines) : John Stoffel
+- allow for very long replays (hundres of lines) : John Stoffel
  <stoffel@lucent.com>

 #
-#  $Id: TODO,v 1.42 2003/11/15 17:08:15 bryan Exp $
+#  $Id: TODO,v 1.45 2004/01/28 14:57:39 bryan Exp $
 #
--- a/autologin/Makefile.in
+++ b/autologin/Makefile.in
@ -31,6 +31,8 @@ ALL = autologin

 all: $(ALL)

+$(AUTOLOGIN_OBJS): $(AUTOLOGIN_HDRS)
+
 autologin: $(AUTOLOGIN_OBJS)
 	$(CC) $(CFLAGS) $(LDFLAGS) -o autologin $(AUTOLOGIN_OBJS) $(LIBS)

--- a/compat.h
+++ b/compat.h
@ -7,8 +7,8 @@
 #include <sys/file.h>
 #include <sys/stat.h>
 #include <fcntl.h>
-#include <arpa/inet.h>
 #include <netinet/in.h>
+#include <arpa/inet.h>
 #include <netdb.h>
 #include <ctype.h>
 #include <signal.h>
@ -287,6 +287,10 @@ typedef int socklen_t;
 #define ONLRET 0
 #endif

+#ifndef SEEK_SET
+#define SEEK_SET L_SET
+#endif
+
 #ifndef PARAMS
 # if PROTOTYPES
 #  define PARAMS(protos) protos
--- a/config.guess
+++ b/config.guess
@ -3,7 +3,7 @@
 #   Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999,
 #   2000, 2001, 2002, 2003 Free Software Foundation, Inc.

-timestamp='2003-10-16'
+timestamp='2004-02-02'

 # This file is free software; you can redistribute it and/or modify it
 # under the terms of the GNU General Public License as published by
@ -239,6 +239,9 @@ case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
    *:OpenBSD:*:*)
 	echo ${UNAME_MACHINE}-unknown-openbsd${UNAME_RELEASE}
 	exit 0 ;;
+    *:ekkoBSD:*:*)
+	echo ${UNAME_MACHINE}-unknown-ekkobsd${UNAME_RELEASE}
+	exit 0 ;;
    alpha:OSF1:*:*)
 	if test $UNAME_RELEASE = "V4.0"; then
 		UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $3}'`
@ -405,6 +408,9 @@ case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
    *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*)
        echo m68k-unknown-mint${UNAME_RELEASE}
        exit 0 ;;
+    m68k:machten:*:*)
+	echo m68k-apple-machten${UNAME_RELEASE}
+	exit 0 ;;
    powerpc:machten:*:*)
 	echo powerpc-apple-machten${UNAME_RELEASE}
 	exit 0 ;;
@ -997,6 +1003,9 @@ EOF
    i*86:atheos:*:*)
 	echo ${UNAME_MACHINE}-unknown-atheos
 	exit 0 ;;
+	i*86:syllable:*:*)
+	echo ${UNAME_MACHINE}-pc-syllable
+	exit 0 ;;
    i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.0*:*)
 	echo i386-unknown-lynxos${UNAME_RELEASE}
 	exit 0 ;;
@ -1183,7 +1192,7 @@ EOF
    *:QNX:*:4*)
 	echo i386-pc-qnx
 	exit 0 ;;
-    NSR-[DGKLNPTVWY]:NONSTOP_KERNEL:*:*)
+    NSR-?:NONSTOP_KERNEL:*:*)
 	echo nsr-tandem-nsk${UNAME_RELEASE}
 	exit 0 ;;
    *:NonStop-UX:*:*)
@ -1227,6 +1236,9 @@ EOF
    SEI:*:*:SEIUX)
        echo mips-sei-seiux${UNAME_RELEASE}
 	exit 0 ;;
+    *:DragonFly:*:*)
+	echo ${UNAME_MACHINE}-unknown-dragonfly`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`
+	exit 0 ;;
 esac

 #echo '(No uname command or uname output not recognized.)' 1>&2
--- a/config.h.in
+++ b/config.h.in
@ -207,6 +207,9 @@
 /* Define to 1 if you have the <sys/ioctl.h> header file. */
 #undef HAVE_SYS_IOCTL_H

+/* Define to 1 if you have the <sys/param.h> header file. */
+#undef HAVE_SYS_PARAM_H
+
 /* Define to 1 if you have the <sys/proc.h> header file. */
 #undef HAVE_SYS_PROC_H

@ -345,3 +348,6 @@

 /* Define if <signal.h> does not define sig_atomic_t */
 #undef sig_atomic_t
+
+/* Define to `unsigned' if <sys/types.h> does not define. */
+#undef size_t
--- a/config.sub
+++ b/config.sub
@ -3,7 +3,7 @@
 #   Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999,
 #   2000, 2001, 2002, 2003 Free Software Foundation, Inc.

-timestamp='2003-11-03'
+timestamp='2004-02-02'

 # This file is (in principle) common to ALL GNU software.
 # The presence of a machine in this file suggests that SOME GNU software
@ -380,6 +380,9 @@ case $basic_machine in
 	amd64)
 		basic_machine=x86_64-pc
 		;;
+	amd64-*)
+		basic_machine=x86_64-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
 	amdahl)
 		basic_machine=580-amdahl
 		os=-sysv
@ -1140,8 +1143,8 @@ case $os in
 	      | -aos* \
 	      | -nindy* | -vxsim* | -vxworks* | -ebmon* | -hms* | -mvs* \
 	      | -clix* | -riscos* | -uniplus* | -iris* | -rtu* | -xenix* \
-	      | -hiux* | -386bsd* | -knetbsd* | -netbsd* | -openbsd* | -kfreebsd* | -freebsd* | -riscix* \
-	      | -lynxos* | -bosx* | -nextstep* | -cxux* | -aout* | -elf* | -oabi* \
+	      | -hiux* | -386bsd* | -knetbsd* | -netbsd* | -openbsd* | -ekkobsd* | -kfreebsd* | -freebsd* \
+	      | -riscix* | -lynxos* | -bosx* | -nextstep* | -cxux* | -aout* | -elf* | -oabi* \
 	      | -ptx* | -coff* | -ecoff* | -winnt* | -domain* | -vsta* \
 	      | -udi* | -eabi* | -lites* | -ieee* | -go32* | -aux* \
 	      | -chorusos* | -chorusrdb* \
@ -1152,7 +1155,7 @@ case $os in
 	      | -storm-chaos* | -tops10* | -tenex* | -tops20* | -its* \
 	      | -os2* | -vos* | -palmos* | -uclinux* | -nucleus* \
 	      | -morphos* | -superux* | -rtmk* | -rtmk-nova* | -windiss* \
-	      | -powermax* | -dnix* | -nx6 | -nx7 | -sei*)
+	      | -powermax* | -dnix* | -nx6 | -nx7 | -sei* | -dragonfly*)
 	# Remember, each alternative MUST END IN *, to match a version number.
 		;;
 	-qnx*)
@ -1215,6 +1218,9 @@ case $os in
 	-atheos*)
 		os=-atheos
 		;;
+	-syllable*)
+		os=-syllable
+		;;
 	-386bsd)
 		os=-bsd
 		;;
--- a/114
+++ b/114
@ -3485,7 +3485,7 @@ fi



-for ac_header in unistd.h getopt.h sys/vlimit.h sys/resource.h ttyent.h sys/ttold.h sys/uio.h sys/proc.h sys/ioctl_compat.h usersec.h sys/select.h stropts.h sys/audit.h shadow.h sys/time.h crypt.h sysexits.h types.h sys/sockio.h
+for ac_header in unistd.h getopt.h sys/vlimit.h sys/resource.h ttyent.h sys/ttold.h sys/uio.h sys/ioctl_compat.h usersec.h sys/select.h stropts.h sys/audit.h shadow.h sys/time.h crypt.h sysexits.h types.h sys/sockio.h sys/param.h
 do
 as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
 if eval "test \"\${$as_ac_Header+set}\" = set"; then
@ -3626,6 +3626,61 @@ fi

 done

+
+for ac_header in sys/proc.h
+do
+as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+echo "$as_me:$LINENO: checking for $ac_header" >&5
+echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6
+if eval "test \"\${$as_ac_Header+set}\" = set"; then
+  echo $ECHO_N "(cached) $ECHO_C" >&6
+else
+  cat >conftest.$ac_ext <<_ACEOF
+#line $LINENO "configure"
+/* confdefs.h.  */
+_ACEOF
+cat confdefs.h >>conftest.$ac_ext
+cat >>conftest.$ac_ext <<_ACEOF
+/* end confdefs.h.  */
+#if HAVE_SYS_PARAM_H
+#include <sys/param.h>
+#endif
+
+
+#include <$ac_header>
+_ACEOF
+rm -f conftest.$ac_objext
+if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5
+  (eval $ac_compile) 2>&5
+  ac_status=$?
+  echo "$as_me:$LINENO: \$? = $ac_status" >&5
+  (exit $ac_status); } &&
+         { ac_try='test -s conftest.$ac_objext'
+  { (eval echo "$as_me:$LINENO: \"$ac_try\"") >&5
+  (eval $ac_try) 2>&5
+  ac_status=$?
+  echo "$as_me:$LINENO: \$? = $ac_status" >&5
+  (exit $ac_status); }; }; then
+  eval "$as_ac_Header=yes"
+else
+  echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+eval "$as_ac_Header=no"
+fi
+rm -f conftest.$ac_objext conftest.$ac_ext
+fi
+echo "$as_me:$LINENO: result: `eval echo '${'$as_ac_Header'}'`" >&5
+echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6
+if test `eval echo '${'$as_ac_Header'}'` = yes; then
+  cat >>confdefs.h <<_ACEOF
+#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+
+done
+
 echo "$as_me:$LINENO: checking whether time.h and sys/time.h may both be included" >&5
 echo $ECHO_N "checking whether time.h and sys/time.h may both be included... $ECHO_C" >&6
 if test "${ac_cv_header_time+set}" = set; then
@ -3918,6 +3973,63 @@ _ACEOF

 fi

+echo "$as_me:$LINENO: checking for size_t" >&5
+echo $ECHO_N "checking for size_t... $ECHO_C" >&6
+if test "${ac_cv_type_size_t+set}" = set; then
+  echo $ECHO_N "(cached) $ECHO_C" >&6
+else
+  cat >conftest.$ac_ext <<_ACEOF
+#line $LINENO "configure"
+/* confdefs.h.  */
+_ACEOF
+cat confdefs.h >>conftest.$ac_ext
+cat >>conftest.$ac_ext <<_ACEOF
+/* end confdefs.h.  */
+$ac_includes_default
+int
+main ()
+{
+if ((size_t *) 0)
+  return 0;
+if (sizeof (size_t))
+  return 0;
+  ;
+  return 0;
+}
+_ACEOF
+rm -f conftest.$ac_objext
+if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5
+  (eval $ac_compile) 2>&5
+  ac_status=$?
+  echo "$as_me:$LINENO: \$? = $ac_status" >&5
+  (exit $ac_status); } &&
+         { ac_try='test -s conftest.$ac_objext'
+  { (eval echo "$as_me:$LINENO: \"$ac_try\"") >&5
+  (eval $ac_try) 2>&5
+  ac_status=$?
+  echo "$as_me:$LINENO: \$? = $ac_status" >&5
+  (exit $ac_status); }; }; then
+  ac_cv_type_size_t=yes
+else
+  echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+ac_cv_type_size_t=no
+fi
+rm -f conftest.$ac_objext conftest.$ac_ext
+fi
+echo "$as_me:$LINENO: result: $ac_cv_type_size_t" >&5
+echo "${ECHO_T}$ac_cv_type_size_t" >&6
+if test $ac_cv_type_size_t = yes; then
+  :
+else
+
+cat >>confdefs.h <<_ACEOF
+#define size_t unsigned
+_ACEOF
+
+fi
+

 echo "$as_me:$LINENO: checking for sig_atomic_t" >&5
 echo $ECHO_N "checking for sig_atomic_t... $ECHO_C" >&6
--- a/configure.in
+++ b/configure.in
@ -244,12 +244,19 @@ if test "$ac_cv_sys_posix_termios" != "yes"; then
    AC_MSG_ERROR([POSIX termios interface required])
 fi

-AC_CHECK_HEADERS(unistd.h getopt.h sys/vlimit.h sys/resource.h ttyent.h sys/ttold.h sys/uio.h sys/proc.h sys/ioctl_compat.h usersec.h sys/select.h stropts.h sys/audit.h shadow.h sys/time.h crypt.h sysexits.h types.h sys/sockio.h)
+AC_CHECK_HEADERS(unistd.h getopt.h sys/vlimit.h sys/resource.h ttyent.h sys/ttold.h sys/uio.h sys/ioctl_compat.h usersec.h sys/select.h stropts.h sys/audit.h shadow.h sys/time.h crypt.h sysexits.h types.h sys/sockio.h sys/param.h)
+dnl sys/proc.h needs sys/param.h on openbsd, apparently
+AC_CHECK_HEADERS(sys/proc.h, [], [],
+[#if HAVE_SYS_PARAM_H
+#include <sys/param.h>
+#endif
+])
 AC_HEADER_TIME
 AC_HEADER_SYS_WAIT
 AC_TYPE_MODE_T
 AC_TYPE_SIGNAL
 AC_TYPE_PID_T
+AC_TYPE_SIZE_T

 AC_CHECK_TYPE([sig_atomic_t],,
    AC_DEFINE(sig_atomic_t, volatile int,
--- a/conserver.cf/Makefile.in
+++ b/conserver.cf/Makefile.in
@ -3,7 +3,8 @@ srcdir = @srcdir@
 prefix = @prefix@
 mandir = @mandir@
 sysconfdir = @sysconfdir@
-exampledir = $(prefix)/share/examples/conserver
+datadir = @datadir@
+exampledir = $(datadir)/examples/conserver

 ### Installation programs and flags
 INSTALL = @INSTALL@
--- a/conserver.cf/conserver.cf
+++ b/conserver.cf/conserver.cf
@ -14,39 +14,53 @@ default cisco	{ type host; portbase 2000; portinc 1; }
 default xyplex	{ type host; portbase 2000; portinc 100; }
 default iolan	{ type host; portbase 10000; portinc 1; }

+### set up some custom break sequences
+break 4 { string "+\d+\d+"; delay 300; }
+break 5 { string "\033c"; }
+
 ### set the defaults for all the consoles
 # these get applied before anything else
 default * {
 	# The '&' character is substituted with the console name
 	logfile /var/consoles/&;
+	# timestamps every hour with activity and break logging
 	timestamp 1hab;
+	# include the 'full' default
 	include full;
+	# master server is localhost
 	master localhost;
 }

 ### define the first terminal server
 default ts1.conserver.com {
+	# use the xyplex defaults
 	include xyplex;
+	# host to connect to is ts1.conserver.com
 	host ts1.conserver.com;
+	# run login-xyplex when connecting to the term server
 	initcmd /usr/local/sbin/login-xyplex;
 }

 # now define the consoles on ts1.conserver.com
-console web1.conserver.com { include ts1.conserver.com; port 2; }
+# bryan isn't allowed on web1.conserver.com
+console web1.conserver.com { include ts1.conserver.com; port 2; rw !bryan; }
 console ns1.conserver.com { include ts1.conserver.com; port 10; }
 console ns2.conserver.com { include ts1.conserver.com; port 8; }

 ### define the second terminal server
+# this one is a cisco, with simple socket connections
 default ts2.conserver.com { include cisco; host ts2.conserver.com; }

-# and the consoles
+# and the consoles on ts2.conserver.com
 console ldap1.conserver.com { include ts2.conserver.com; port 7; }

 ### and now some one-off consoles
+# we still inherit the '*' default set
 # a simple ssh invocation
 console ssh {
 	type exec;
 	exec ssh localhost;
+	# provide a 'message-of-the-day'
 	motd "just a simple ssh to localhost";
 }

@ -59,6 +73,38 @@ console ttya {
 	timestamp "";		# no timestamps on this console
 }

+### define a group of users
+group sysadmin {
+    users bryan, todd;
+    users dave;
+}
+
+### reset the defaults for the next set of consoles
+# again, these get applied before anything else
+default * {
+	# The '&' character is substituted with the console name
+	logfile /var/consoles/&;
+	timestamp 5m;
+	rw sysadmin;  # use the group defined above
+	master localhost;
+}
+
+default cyclades {
+	# sets up /dev/ttyC0 through /dev/ttyC31, for a 32 port card
+	type device;
+	device /dev/ttyC.;
+	devicesubst ,.d;
+	portbase -1;
+	portinc 1;
+	host none; # not really used, since devicesubst doesn't use it
+	baud 9600;
+	parity none;
+}
+
+console modem1.conserver.com { include cyclades; port 2; break 4; }
+# todd isn't allowed on modem2.conserver.com
+console modem2.conserver.com { include cyclades; port 6; rw !todd; }
+
 ### list of clients we allow
 access * {
 	allowed 10.0.0.0/8 192.168.0.0/16;
--- a/conserver.cf/conserver.cf.man
+++ b/conserver.cf/conserver.cf.man
@ -1,5 +1,5 @@
-.\" $Id: conserver.cf.man,v 1.51 2003/11/15 20:00:11 bryan Exp $
-.TH CONSERVER.CF 5 "2003/11/15" "conserver-8.0.6" "conserver"
+.\" $Id: conserver.cf.man,v 1.55 2003/12/21 16:23:03 bryan Exp $
+.TH CONSERVER.CF 5 "2003/12/21" "conserver-8.1.1" "conserver"
 .SH NAME
 conserver.cf \- console configuration file for
 .BR conserver (8)
@ -493,7 +493,12 @@ as the host to connect to for accessing the console.
 You must also set the
 .B port
 option as well.
-Only consoles of type ``host'' will use this value.
+Normally, only consoles of type ``host'' will use this value.
+If the
+.B devicesubst
+or
+.B execsubst
+keywords are used in ``device'' and ``exec'' types, this value is used.
 .TP
 .B idlestring
 .RI [ " string "
@ -559,6 +564,40 @@ will be replaced with the name of the console.
 If the null string (``""'') is used, the logfile name is unset and
 no logging will occur.
 .TP
+.B logfilemax
+.BR \fInumber\fP [ k | m ]
+.br
+Enable automatic rotation of
+.B logfile
+once it's size exceeds
+.I number
+bytes.
+Specifying
+.B k
+or
+.B m
+interpret
+.I number
+as kilobytes and megabytes.
+.I number
+must be at least 2048 bytes.
+A value of zero will turn off automatic rotation of
+.BR logfile .
+The
+.B logfile
+.I filename
+will be renamed
+.IR filename -\s-1YYYYMMDD\s0-\s-1HHMMSS\s0,
+where the extension is the current GMT year, month, day, hour,
+minute, and second (to prevent issues with clock rollbacks).
+File sizes are checked every 5 minutes with an additional initial
+pseudo-random delay of up to one minute (to help prevent all processes
+checking all consoles simultaneously).
+2.5% (minimum 100 bytes, maximum 4000 bytes) of the old
+logfile is read from the end of the file.
+All data past the first newline is moved (not copied) to the new logfile
+so that a replay of the console works and starts on a line boundary.
+.TP
 .B master
 .RI [ " hostname " | " ipaddr " ]
 .br
@ -656,7 +695,7 @@ The conserver option
 .B \-7
 will set this flag for all consoles.
 Default is
-.BR !stiphigh .
+.BR !striphigh .
 .TP
 .B reinitoncc
 Automatically reinitialize (``bring up'') a downed console when a client
@ -730,12 +769,19 @@ terminal server by their physical numbering of 1 through
 You must also set the
 .B host
 option as well.
-Only consoles of type ``host'' will use this value.
+Normally, only consoles of type ``host'' will use this value.
+If the
+.B devicesubst
+or
+.B execsubst
+keywords are used in ``device'' and ``exec'' types, this value is used.
 .TP
 .B portbase
 .I number
 .br
 Set the base value for the port calculation formula.
+.I number
+must be -1 or greater.
 The default is zero.
 See
 .B port
@ -745,11 +791,28 @@ for the details of the formula.
 .I number
 .br
 Set the increment value for the port calculation formula.
+.I number
+must be 1 or greater.
 The default is one.
 See
 .B port
 for the details of the formula.
 .TP
+.B protocol
+.RB [ " telnet " | " raw " ]
+.br
+Set the protocol used to send and receive data from the console.
+If
+.B raw
+is used, all data is sent ``as is'', unprotected by any protocol specification.
+If
+.B telnet
+is used (which is the default), data is encapsulated in the telnet protocol.
+The
+.B striphigh
+console option still applies when data is read by the server, and if enabled,
+can impact the encapsulation process.
+.TP
 .B ro
 .RI "[ [\fB!\fP]" username ,...
 | "" ]
--- a/conserver.cf/conserver.passwd.man
+++ b/conserver.cf/conserver.passwd.man
@ -1,5 +1,5 @@
-.\" $Id: conserver.passwd.man,v 1.9 2003/07/04 20:20:52 bryan Exp $
-.TH CONSERVER.PASSWD 5 "2003/07/04" "conserver-8.0.6" "conserver"
+.\" $Id: conserver.passwd.man,v 1.10 2004/01/08 16:12:33 bryan Exp $
+.TH CONSERVER.PASSWD 5 "2004/01/08" "conserver-8.1.1" "conserver"
 .SH NAME
 conserver.passwd \- user access information for
 .BR conserver (8)
@ -59,7 +59,8 @@ in the system
 If PAM support has been enabled
 .RB ( --with-pam ),
 PAM lookups will be done instead of
-.BR passwd " (or " shadow ") lookups."
+.BR passwd " (or " shadow ") lookups"
+(you may need to edit /etc/pam.conf or create /etc/pam.d/conserver).
 If this field is empty, password checking is bypassed for this user.
 .SH EXAMPLE
 .TP 24
--- a/conserver.cf/samples/README
+++ b/conserver.cf/samples/README
@ -0,0 +1,21 @@
+I put together the sample configuration files in this directory in hopes
+that it would help folks see some of the possibilities of the
+configuration file format.  Each of the files are syntatically correct,
+but have never actually been used.
+
+Each file is basically built upon the previous...theoretically, if not
+actually.  Hopefully they'll help show some of the cool things you can
+do with the configuration file and help those trying to figure out how
+they should even start.
+
+    simple.cf - A very simple, one console config file
+
+    basic.cf - A config with a couple consoles, mostly using defaults
+
+    average.cf - A config for many consoles, using breaks, user lists,
+		 etc...bascially customizing each area
+
+    average-distributed.cf - Taking average.cf to multiple conserver
+			     hosts with overrides on those hosts
+
+Bryan Stansell
--- a/conserver.cf/samples/average-distributed.cf
+++ b/conserver.cf/samples/average-distributed.cf
@ -0,0 +1,108 @@
+#
+# I took the average.cf file and expanded it to use a distributed
+# conserver setup...two conserver hosts (conserver1 and conserver2), but
+# the basic philosophy would hold for many more console and/or conserver
+# hosts.
+#
+
+# ------ define a user group ------
+group sysadmin {
+    users bryan, todd, dave;
+}
+# helpers is everyone but the sysadmin group
+group helpers {
+    users *, !sysadmin;
+}
+
+
+# ------ make sure breaks are the way we want --------
+break 1 { string "\z"; }
+break 2 { string "\r\d~\d^b"; delay 600; }
+break 3 { string "#."; }
+
+
+# ----- define some console types ------
+# yeah, just setting a break doesn't quite seem worth it, but perhaps,
+# some day, there will be more host-specific stuff.
+default sun-std { break 1; }
+default sun-alt { break 2; }
+default sun-lom { break 3; }
+
+
+# ------ defaults ------
+# we set a 'global' default so we can reuse the bits below.  we're going
+# to set the '*' default, then define consoles, reset the '*' default,
+# define more consoles, etc.
+default global {
+	logfile /var/consoles/&;	# '&' is replaced with console name
+	timestamp 1hab;			# write timestamps
+	rw sysadmin;			# allow sysadmins full access
+	ro helpers;			# allow helpers to watch
+	include sun-std;
+}
+
+
+# --------- define our terminal attributes ----------
+# simple tcp connections are "easy"
+default cisco { type host; portbase 2000; portinc 1; }
+default xyplex  { type host; portbase 2000; portinc 100; }
+
+# this is a cyclades card referenced with /dev/ttyC0 through /dev/ttyC31
+# we set the various port calculation bits and pattern substitution to
+# come up with a generic definition
+default cyclades { type device; device /dev/ttyC&; baud 9600; parity none;
+		   devicesubst .&d; portbase -1; portinc 1; host unused; }
+
+## this is a term server accessed with an ssh command
+# it too uses pattern substitution and such to get the job done
+default ciscossh { type exec; portbase 2000; portinc 1;
+		   exec /usr/local/bin/ssh -p P -l tsuser H;
+		   execsubst HPd; }
+
+
+# ------- set the global default for the first conserver host -------
+# the consoles below (until the default is reset) are managed
+# by conserver1.conserver.com
+default * { include global; master conserver1.conserver.com; }
+
+# ------- define the consoles on ts1.conserver.com --------
+default ts1.conserver.com { include cisco; host ts1.conserver.com; }
+console web1.conserver.com { include ts1.conserver.com; port 2; }
+console ns1.conserver.com { include ts1.conserver.com; port 10; }
+
+# ------- define the consoles on ts2.conserver.com --------
+default ts2.conserver.com { include xyplex; host ts2.conserver.com; }
+console web2.conserver.com { include ts2.conserver.com; port 4; }
+console ns2.conserver.com { include ts2.conserver.com; port 22; }
+
+# ------- set the global default for the second conserver host -------
+# the following consoles are managed by conserver2.conserver.com
+default * { include global; master conserver2.conserver.com; }
+
+# ------- define the consoles on ts3.conserver.com --------
+default ts3.conserver.com { include ciscossh; host ts3.conserver.com; }
+console ftp1.conserver.com { include ts3.conserver.com; include sun-lom;
+			     port 7; }
+
+# ------- set up the an access list to avoid the default -------
+# anything *not* matched here will fallback to the default access mode
+access * {
+	trusted 127.0.0.1;
+	allowed 10.0.0.0/8;
+}
+
+# conserver2 has an extra leg that is trusted
+access conserver2.conserver.com { trusted 192.168.0.0/16; }
+
+# ------- do some server configuration ---------
+# both conserver1.conserver.com and conserver2.conserver.com use the same
+# set of defaults
+config * {
+	defaultaccess rejected;
+	daemonmode on;
+	logfile /var/log/conserver;
+}
+
+# we're going to set the default access on conserver2 to allowed, because
+# it's in a higher-trust network
+config conserver2.conserver.com { defaultaccess allowed; }
--- a/conserver.cf/samples/average.cf
+++ b/conserver.cf/samples/average.cf
@ -0,0 +1,90 @@
+#
+# This would be what i'd expect a more common configuration file would
+# look like.  There are consoles attached to multiple devices, simple
+# access lists, etc.
+#
+
+# ------ define a user group ------
+group sysadmin {
+    users bryan, todd, dave;
+}
+# helpers is everyone but the sysadmin group
+group helpers {
+    users *, !sysadmin;
+}
+
+
+# ------ make sure breaks are the way we want --------
+break 1 { string "\z"; }
+break 2 { string "\r\d~\d^b"; delay 600; }
+break 3 { string "#."; }
+
+
+# ----- define some console types ------
+# yeah, just setting a break doesn't quite seem worth it, but perhaps,
+# some day, there will be more host-specific stuff.
+default sun-std { break 1; }
+default sun-alt { break 2; }
+default sun-lom { break 3; }
+
+
+# ------ defaults ------
+# now for some generic console defaults so that we don't have to
+# duplicate them for each console.
+default * {
+	logfile /var/consoles/&;	# '&' is replaced with console name
+	timestamp 1hab;			# write timestamps
+	rw sysadmin;			# allow sysadmins full access
+	ro helpers;			# allow helpers to watch
+	master localhost;
+	include sun-std;
+}
+
+
+# --------- define our terminal attributes ----------
+# simple tcp connections are "easy"
+default cisco { type host; portbase 2000; portinc 1; }
+default xyplex  { type host; portbase 2000; portinc 100; }
+
+# this is a cyclades card referenced with /dev/ttyC0 through /dev/ttyC31
+# we set the various port calculation bits and pattern substitution to
+# come up with a generic definition
+default cyclades { type device; device /dev/ttyC&; baud 9600; parity none;
+		   devicesubst .&d; portbase -1; portinc 1; host unused; }
+
+## this is a term server accessed with an ssh command
+# it too uses pattern substitution and such to get the job done
+default ciscossh { type exec; portbase 2000; portinc 1;
+		   exec /usr/local/bin/ssh -p P -l tsuser H;
+		   execsubst HPd; }
+
+
+# ------- define the consoles on ts1.conserver.com --------
+default ts1.conserver.com { include cisco; host ts1.conserver.com; }
+console web1.conserver.com { include ts1.conserver.com; port 2; }
+console ns1.conserver.com { include ts1.conserver.com; port 10; }
+
+# ------- define the consoles on ts2.conserver.com --------
+default ts2.conserver.com { include xyplex; host ts2.conserver.com; }
+console web2.conserver.com { include ts2.conserver.com; port 4; }
+console ns2.conserver.com { include ts2.conserver.com; port 22; }
+
+# ------- define the consoles on ts3.conserver.com --------
+default ts3.conserver.com { include ciscossh; host ts3.conserver.com; }
+console ftp1.conserver.com { include ts3.conserver.com; include sun-lom;
+			     port 7; }
+
+
+# ------- set up the an access list to avoid the default -------
+# anything *not* matched here will fallback to the default access mode
+access * {
+	trusted 127.0.0.1;
+	allowed 10.0.0.0/8;
+}
+
+# ------- do some server configuration ---------
+config * {
+	defaultaccess rejected;
+	daemonmode on;
+	logfile /var/log/conserver;
+}
--- a/conserver.cf/samples/basic.cf
+++ b/conserver.cf/samples/basic.cf
@ -0,0 +1,28 @@
+#
+# This is a fairly basic configuration file that interacts with one
+# terminal server.
+#
+
+# first, we're going to set some generic console defaults so that we
+# don't have to duplicate them for each console.
+default * {
+	logfile /var/consoles/&;	# '&' is replaced with console name
+	timestamp 1hab;			# write timestamps
+	rw *;				# allow all users
+	master localhost;
+	type host;
+	host ts1.conserver.com;		# consoles on ts1.conserver.co
+	portbase 2000;			# port numbers start at 2001 and
+	portinc 1;			# go up by 1 (port #1 == 2001, etc)
+}
+
+# define two consoles on the terminal server
+console web1.conserver.com { port 2; }	# calculates to tcp port 2002
+console ns1.conserver.com { port 10; }	# calculates to tcp port 2010
+
+# set up the an access list to avoid the default
+# anything *not* matched here will fallback to the default access (-a)
+# mode
+access * {
+	trusted 127.0.0.1;
+}
--- a/conserver.cf/samples/simple.cf
+++ b/conserver.cf/samples/simple.cf
@ -0,0 +1,11 @@
+#
+# I believe this is the smallest configuration file that is also fully
+# functional.  You have to be happy with the default access type (-a)
+# as well as the default access list that gets used.
+# 
+
+console simple {
+    master localhost;
+    type exec;
+    rw *;
+}
--- a/conserver.html
+++ b/conserver.html
@ -9,6 +9,7 @@
    <META name="author" content=
    "Bryan Stansell &lt;bryan@conserver.com&gt;">
    <LINK rel="SHORTCUT ICON" href="conserver.ico">
+    <LINK rel="icon" href="conserver.ico">

    <TITLE>Conserver</TITLE>

@ -159,35 +160,32 @@
          the website. Next, there's Kevin Braunsdorf's version at
          <A href=
          "ftp://ftp.physics.purdue.edu/pub/pundits/">ftp://ftp.physics.purdue.edu/pub/pundits/</A>.
-          Kevin is semi-actively working on his thread. Doesn't
-          look like any new versions have been out since August
+          It doesn't look like Kevin is working on his thread ony
+          more either. No new versions have been out since August
          2000 (version 8.5), but maybe this info will be out of
-          date by the time you read this. Lastly, the conserver.com
-          version is based on Kevin's "5.21-Beta" distribution, but
-          since <B>HEAVILY</B> modified and enhanced (more details
-          in the "Origin" section above).</P>
+          date by the time you read this (I last checked Feb 10,
+          2004). Lastly, the conserver.com version is based on
+          Kevin's "5.21-Beta" distribution, but since
+          <B>HEAVILY</B> modified and enhanced (more details in the
+          "Origin" section above).</P>

          <P>If I were looking for a conserver package I would
-          either use Kevin's latest distribution or the
-          conserver.com distribution. Which one? Well, obviously
-          I'm biased and believe the conserver.com distribution
-          should be your choice, but Kevin's does have UPS (serial
-          port line toggling bits) that the conserver.com version
-          doesn't have. What does the conserver.com distribution
-          have? Well, in reality, too many things to list. You'll
-          have to look at the <A href="CHANGES">CHANGES</A> file
-          and see the enhancements, bug fixes, and general
-          development since the original. Don't let the version
-          numbers fool you - you'll have to compare and contrast
-          for yourself.</P>
+          definitely use the conserver.com distribution. Why? It's
+          actively maintained, has many more features than the
+          other versions (see <A href="CHANGES">CHANGES</A> for a
+          semi-scary history), and has an active user community.
+          Kevin's version does have UPS support (basic serial port
+          line toggling bits) which is missing in the conserver.com
+          version, but no one has asked me for it, so does anyone
+          actually need it?</P>

          <H3>Downloading</H3>

-          <P>The current version, released on Nov 16, 2003, is <A
-          href="8.0.6.tar.gz">8.0.6.tar.gz</A>. You can get it via
+          <P>The current version, released on Feb 10, 2004, is <A
+          href="8.1.1.tar.gz">8.1.1.tar.gz</A>. You can get it via
          <A href=
-          "ftp://ftp.conserver.com/conserver/8.0.6.tar.gz">FTP</A>
-          or <A href="8.0.6.tar.gz">HTTP</A>. See the <A href=
+          "ftp://ftp.conserver.com/conserver/8.1.1.tar.gz">FTP</A>
+          or <A href="8.1.1.tar.gz">HTTP</A>. See the <A href=
          "CHANGES">CHANGES</A> file for information on the latest
          updates.</P>

@ -208,6 +206,11 @@
          <P>Check the <A href="INSTALL">INSTALL</A> file for
          instructions.</P>

+          <H3>Online Documentation</H3>
+
+          <P>I've put a small set of documentation <A href=
+          "docs/">here</A>. I'm hoping to expand it over time.</P>
+
          <H3>Systems Tested</H3>

          <P>Here's a list of systems that I've been told can
--- a/conserver/Makefile.in
+++ b/conserver/Makefile.in
@ -6,7 +6,8 @@ exec_prefix = @exec_prefix@
 sbindir = @sbindir@
 sysconfdir = @sysconfdir@
 mandir = @mandir@
-exampledir = $(prefix)/share/examples/conserver
+datadir = @datadir@
+exampledir = $(datadir)/examples/conserver

 ### Installation programs and flags
 INSTALL = @INSTALL@
@ -27,21 +28,24 @@ LIBS	= @LIBS@ @CONSLIBS@
 ### Makefile rules - no user-servicable parts below

 CONSERVER_OBJS = access.o client.o consent.o group.o main.o master.o \
-		 readcfg.o fallback.o util.o
+		 readcfg.o fallback.o cutil.o
 CONSERVER_HDRS = ../config.h $(top_srcdir)/compat.h $(srcdir)/access.h \
-		 $(srcdir)/client.h $(srcdir)/consent.h $(srcdir)/group.h \
-		 $(srcdir)/main.h $(srcdir)/master.h $(srcdir)/readcfg.h \
-		 $(srcdir)/util.h
+		 $(srcdir)/client.h $(srcdir)/consent.h $(srcdir)/cutil.h \
+		 $(srcdir)/group.h $(srcdir)/main.h $(srcdir)/master.h \
+		 $(srcdir)/readcfg.h $(srcdir)/version.h
+
 ALL = conserver convert


 all: $(ALL)

+$(CONSERVER_OBJS): $(CONSERVER_HDRS)
+
 conserver: $(CONSERVER_OBJS)
 	$(CC) $(CFLAGS) $(LDFLAGS) -o conserver $(CONSERVER_OBJS) $(LIBS)

-convert: convert.o util.o
-	$(CC) $(CFLAGS) $(LDFLAGS) -o convert convert.o util.o $(LIBS)
+convert: convert.o cutil.o
+	$(CC) $(CFLAGS) $(LDFLAGS) -o convert convert.o cutil.o $(LIBS)

 .c.o:
 	$(CC) $(CFLAGS) $(CPPFLAGS) -c -o $@ $<
--- a/conserver/access.c
+++ b/conserver/access.c
@ -1,5 +1,5 @@
 /*
- *  $Id: access.c,v 5.70 2003/11/04 19:41:00 bryan Exp $
+ *  $Id: access.c,v 5.71 2003/11/20 13:56:38 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -36,7 +36,7 @@

 #include <compat.h>

-#include <util.h>
+#include <cutil.h>
 #include <access.h>
 #include <consent.h>
 #include <client.h>
--- a/conserver/client.c
+++ b/conserver/client.c
@ -1,5 +1,5 @@
 /*
- *  $Id: client.c,v 5.75 2003/11/16 15:35:33 bryan Exp $
+ *  $Id: client.c,v 5.79 2003/11/28 23:36:02 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -36,7 +36,7 @@

 #include <compat.h>

-#include <util.h>
+#include <cutil.h>
 #include <consent.h>
 #include <access.h>
 #include <client.h>
@ -97,15 +97,15 @@ FindWrite(pCE)
 */
 void
 #if PROTOTYPES
-Replay(CONSFILE *fdLog, CONSFILE *fdOut, int iBack)
+Replay(CONSENT *pCE, CONSFILE *fdOut, int iBack)
 #else
-Replay(fdLog, fdOut, iBack)
-    CONSFILE *fdLog;
+Replay(pCE, fdOut, iBack)
+    CONSENT *pCE;
    CONSFILE *fdOut;
    int iBack;
 #endif
 {
-
+    CONSFILE *fdLog = (CONSFILE *)0;
    off_t file_pos;
    off_t buf_pos;
    char *buf;
@ -130,7 +130,16 @@ Replay(fdLog, fdOut, iBack)
    unsigned long dmallocMarkReplay = 0;
 #endif

-    if ((CONSFILE *)0 == fdLog) {
+    if (pCE != (CONSENT *)0) {
+	fdLog = pCE->fdlog;
+
+	/* no logfile and down and logfile defined?  try and open it */
+	if (fdLog == (CONSFILE *)0 && !pCE->fup &&
+	    pCE->logfile != (char *)0)
+	    fdLog = FileOpen(pCE->logfile, O_RDONLY, 0644);
+    }
+
+    if (fdLog == (CONSFILE *)0) {
 	FileWrite(fdOut, FLAGFALSE, "[no log file on this console]\r\n",
 		  -1);
 	return;
@ -179,17 +188,9 @@ Replay(fdLog, fdOut, iBack)
 	     * the rest (as we work our way back in the file) should be
 	     */
 	    buf_pos = (file_pos / BUFSIZ) * BUFSIZ;
-#if defined(SEEK_SET)
-	    /* PTX and maybe other Posix systems
-	     */
 	    if (FileSeek(fdLog, buf_pos, SEEK_SET) < 0) {
 		goto common_exit;
 	    }
-#else
-	    if (FileSeek(fdLog, buf_pos, L_SET) < 0) {
-		goto common_exit;
-	    }
-#endif
 	    if ((r = FileRead(fdLog, buf, BUFSIZ)) < 0) {
 		goto common_exit;
 	    }
@ -339,6 +340,10 @@ Replay(fdLog, fdOut, iBack)

  common_exit:

+    /* if we opened the logfile, close it */
+    if (fdLog != pCE->fdlog)
+	FileClose(&fdLog);
+
    if ((struct lines *)0 != lines) {
 	for (i = 0; i < n_lines; i++) {
 	    DestroyString(lines[i].mark_end);
@ -397,6 +402,7 @@ static HELP aHLTable[] = {
    {WHEN_ALWAYS, "w    who is on this console"},
    {WHEN_ALWAYS, "x    show console baud info"},
    {WHEN_ALWAYS, "z    suspend the connection"},
+    {WHEN_ATTACH, "|    attach local command"},
    {WHEN_ALWAYS, "<cr> ignore/abort command"},
    {WHEN_ALWAYS, "?    print this message"},
    {WHEN_ALWAYS, "^R   replay the last line"},
--- a/conserver/client.h
+++ b/conserver/client.h
@ -1,5 +1,5 @@
 /*
- *  $Id: client.h,v 5.33 2003/10/10 10:28:49 bryan Exp $
+ *  $Id: client.h,v 5.36 2003/12/25 19:22:00 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -46,7 +46,9 @@ typedef enum clientState {
    S_IDENT,			/* probational connection (who is this)    */
    S_PASSWD,			/* still needs a passwd to connect         */
    S_QUOTE,			/* send any character we can spell         */
-    S_BCAST			/* send a broadcast message to all clients */
+    S_BCAST,			/* send a broadcast message to all clients */
+    S_CWAIT,			/* wait for client                         */
+    S_CEXEC			/* client execing a program                */
 } CLIENTSTATE;

 typedef struct client {		/* Connection Information:              */
@ -82,7 +84,7 @@ typedef struct client {		/* Connection Information:              */
      cnct_port;		/* where from                           */
 } CONSCLIENT;

-extern void Replay PARAMS((CONSFILE *, CONSFILE *, int));
+extern void Replay PARAMS((CONSENT *, CONSFILE *, int));
 extern void HelpUser PARAMS((CONSCLIENT *));
 extern void FindWrite PARAMS((CONSENT *));
 extern int ClientAccessOk PARAMS((CONSCLIENT *));
--- a/conserver/consent.c
+++ b/conserver/consent.c
@ -1,5 +1,5 @@
 /*
- *  $Id: consent.c,v 5.130 2003/11/08 05:16:36 bryan Exp $
+ *  $Id: consent.c,v 5.135 2004/01/28 14:47:52 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -42,7 +42,7 @@

 #include <pwd.h>

-#include <util.h>
+#include <cutil.h>
 #include <consent.h>
 #include <client.h>
 #include <group.h>
@ -261,12 +261,12 @@ StopInit(pCE)

    if (pCE->initpid != 0) {
 	kill(pCE->initpid, SIGHUP);
-	pCE->initpid = 0;
-	Verbose("[%s] initcmd terminated: pid %lu", pCE->server,
-		(unsigned long)pCE->initpid);
-	TagLogfileAct(pCE, "initcmd terminated");
 	CONDDEBUG((1, "StopInit(): sending initcmd pid %lu signal %d",
 		   (unsigned long)pCE->initpid, SIGHUP));
+	Msg("[%s] initcmd terminated: pid %lu", pCE->server,
+	    (unsigned long)pCE->initpid);
+	TagLogfileAct(pCE, "initcmd terminated");
+	pCE->initpid = 0;
    }

    if (pCE->initfile != (CONSFILE *)0) {
@ -359,8 +359,8 @@ StartInit(pCE)
 		pCE->initpid = 0;
 		return;
 	    }
-	    Verbose("[%s] initcmd started: pid %lu", pCE->server,
-		    (unsigned long)pCE->initpid);
+	    Msg("[%s] initcmd started: pid %lu", pCE->server,
+		(unsigned long)pCE->initpid);
 	    TagLogfileAct(pCE, "initcmd started");
 	    FD_SET(pin[0], &rinit);
 	    if (maxfd < pin[0] + 1)
@ -691,7 +691,7 @@ ConsInit(pCE)
    TagLogfile(pCE, "Console up");

    switch (pCE->type) {
-	case UNKNOWN:		/* shut up gcc */
+	case UNKNOWNTYPE:	/* shut up gcc */
 	    break;
 	case EXEC:
 	    if ((cofile =
@ -826,7 +826,7 @@ ConsInit(pCE)
    }

    switch (pCE->type) {
-	case UNKNOWN:		/* shut up gcc */
+	case UNKNOWNTYPE:	/* shut up gcc */
 	    break;
 	case EXEC:
 	    Verbose("[%s] pid %lu on %s", pCE->server, pCE->ipid,
@ -842,7 +842,13 @@ ConsInit(pCE)
 	    break;
    }

-    FD_SET(cofile, &rinit);
+    /* if we're waiting for connect() to finish, watch the
+     * write bit, otherwise watch for the read bit
+     */
+    if (pCE->ioState == INCONNECT)
+	FD_SET(cofile, &winit);
+    else
+	FD_SET(cofile, &rinit);
    if (maxfd < cofile + 1)
 	maxfd = cofile + 1;

@ -851,9 +857,9 @@ ConsInit(pCE)
    if (pCE->ioState == ISNORMAL) {
 	pCE->lastWrite = tyme;
 	if (pCE->idletimeout != (time_t)0 &&
-	    (timers[T_IDLE] == (time_t)0 ||
-	     timers[T_IDLE] > pCE->lastWrite + pCE->idletimeout))
-	    timers[T_IDLE] = pCE->lastWrite + pCE->idletimeout;
+	    (timers[T_CIDLE] == (time_t)0 ||
+	     timers[T_CIDLE] > pCE->lastWrite + pCE->idletimeout))
+	    timers[T_CIDLE] = pCE->lastWrite + pCE->idletimeout;
    }

    /* If we have marks, adjust the next one so that it's in the future */
@ -871,7 +877,7 @@ ConsInit(pCE)
 	if (pCE->ioState == ISNORMAL)
 	    Msg("[%s] console up", pCE->server);
 	else
-	    Msg("[%s] console inititalizing", pCE->server);
+	    Msg("[%s] console initializing", pCE->server);
 	pCE->downHard = FLAGFALSE;
    }

--- a/conserver/consent.h
+++ b/conserver/consent.h
@ -1,5 +1,5 @@
 /*
- *  $Id: consent.h,v 5.52 2003/11/15 20:00:08 bryan Exp $
+ *  $Id: consent.h,v 5.55 2003/12/21 16:23:02 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -52,7 +52,7 @@ typedef struct parity {		/* a parity bits table                  */
 } PARITY;

 typedef enum consType {
-    UNKNOWN = 0,
+    UNKNOWNTYPE = 0,
    DEVICE,
    EXEC,
    HOST
@ -95,6 +95,7 @@ typedef struct consent {	/* console information                  */
    unsigned short port;	/* port number      socket = portbase + */
    unsigned short portbase;	/* port base             portinc * port */
    unsigned short portinc;	/* port increment                       */
+    unsigned short raw;		/* raw or telnet protocol?              */
    /* type == EXEC */
    char *exec;			/* exec command                         */
    char *execsubst;		/* exec substitution pattern            */
@ -102,6 +103,7 @@ typedef struct consent {	/* console information                  */
    char *master;		/* master hostname                      */
    unsigned short breakNum;	/* break type [1-9]                     */
    char *logfile;		/* logfile                              */
+    off_t logfilemax;		/* size limit for rolling logfile       */
    char *initcmd;		/* initcmd command                      */
    char *motd;			/* motd                                 */
    time_t idletimeout;		/* idle timeout                         */
--- a/conserver/conserver.man
+++ b/conserver/conserver.man
@ -1,6 +1,6 @@
 .\" @(#)conserver.8 01/06/91 OSU CIS; Thomas A. Fine
 .\" $Id: conserver.man,v 1.40 2003/11/10 15:37:24 bryan Exp $
-.TH CONSERVER 8 "2003/11/10" "conserver-8.0.6" "conserver"
+.TH CONSERVER 8 "2003/11/10" "conserver-8.1.1" "conserver"
 .SH NAME
 conserver \- console server daemon
 .SH SYNOPSIS
--- a/conserver/convert.c
+++ b/conserver/convert.c
@ -1,5 +1,5 @@
 /*
- *  $Id: convert.c,v 1.7 2003/08/15 21:24:39 bryan Exp $
+ *  $Id: convert.c,v 1.8 2003/11/20 13:56:38 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -32,7 +32,7 @@

 #include <compat.h>

-#include <util.h>
+#include <cutil.h>
 #include <consent.h>
 #include <client.h>
 #include <group.h>
--- a/conserver/cutil.c
+++ b/conserver/cutil.c
@ -1,5 +1,5 @@
 /*
- *  $Id: util.c,v 1.105 2003/11/15 16:31:51 bryan Exp $
+ *  $Id: cutil.c,v 1.113 2004/01/18 13:05:43 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -8,7 +8,7 @@

 #include <compat.h>

-#include <util.h>
+#include <cutil.h>

 #if HAVE_OPENSSL
 #include <openssl/ssl.h>
@ -238,6 +238,35 @@ BuildStringN(str, n, msg)
    return msg->string;
 }

+void *
+#if PROTOTYPES
+MemMove(void *dest, void *src, size_t n)
+#else
+MemMove(void *dest, void *src, size_t n)
+    void *dest;
+    void *src;
+    size_t n;
+#endif
+{
+#if HAVE_MEMMOVE
+    return memmove(dest, src, n);
+#else
+    char *s = src;
+    char *d = dest;
+
+    if (s < d) {
+	/* Moving from low mem to hi mem; start at end.  */
+	for (s += n, d += n; n > 0; --n)
+	    *--d = *--s;
+    } else if (s != d) {
+	/* Moving from hi mem to low mem; start at beginning.  */
+	for (; n > 0; --n)
+	    *d++ = *s++;
+    }
+    return dest;
+#endif
+}
+
 char *
 #if PROTOTYPES
 ShiftString(STRING *msg, int n)
@ -250,17 +279,8 @@ ShiftString(msg, n)
    if (msg == (STRING *)0 || n <= 0 || n > msg->used - 1)
 	return (char *)0;

-#if HAVE_MEMMOVE
-    memmove(msg->string, msg->string + n, msg->used - n);
-#else
-    {
-	char *s, *e;
-	int len;
-	for (s = msg->string, e = s + n, len = msg->used - n; len > 0;
-	     len--)
-	    *s++ = *e++;
-    }
-#endif
+    MemMove(msg->string, msg->string + n, msg->used - n);
+
    msg->used -= n;
    return msg->string;
 }
@ -730,6 +750,27 @@ FileOpenFD(fd, type)
    cfp->ssl = (SSL *)0;
    cfp->waitForRead = cfp->waitForWrite = FLAGFALSE;
 #endif
+#if DEBUG_CONSFILE_IO
+    {
+	char buf[1024];
+	sprintf(buf, "CONSFILE-%s-%lu-%d.w", progname,
+		(unsigned long)thepid, fd);
+	if ((cfp->debugwfd =
+	     open(buf, O_WRONLY | O_CREAT | O_APPEND, 0644)) != -1) {
+	    sprintf(buf, "[---- STARTED - %s ----]\n",
+		    StrTime((time_t *)0));
+	    write(cfp->debugwfd, buf, strlen(buf));
+	}
+	sprintf(buf, "CONSFILE-%s-%lu-%d.r", progname,
+		(unsigned long)thepid, fd);
+	if ((cfp->debugrfd =
+	     open(buf, O_WRONLY | O_CREAT | O_APPEND, 0644)) != -1) {
+	    sprintf(buf, "[---- STARTED - %s ----]\n",
+		    StrTime((time_t *)0));
+	    write(cfp->debugrfd, buf, strlen(buf));
+	}
+    }
+#endif

    CONDDEBUG((2, "FileOpenFD(): encapsulated fd %d type %d", fd, type));
    return cfp;
@ -760,6 +801,27 @@ FileOpenPipe(fd, fdout)
    cfp->ssl = (SSL *)0;
    cfp->waitForRead = cfp->waitForWrite = FLAGFALSE;
 #endif
+#if DEBUG_CONSFILE_IO
+    {
+	char buf[1024];
+	sprintf(buf, "CONSFILE-%s-%lu-%d.w", progname,
+		(unsigned long)thepid, fdout);
+	if ((cfp->debugwfd =
+	     open(buf, O_WRONLY | O_CREAT | O_APPEND, 0644)) != -1) {
+	    sprintf(buf, "[---- STARTED - %s ----]\n",
+		    StrTime((time_t *)0));
+	    write(cfp->debugwfd, buf, strlen(buf));
+	}
+	sprintf(buf, "CONSFILE-%s-%lu-%d.r", progname,
+		(unsigned long)thepid, fd);
+	if ((cfp->debugrfd =
+	     open(buf, O_WRONLY | O_CREAT | O_APPEND, 0644)) != -1) {
+	    sprintf(buf, "[---- STARTED - %s ----]\n",
+		    StrTime((time_t *)0));
+	    write(cfp->debugrfd, buf, strlen(buf));
+	}
+    }
+#endif

    CONDDEBUG((2, "FileOpenPipe(): encapsulated pipe pair fd %d and fd %d",
 	       fd, fdout));
@ -798,6 +860,12 @@ FileUnopen(cfp)
    }
    CONDDEBUG((2, "FileUnopen(): unopened fd %d", cfp->fd));
    DestroyString(cfp->wbuf);
+#if DEBUG_CONSFILE_IO
+    if (cfp->debugwfd != -1)
+	close(cfp->debugwfd);
+    if (cfp->debugrfd != -1)
+	close(cfp->debugrfd);
+#endif
    free(cfp);

    return retval;
@ -833,6 +901,27 @@ FileOpen(path, flag, mode)
    cfp->ssl = (SSL *)0;
    cfp->waitForRead = cfp->waitForWrite = FLAGFALSE;
 #endif
+#if DEBUG_CONSFILE_IO
+    {
+	char buf[1024];
+	sprintf(buf, "CONSFILE-%s-%lu-%d.w", progname,
+		(unsigned long)thepid, fd);
+	if ((cfp->debugwfd =
+	     open(buf, O_WRONLY | O_CREAT | O_APPEND, 0644)) != -1) {
+	    sprintf(buf, "[---- STARTED - %s ----]\n",
+		    StrTime((time_t *)0));
+	    write(cfp->debugwfd, buf, strlen(buf));
+	}
+	sprintf(buf, "CONSFILE-%s-%lu-%d.r", progname,
+		(unsigned long)thepid, fd);
+	if ((cfp->debugrfd =
+	     open(buf, O_WRONLY | O_CREAT | O_APPEND, 0644)) != -1) {
+	    sprintf(buf, "[---- STARTED - %s ----]\n",
+		    StrTime((time_t *)0));
+	    write(cfp->debugrfd, buf, strlen(buf));
+	}
+    }
+#endif

    CONDDEBUG((2, "FileOpen(): opened `%s' as fd %d", path, fd));
    return cfp;
@ -879,15 +968,15 @@ FileClose(pcfp)
 	    /* flush out the client socket - set it to blocking,
 	     * then write to it
 	     */
-	    SetFlags(cfp->fd, 0, O_NONBLOCK)
+	    SetFlags(cfp->fd, 0, O_NONBLOCK);

-		/* sent it a byte - guaranteed to block - ensure delivery
-		 * of prior data yeah - this is a bit paranoid - try
-		 * without this at first
-		 */
-		/* write(cfp->fd, "\n", 1); */
-		/* this is the guts of the workaround for Winsock close bug */
-		shutdown(cfp->fd, 1);
+	    /* sent it a byte - guaranteed to block - ensure delivery
+	     * of prior data yeah - this is a bit paranoid - try
+	     * without this at first
+	     */
+	    /* write(cfp->fd, "\n", 1); */
+	    /* this is the guts of the workaround for Winsock close bug */
+	    shutdown(cfp->fd, 1);

 	    /* enable lingering */
 	    lingeropt.l_onoff = 1;
@ -921,8 +1010,19 @@ FileClose(pcfp)
 	    break;
    }

-    CONDDEBUG((2, "FileClose(): closed fd %d", cfp->fd));
+    if (cfp->ftype == simplePipe) {
+	CONDDEBUG((2, "FileClose(): closed fd %d/%d", cfp->fd,
+		   cfp->fdout));
+    } else {
+	CONDDEBUG((2, "FileClose(): closed fd %d", cfp->fd));
+    }
    DestroyString(cfp->wbuf);
+#if DEBUG_CONSFILE_IO
+    if (cfp->debugwfd != -1)
+	close(cfp->debugwfd);
+    if (cfp->debugrfd != -1)
+	close(cfp->debugrfd);
+#endif
    free(cfp);
    *pcfp = (CONSFILE *)0;

@ -964,6 +1064,10 @@ FileRead(cfp, buf, len)
 		    retval = -1;
 		    break;
 		}
+#if DEBUG_CONSFILE_IO
+		if (cfp->debugrfd != -1)
+		    write(cfp->debugrfd, buf, retval);
+#endif
 	    }
 	    break;
 #if HAVE_OPENSSL
@ -1002,6 +1106,10 @@ FileRead(cfp, buf, len)
 		    cfp->ftype = simpleSocket;
 		    break;
 	    }
+#if DEBUG_CONSFILE_IO
+	    if (cfp->debugrfd != -1)
+		write(cfp->debugrfd, buf, retval);
+#endif
 	    break;
 #endif
 	default:
@ -1075,9 +1183,23 @@ FileWrite(cfp, bufferonly, buf, len)
 		       tmpString->string, fdout));
 	}
    }
+
    /* save the data */
-    if (len > 0 && buf != (char *)0)
-	BuildStringN(buf, len, cfp->wbuf);
+    if (len > 0 && buf != (char *)0) {
+	if (cfp->quoteiac == FLAGTRUE) {
+	    int l, o;
+	    for (o = l = 0; l < len; l++) {
+		if (buf[l] == (char)OB_IAC) {
+		    BuildStringN(buf + o, l + 1 - o, cfp->wbuf);
+		    BuildStringChar((char)OB_IAC, cfp->wbuf);
+		    o = l + 1;
+		}
+	    }
+	    if (o < len)
+		BuildStringN(buf + o, len - o, cfp->wbuf);
+	} else
+	    BuildStringN(buf, len, cfp->wbuf);
+    }

    if (bufferonly == FLAGTRUE)
 	return 0;
@ -1108,12 +1230,29 @@ FileWrite(cfp, bufferonly, buf, len)
 			break;
 		    }
 		    retval = -1;
+		    /* i believe, as of 8.0.8, we need to just ignore
+		     * this and actually produce the error message
+		     * below.  perhaps we'll have a lot of extra
+		     * FileWrite() errors, perhaps not.  things shouldn't
+		     * just close down and cause errors in normal cases,
+		     * right?!?  -bryan
+		     * maybe not right now, actually.  i'm going to check
+		     * the return code of FileWrite() on the "important"
+		     * things and let the others silently fail and have
+		     * the FileRead() catch problems - like it has been
+		     * doing.  i really should be checking all the return
+		     * codes...and i'm sure i'll get there eventually.
+		     */
 		    if (errno == EPIPE)
 			break;
 		    Error("FileWrite(): fd %d: %s", fdout,
 			  strerror(errno));
 		    break;
 		}
+#if DEBUG_CONSFILE_IO
+		if (cfp->debugwfd != -1)
+		    write(cfp->debugwfd, buf, retval);
+#endif
 		buf += retval;
 		len -= retval;
 		len_out += retval;
@ -1158,6 +1297,10 @@ FileWrite(cfp, bufferonly, buf, len)
 		}
 		if (retval <= 0)
 		    break;
+#if DEBUG_CONSFILE_IO
+		if (cfp->debugwfd != -1)
+		    write(cfp->debugwfd, buf, retval);
+#endif
 		buf += retval;
 		len -= retval;
 		len_out += retval;
@ -1739,6 +1882,58 @@ FileSetType(cfp, type)
    cfp->ftype = type;
 }

+/* Sets the file quoting method */
+void
+#if PROTOTYPES
+FileSetQuoteIAC(CONSFILE *cfp, FLAG flag)
+#else
+FileSetQuoteIAC(cfp, flag)
+    CONSFILE *cfp;
+    FLAG flag;
+#endif
+{
+    cfp->quoteiac = flag;
+}
+
+FLAG
+#if PROTOTYPES
+FileSawQuoteSusp(CONSFILE *cfp)
+#else
+FileSawQuoteSusp(cfp)
+    CONSFILE *cfp;
+#endif
+{
+    FLAG r = cfp->sawiacsusp;
+    cfp->sawiacsusp = FLAGFALSE;
+    return r;
+}
+
+FLAG
+#if PROTOTYPES
+FileSawQuoteExec(CONSFILE *cfp)
+#else
+FileSawQuoteExec(cfp)
+    CONSFILE *cfp;
+#endif
+{
+    FLAG r = cfp->sawiacexec;
+    cfp->sawiacexec = FLAGFALSE;
+    return r;
+}
+
+FLAG
+#if PROTOTYPES
+FileSawQuoteAbrt(CONSFILE *cfp)
+#else
+FileSawQuoteAbrt(cfp)
+    CONSFILE *cfp;
+#endif
+{
+    FLAG r = cfp->sawiacabrt;
+    cfp->sawiacabrt = FLAGFALSE;
+    return r;
+}
+
 #if HAVE_OPENSSL
 /* Get the SSL instance */
 SSL *
@ -2070,3 +2265,106 @@ StrDup(msg)
 #endif
    return buf;
 }
+
+char *
+#if PROTOTYPES
+StringChar(STRING *msg, int offset, char c)
+#else
+StringChar(msg, offset, c)
+    STRING *msg;
+    int offset;
+    char c;
+#endif
+{
+    int o;
+
+    if (msg == (STRING *)0 || msg->used <= 1 || offset < 0 ||
+	offset > msg->used)
+	return (char *)0;
+
+    for (o = offset; o != msg->used; o++) {
+	if (msg->string[o] == c)
+	    return &(msg->string[o]);
+    }
+    return (char *)0;
+}
+
+/* this takes a buffer, and returns the number of characters to use,
+ * which goes up to the first OB_IAC character sequence (that isn't
+ * OB_IAC/OB_IAC).  if it is an OB_IAC sequence, it sets the flag and
+ * returns zero.  if it's invalid args, we return -1.
+ * so <0 == no data, 0 == check flags, >0 number of chars to use
+ * this *WILL* modify the buffer (OB_IAC sequences get extracted/shrunk)
+ */
+int
+#if PROTOTYPES
+ParseIACBuf(CONSFILE *cfp, void *msg, int *len)
+#else
+ParseIACBuf(cfp, msg, len)
+    CONSFILE *cfp;
+    void *msg;
+    int *len;
+#endif
+{
+    int l = 0;
+    unsigned char *b = msg;
+
+    if (*len <= 0)
+	return -1;
+
+    if (cfp->quoteiac != FLAGTRUE)
+	return *len;
+
+    /* split OB_IAC/char pair OR OB_IAC at start */
+    if (cfp->sawiac == FLAGTRUE || b[0] == OB_IAC) {
+	int i = 1;
+
+	if (cfp->sawiac == FLAGTRUE) {
+	    i = 0;
+	    cfp->sawiac = FLAGFALSE;
+	}
+	if (i == *len) {	/* only thing is OB_IAC */
+	    cfp->sawiac = FLAGTRUE;
+	    return -1;
+	}
+
+	if (b[i] == OB_SUSP)
+	    cfp->sawiacsusp = FLAGTRUE;
+	else if (b[i] == OB_EXEC)
+	    cfp->sawiacexec = FLAGTRUE;
+	else if (b[i] == OB_ABRT)
+	    cfp->sawiacabrt = FLAGTRUE;
+	else {
+	    if (b[i] != OB_IAC)
+		Error
+		    ("ParseIACBuf(): fd %d: unrecognized quoted-OB_IAC char",
+		     cfp->fd, strerror(errno));
+	    l = 1;
+	}
+	*len = *len - i - 1 + l;
+	MemMove(b, b + i + 1 - l, *len);
+	if (l == 0)
+	    return 0;
+    }
+    for (; l < *len; l++) {
+	if (b[l] == OB_IAC) {
+	    if (l + 1 == *len)
+		return l;
+	    else if (b[l + 1] == OB_SUSP)
+		return l;
+	    else if (b[l + 1] == OB_EXEC)
+		return l;
+	    else if (b[l + 1] == OB_ABRT)
+		return l;
+	    else {
+		if (b[l + 1] != OB_IAC)
+		    Error
+			("ParseIACBuf(): fd %d: unrecognized quoted-OB_IAC char",
+			 cfp->fd, strerror(errno));
+		--(*len);
+		MemMove(b + l, b + l + 1, *len - l);
+	    }
+	}
+    }
+    return l;
+}
--- a/conserver/cutil.h
+++ b/conserver/cutil.h
@ -1,5 +1,5 @@
 /*
- *  $Id: util.h,v 1.56 2003/11/10 20:38:25 bryan Exp $
+ *  $Id: cutil.h,v 1.60 2004/01/18 13:05:43 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -18,8 +18,10 @@

 /* communication constants
 */
+#define OB_IAC		0xff	/* quote char                   */
+#define OB_EXEC		'E'	/* exec a command on the client */
 #define OB_SUSP		'Z'	/* suspended by server          */
-#define OB_DROP		'.'	/* dropped by server            */
+#define OB_ABRT		'.'	/* abort                        */

 /* Struct to wrap information about a "file"...
 * This can be a socket, local file, whatever.  We do this so
@ -67,6 +69,11 @@ typedef struct consFile {
    int fd;
    int fdout;			/* only used when a simplePipe */
    STRING *wbuf;
+    FLAG quoteiac;
+    FLAG sawiac;
+    FLAG sawiacsusp;
+    FLAG sawiacexec;
+    FLAG sawiacabrt;
 #if HAVE_OPENSSL
    /* SSL stuff */
    SSL *ssl;
@ -74,6 +81,10 @@ typedef struct consFile {
    FLAG waitForRead;
 #endif
    /* Add crypto stuff to suit */
+#if DEBUG_CONSFILE_IO
+    int debugrfd;
+    int debugwfd;
+#endif
 } CONSFILE;

 extern int isMultiProc, fDebug, fVerbose, fErrorPrinted;
@ -127,6 +138,10 @@ extern STRING *AllocString PARAMS((void));
 extern char *ReadLine PARAMS((FILE *, STRING *, int *));
 extern enum consFileType FileGetType PARAMS((CONSFILE *));
 extern void FileSetType PARAMS((CONSFILE *, enum consFileType));
+extern void FileSetQuoteIAC PARAMS((CONSFILE *, FLAG));
+extern FLAG FileSawQuoteSusp PARAMS((CONSFILE *));
+extern FLAG FileSawQuoteExec PARAMS((CONSFILE *));
+extern FLAG FileSawQuoteAbrt PARAMS((CONSFILE *));
 extern void Bye PARAMS((int));
 extern void DestroyDataStructures PARAMS((void));
 extern int IsMe PARAMS((char *));
@ -136,6 +151,9 @@ extern int FileCanWrite PARAMS((CONSFILE *, fd_set *, fd_set *));
 extern int FileBufEmpty PARAMS((CONSFILE *));
 extern int SetFlags PARAMS((int, int, int));
 extern char *StrDup PARAMS((char *));
+extern int ParseIACBuf PARAMS((CONSFILE *, void *, int *));
+extern void *MemMove PARAMS((void *, void *, size_t));
+extern char *StringChar PARAMS((STRING *, int, char));
 #if HAVE_OPENSSL
 extern SSL *FileGetSSL PARAMS((CONSFILE *));
 extern void FileSetSSL PARAMS((CONSFILE *, SSL *));
--- a/conserver/fallback.c
+++ b/conserver/fallback.c
@ -1,5 +1,5 @@
 /*
- *  $Id: fallback.c,v 5.59 2003/10/03 13:32:34 bryan Exp $
+ *  $Id: fallback.c,v 5.60 2003/11/20 13:56:38 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -16,7 +16,7 @@

 #include <compat.h>

-#include <util.h>
+#include <cutil.h>

 /*
 * get a pty for the user
--- a/conserver/group.c
+++ b/conserver/group.c
--- a/conserver/group.h
+++ b/conserver/group.h
@ -1,5 +1,5 @@
 /*
- *  $Id: group.h,v 5.41 2003/11/15 20:00:09 bryan Exp $
+ *  $Id: group.h,v 5.43 2003/12/20 06:11:53 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -36,11 +36,12 @@

 /* timers used to have various things happen */
 #define T_STATE		0
-#define T_IDLE		1
+#define T_CIDLE		1
 #define T_MARK		2
 #define T_REINIT	3
 #define T_AUTOUP	4
-#define T_MAX		5	/* T_MAX *must* be last */
+#define T_ROLL		5
+#define T_MAX		6	/* T_MAX *must* be last */

 /* return values used by CheckPass()
 */
--- a/conserver/main.c
+++ b/conserver/main.c
@ -1,5 +1,5 @@
 /*
- *  $Id: main.c,v 5.171 2003/11/16 19:29:20 bryan Exp $
+ *  $Id: main.c,v 5.174 2003/12/21 16:23:02 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -31,7 +31,7 @@

 #include <pwd.h>

-#include <util.h>
+#include <cutil.h>
 #include <consent.h>
 #include <client.h>
 #include <group.h>
@ -883,13 +883,13 @@ DumpDataStructures()
 			       "DumpDataStructures():  server=%s, type=HOST",
 			       EMPTYSTR(pCE->server)));
 		    CONDDEBUG((1,
-			       "DumpDataStructures():  host=%s, port=%hu, telnetState=%d",
-			       EMPTYSTR(pCE->host), pCE->port,
+			       "DumpDataStructures():  host=%s, raw=%hu, port=%hu, telnetState=%d",
+			       EMPTYSTR(pCE->host), pCE->raw, pCE->port,
 			       pCE->telnetState));
 		    break;
-		case UNKNOWN:
+		case UNKNOWNTYPE:
 		    CONDDEBUG((1,
-			       "DumpDataStructures():  server=%s, type=UNKNOWN",
+			       "DumpDataStructures():  server=%s, type=UNKNOWNTYPE",
 			       EMPTYSTR(pCE->server)));
 		    break;
 	    }
--- a/conserver/master.c
+++ b/conserver/master.c
@ -1,5 +1,5 @@
 /*
- *  $Id: master.c,v 5.122 2003/11/16 19:29:20 bryan Exp $
+ *  $Id: master.c,v 5.124 2003/12/25 19:22:00 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -29,7 +29,7 @@

 #include <compat.h>

-#include <util.h>
+#include <cutil.h>
 #include <consent.h>
 #include <client.h>
 #include <group.h>
@ -433,7 +433,7 @@ DoNormalRead(pCLServing)
 {
    char *pcCmd;
    char *pcArgs;
-    int nr, i;
+    int nr, i, l;
    unsigned char acIn[BUFSIZ];

    /* read connection */
@ -442,208 +442,221 @@ DoNormalRead(pCLServing)
 	return;
    }

-    for (i = 0; i < nr; ++i) {
-	if ('\n' != acIn[i]) {
-	    BuildStringChar(acIn[i], pCLServing->accmd);
+    while ((l = ParseIACBuf(pCLServing->fd, acIn, &nr)) >= 0) {
+	if (l == 0)		/* we ignore special OB_IAC stuff */
 	    continue;
-	}
-	if ((pCLServing->accmd->used > 1) &&
-	    ('\r' ==
-	     pCLServing->accmd->string[pCLServing->accmd->used - 2])) {
-	    pCLServing->accmd->string[pCLServing->accmd->used - 2] =
-		'\000';
-	    pCLServing->accmd->used--;
-	}
+	for (i = 0; i < l; ++i) {
+	    if ('\n' != acIn[i]) {
+		BuildStringChar(acIn[i], pCLServing->accmd);
+		continue;
+	    }
+	    if ((pCLServing->accmd->used > 1) &&
+		('\r' ==
+		 pCLServing->accmd->string[pCLServing->accmd->used - 2])) {
+		pCLServing->accmd->string[pCLServing->accmd->used - 2] =
+		    '\000';
+		pCLServing->accmd->used--;
+	    }

-	/* process password here...before we corrupt accmd */
-	if (pCLServing->iState == S_PASSWD) {
-	    if (CheckPasswd(pCLServing, pCLServing->accmd->string) !=
-		AUTH_SUCCESS) {
-		FileWrite(pCLServing->fd, FLAGFALSE,
-			  "invalid password\r\n", -1);
+	    /* process password here...before we corrupt accmd */
+	    if (pCLServing->iState == S_PASSWD) {
+		if (CheckPasswd(pCLServing, pCLServing->accmd->string) !=
+		    AUTH_SUCCESS) {
+		    FileWrite(pCLServing->fd, FLAGFALSE,
+			      "invalid password\r\n", -1);
+		    BuildString((char *)0, pCLServing->accmd);
+		    DropMasterClient(pCLServing, FLAGFALSE);
+		    return;
+		}
+		Verbose("<master> login %s", pCLServing->acid->string);
+		FileWrite(pCLServing->fd, FLAGFALSE, "ok\r\n", 4);
+		pCLServing->iState = S_NORMAL;
 		BuildString((char *)0, pCLServing->accmd);
-		DropMasterClient(pCLServing, FLAGFALSE);
-		return;
+		continue;
 	    }
-	    Verbose("<master> login %s", pCLServing->acid->string);
-	    FileWrite(pCLServing->fd, FLAGFALSE, "ok\r\n", 4);
-	    pCLServing->iState = S_NORMAL;
-	    BuildString((char *)0, pCLServing->accmd);
-	    continue;
-	}

-	if ((char *)0 != (pcArgs = strchr(pCLServing->accmd->string, ':'))) {
-	    *pcArgs++ = '\000';
-	} else if ((char *)0 !=
-		   (pcArgs = strchr(pCLServing->accmd->string, ' '))) {
-	    *pcArgs++ = '\000';
-	}
-	if (pcArgs != (char *)0)
-	    pcArgs = PruneSpace(pcArgs);
-	pcCmd = PruneSpace(pCLServing->accmd->string);
-	if (strcmp(pcCmd, "help") == 0) {
-	    static char *apcHelp1[] = {
-		"exit   disconnect\r\n",
-		"help   this help message\r\n",
-		"login  log in\r\n",
-#if HAVE_OPENSSL
-		"ssl    start ssl session\r\n",
-#endif
-		(char *)0
-	    };
-	    static char *apcHelp2[] = {
-		"call      provide port for given console\r\n",
-		"exit      disconnect\r\n",
-		"groups    provide ports for group leaders\r\n",
-		"help      this help message\r\n",
-		"master    provide a list of master servers\r\n",
-		"pid       provide pid of master process\r\n",
-		"quit*     terminate conserver (SIGTERM)\r\n",
-		"restart*  restart conserver (SIGHUP)\r\n",
-		"version   provide version info for server\r\n",
-		"* = requires admin privileges\r\n",
-		(char *)0
-	    };
-	    char **ppc;
-	    for (ppc =
-		 (pCLServing->iState == S_IDENT ? apcHelp1 : apcHelp2);
-		 (char *)0 != *ppc; ++ppc) {
-		FileWrite(pCLServing->fd, FLAGTRUE, *ppc, -1);
+	    if ((char *)0 !=
+		(pcArgs = strchr(pCLServing->accmd->string, ':'))) {
+		*pcArgs++ = '\000';
+	    } else if ((char *)0 !=
+		       (pcArgs = strchr(pCLServing->accmd->string, ' '))) {
+		*pcArgs++ = '\000';
 	    }
-	    FileWrite(pCLServing->fd, FLAGFALSE, (char *)0, 0);
-	} else if (strcmp(pcCmd, "exit") == 0) {
-	    FileWrite(pCLServing->fd, FLAGFALSE, "goodbye\r\n", -1);
-	    DropMasterClient(pCLServing, FLAGFALSE);
-	    return;
+	    if (pcArgs != (char *)0)
+		pcArgs = PruneSpace(pcArgs);
+	    pcCmd = PruneSpace(pCLServing->accmd->string);
+	    if (strcmp(pcCmd, "help") == 0) {
+		static char *apcHelp1[] = {
+		    "exit   disconnect\r\n",
+		    "help   this help message\r\n",
+		    "login  log in\r\n",
 #if HAVE_OPENSSL
-	} else if (pCLServing->iState == S_IDENT &&
-		   strcmp(pcCmd, "ssl") == 0) {
-	    FileWrite(pCLServing->fd, FLAGFALSE, "ok\r\n", -1);
-	    if (!AttemptSSL(pCLServing)) {
+		    "ssl    start ssl session\r\n",
+#endif
+		    (char *)0
+		};
+		static char *apcHelp2[] = {
+		    "call      provide port for given console\r\n",
+		    "exit      disconnect\r\n",
+		    "groups    provide ports for group leaders\r\n",
+		    "help      this help message\r\n",
+		    "master    provide a list of master servers\r\n",
+		    "pid       provide pid of master process\r\n",
+		    "quit*     terminate conserver (SIGTERM)\r\n",
+		    "restart*  restart conserver (SIGHUP)\r\n",
+		    "version   provide version info for server\r\n",
+		    "* = requires admin privileges\r\n",
+		    (char *)0
+		};
+		char **ppc;
+		for (ppc =
+		     (pCLServing->iState == S_IDENT ? apcHelp1 : apcHelp2);
+		     (char *)0 != *ppc; ++ppc) {
+		    FileWrite(pCLServing->fd, FLAGTRUE, *ppc, -1);
+		}
+		FileWrite(pCLServing->fd, FLAGFALSE, (char *)0, 0);
+	    } else if (strcmp(pcCmd, "exit") == 0) {
+		FileWrite(pCLServing->fd, FLAGFALSE, "goodbye\r\n", -1);
 		DropMasterClient(pCLServing, FLAGFALSE);
 		return;
-	    }
-#endif
-	} else if (pCLServing->iState == S_IDENT &&
-		   strcmp(pcCmd, "login") == 0) {
 #if HAVE_OPENSSL
-	    if (config->sslrequired == FLAGTRUE &&
-		FileGetType(pCLServing->fd) != SSLSocket) {
-		FileWrite(pCLServing->fd, FLAGFALSE,
-			  "encryption required\r\n", -1);
-	    } else {
+	    } else if (pCLServing->iState == S_IDENT &&
+		       strcmp(pcCmd, "ssl") == 0) {
+		FileWrite(pCLServing->fd, FLAGFALSE, "ok\r\n", -1);
+		if (!AttemptSSL(pCLServing)) {
+		    DropMasterClient(pCLServing, FLAGFALSE);
+		    return;
+		}
 #endif
-		if (pcArgs == (char *)0) {
+	    } else if (pCLServing->iState == S_IDENT &&
+		       strcmp(pcCmd, "login") == 0) {
+#if HAVE_OPENSSL
+		if (config->sslrequired == FLAGTRUE &&
+		    FileGetType(pCLServing->fd) != SSLSocket) {
 		    FileWrite(pCLServing->fd, FLAGFALSE,
-			      "login requires argument\r\n", -1);
+			      "encryption required\r\n", -1);
 		} else {
-		    BuildString((char *)0, pCLServing->username);
-		    BuildString((char *)0, pCLServing->acid);
-		    BuildString(pcArgs, pCLServing->username);
-		    BuildString(pcArgs, pCLServing->acid);
-		    BuildStringChar('@', pCLServing->acid);
-		    BuildString(pCLServing->peername->string,
-				pCLServing->acid);
-		    if (pCLServing->caccess == 't' ||
-			CheckPasswd(pCLServing, "") == AUTH_SUCCESS) {
-			pCLServing->iState = S_NORMAL;
-			Verbose("<master> login %s",
-				pCLServing->acid->string);
-			FileWrite(pCLServing->fd, FLAGFALSE, "ok\r\n", 4);
-		    } else {
-			FilePrint(pCLServing->fd, FLAGFALSE,
-				  "passwd? %s\r\n", myHostname);
-			pCLServing->iState = S_PASSWD;
-		    }
-		}
-#if HAVE_OPENSSL
-	    }
 #endif
-	} else if (pCLServing->iState == S_NORMAL &&
-		   strcmp(pcCmd, "master") == 0) {
-	    int iSep = 1;
-
-	    if ((GRPENT *)0 != pGroups) {
-		struct sockaddr_in lcl;
-		socklen_t so = sizeof(lcl);
-		if (-1 ==
-		    getsockname(FileFDNum(pCLServing->fd),
-				(struct sockaddr *)&lcl, &so)) {
-		    FileWrite(pCLServing->fd, FLAGFALSE,
-			      "getsockname failed, try again later\r\n",
-			      -1);
-		    Error("Master(): getsockname(%u): %s",
-			  FileFDNum(pCLServing->fd), strerror(errno));
-		    Bye(EX_OSERR);
+		    if (pcArgs == (char *)0) {
+			FileWrite(pCLServing->fd, FLAGFALSE,
+				  "login requires argument\r\n", -1);
+		    } else {
+			BuildString((char *)0, pCLServing->username);
+			BuildString((char *)0, pCLServing->acid);
+			BuildString(pcArgs, pCLServing->username);
+			BuildString(pcArgs, pCLServing->acid);
+			BuildStringChar('@', pCLServing->acid);
+			BuildString(pCLServing->peername->string,
+				    pCLServing->acid);
+			if (pCLServing->caccess == 't' ||
+			    CheckPasswd(pCLServing, "") == AUTH_SUCCESS) {
+			    pCLServing->iState = S_NORMAL;
+			    Verbose("<master> login %s",
+				    pCLServing->acid->string);
+			    FileWrite(pCLServing->fd, FLAGFALSE, "ok\r\n",
+				      4);
+			} else {
+			    FilePrint(pCLServing->fd, FLAGFALSE,
+				      "passwd? %s\r\n", myHostname);
+			    pCLServing->iState = S_PASSWD;
+			}
+		    }
+#if HAVE_OPENSSL
 		}
-		FilePrint(pCLServing->fd, FLAGTRUE, "@%s",
-			  inet_ntoa(lcl.sin_addr));
-		iSep = 0;
-	    }
-	    if (config->redirect == FLAGTRUE) {
-		REMOTE *pRC;
-		for (pRC = pRCUniq; (REMOTE *)0 != pRC; pRC = pRC->pRCuniq) {
-		    FilePrint(pCLServing->fd, FLAGTRUE, ":@%s" + iSep,
-			      pRC->rhost);
+#endif
+	    } else if (pCLServing->iState == S_NORMAL &&
+		       strcmp(pcCmd, "master") == 0) {
+		int iSep = 1;
+
+		if ((GRPENT *)0 != pGroups) {
+		    struct sockaddr_in lcl;
+		    socklen_t so = sizeof(lcl);
+		    if (-1 ==
+			getsockname(FileFDNum(pCLServing->fd),
+				    (struct sockaddr *)&lcl, &so)) {
+			FileWrite(pCLServing->fd, FLAGFALSE,
+				  "getsockname failed, try again later\r\n",
+				  -1);
+			Error("Master(): getsockname(%u): %s",
+			      FileFDNum(pCLServing->fd), strerror(errno));
+			Bye(EX_OSERR);
+		    }
+		    FilePrint(pCLServing->fd, FLAGTRUE, "@%s",
+			      inet_ntoa(lcl.sin_addr));
 		    iSep = 0;
 		}
-	    }
-	    FileWrite(pCLServing->fd, FLAGFALSE, "\r\n", -1);
-	} else if (pCLServing->iState == S_NORMAL &&
-		   strcmp(pcCmd, "pid") == 0) {
-	    FilePrint(pCLServing->fd, FLAGFALSE, "%lu\r\n",
-		      (unsigned long)thepid);
-	} else if (pCLServing->iState == S_NORMAL &&
-		   strcmp(pcCmd, "version") == 0) {
-	    FilePrint(pCLServing->fd, FLAGFALSE, "version `%s'\r\n",
-		      THIS_VERSION);
-	} else if (pCLServing->iState == S_NORMAL &&
-		   strcmp(pcCmd, "quit") == 0) {
-	    if (ConsentUserOk(pADList, pCLServing->username->string) == 1) {
-		Verbose("quit command by %s", pCLServing->acid->string);
-		FileWrite(pCLServing->fd, FLAGFALSE,
-			  "ok -- terminated\r\n", -1);
-		DropMasterClient(pCLServing, FLAGFALSE);
-		kill(thepid, SIGTERM);
-		return;
-	    } else
-		FileWrite(pCLServing->fd, FLAGFALSE,
-			  "unauthorized command\r\n", -1);
-	} else if (pCLServing->iState == S_NORMAL &&
-		   strcmp(pcCmd, "restart") == 0) {
-	    if (ConsentUserOk(pADList, pCLServing->username->string) == 1) {
-		FileWrite(pCLServing->fd, FLAGFALSE,
-			  "ok -- restarting\r\n", -1);
-		Verbose("restart command by %s", pCLServing->acid->string);
-		kill(thepid, SIGHUP);
-	    } else
-		FileWrite(pCLServing->fd, FLAGFALSE,
-			  "unauthorized command\r\n", -1);
-	} else if (pCLServing->iState == S_NORMAL &&
-		   strcmp(pcCmd, "groups") == 0) {
-	    int iSep = 1;
-	    GRPENT *pGE;
+		if (config->redirect == FLAGTRUE) {
+		    REMOTE *pRC;
+		    for (pRC = pRCUniq; (REMOTE *)0 != pRC;
+			 pRC = pRC->pRCuniq) {
+			FilePrint(pCLServing->fd, FLAGTRUE, ":@%s" + iSep,
+				  pRC->rhost);
+			iSep = 0;
+		    }
+		}
+		FileWrite(pCLServing->fd, FLAGFALSE, "\r\n", -1);
+	    } else if (pCLServing->iState == S_NORMAL &&
+		       strcmp(pcCmd, "pid") == 0) {
+		FilePrint(pCLServing->fd, FLAGFALSE, "%lu\r\n",
+			  (unsigned long)thepid);
+	    } else if (pCLServing->iState == S_NORMAL &&
+		       strcmp(pcCmd, "version") == 0) {
+		FilePrint(pCLServing->fd, FLAGFALSE, "version `%s'\r\n",
+			  THIS_VERSION);
+	    } else if (pCLServing->iState == S_NORMAL &&
+		       strcmp(pcCmd, "quit") == 0) {
+		if (ConsentUserOk(pADList, pCLServing->username->string) ==
+		    1) {
+		    Verbose("quit command by %s",
+			    pCLServing->acid->string);
+		    FileWrite(pCLServing->fd, FLAGFALSE,
+			      "ok -- terminated\r\n", -1);
+		    DropMasterClient(pCLServing, FLAGFALSE);
+		    kill(thepid, SIGTERM);
+		    return;
+		} else
+		    FileWrite(pCLServing->fd, FLAGFALSE,
+			      "unauthorized command\r\n", -1);
+	    } else if (pCLServing->iState == S_NORMAL &&
+		       strcmp(pcCmd, "restart") == 0) {
+		if (ConsentUserOk(pADList, pCLServing->username->string) ==
+		    1) {
+		    FileWrite(pCLServing->fd, FLAGFALSE,
+			      "ok -- restarting\r\n", -1);
+		    Verbose("restart command by %s",
+			    pCLServing->acid->string);
+		    kill(thepid, SIGHUP);
+		} else
+		    FileWrite(pCLServing->fd, FLAGFALSE,
+			      "unauthorized command\r\n", -1);
+	    } else if (pCLServing->iState == S_NORMAL &&
+		       strcmp(pcCmd, "groups") == 0) {
+		int iSep = 1;
+		GRPENT *pGE;

-	    for (pGE = pGroups; pGE != (GRPENT *)0; pGE = pGE->pGEnext) {
-		if (0 == pGE->imembers)
-		    continue;
-		FilePrint(pCLServing->fd, FLAGTRUE, ":%hu" + iSep,
-			  pGE->port);
-		iSep = 0;
+		for (pGE = pGroups; pGE != (GRPENT *)0; pGE = pGE->pGEnext) {
+		    if (0 == pGE->imembers)
+			continue;
+		    FilePrint(pCLServing->fd, FLAGTRUE, ":%hu" + iSep,
+			      pGE->port);
+		    iSep = 0;
+		}
+		FileWrite(pCLServing->fd, FLAGFALSE, "\r\n", 2);
+	    } else if (pCLServing->iState == S_NORMAL &&
+		       strcmp(pcCmd, "call") == 0) {
+		if (pcArgs == (char *)0)
+		    FileWrite(pCLServing->fd, FLAGFALSE,
+			      "call requires argument\r\n", -1);
+		else
+		    CommandCall(pCLServing, pcArgs);
+	    } else {
+		FileWrite(pCLServing->fd, FLAGFALSE, "unknown command\r\n",
+			  -1);
 	    }
-	    FileWrite(pCLServing->fd, FLAGFALSE, "\r\n", 2);
-	} else if (pCLServing->iState == S_NORMAL &&
-		   strcmp(pcCmd, "call") == 0) {
-	    if (pcArgs == (char *)0)
-		FileWrite(pCLServing->fd, FLAGFALSE,
-			  "call requires argument\r\n", -1);
-	    else
-		CommandCall(pCLServing, pcArgs);
-	} else {
-	    FileWrite(pCLServing->fd, FLAGFALSE, "unknown command\r\n",
-		      -1);
+	    BuildString((char *)0, pCLServing->accmd);
 	}
-	BuildString((char *)0, pCLServing->accmd);
+	nr -= l;
+	MemMove(acIn, acIn + l, nr);
    }
 }

@ -872,9 +885,10 @@ Master()
 	}

 	/* set to non-blocking and wrap in a File object */
-	if (SetFlags(cfd, O_NONBLOCK, 0))
+	if (SetFlags(cfd, O_NONBLOCK, 0)) {
 	    pCLmfree->fd = FileOpenFD(cfd, simpleSocket);
-	else
+	    FileSetQuoteIAC(pCLmfree->fd, FLAGTRUE);
+	} else
 	    pCLmfree->fd = (CONSFILE *)0;

 	if ((CONSFILE *)0 == pCLmfree->fd) {
--- a/conserver/readcfg.c
+++ b/conserver/readcfg.c
@ -1,5 +1,5 @@
 /*
- *  $Id: readcfg.c,v 5.157 2003/11/15 20:00:09 bryan Exp $
+ *  $Id: readcfg.c,v 5.163 2004/01/28 14:47:53 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -25,7 +25,7 @@

 #include <compat.h>

-#include <util.h>
+#include <cutil.h>
 #include <consent.h>
 #include <client.h>
 #include <group.h>
@ -653,7 +653,7 @@ ApplyDefault(d, c)
    CONSENT *c;
 #endif
 {
-    if (d->type != UNKNOWN)
+    if (d->type != UNKNOWNTYPE)
 	c->type = d->type;
    if (d->breakNum != 0)
 	c->breakNum = d->breakNum;
@ -663,6 +663,8 @@ ApplyDefault(d, c)
 	c->parity = d->parity;
    if (d->idletimeout != 0)
 	c->idletimeout = d->idletimeout;
+    if (d->logfilemax != 0)
+	c->logfilemax = d->logfilemax;
    if (d->port != 0)
 	c->port = d->port;
    if (d->portinc != 0)
@ -1299,6 +1301,66 @@ DefaultItemLogfile(id)
    ProcessLogfile(parserDefaultTemp, id);
 }

+void
+#if PROTOTYPES
+ProcessLogfilemax(CONSENT *c, char *id)
+#else
+ProcessLogfilemax(c, id)
+    CONSENT *c;
+    char *id;
+#endif
+{
+    char *p;
+    off_t v = 0;
+
+    c->logfilemax = 0;
+
+    if (id == (char *)0 || id[0] == '\000')
+	return;
+
+    for (p = id; *p != '\000'; p++) {
+	if (!isdigit((int)(*p)))
+	    break;
+	v = v * 10 + (*p - '0');
+    }
+
+    /* if it wasn't just numbers */
+    if (*p != '\000') {
+	if ((*p == 'k' || *p == 'K') && *(p + 1) == '\000') {
+	    v *= 1024;
+	} else if ((*p == 'm' || *p == 'M') && *(p + 1) == '\000') {
+	    v *= 1024 * 1024;
+	} else {
+	    if (isMaster)
+		Error("invalid `logfilemax' specification `%s' [%s:%d]",
+		      id, file, line);
+	    return;
+	}
+    }
+
+    if (v < 2048) {
+	if (isMaster)
+	    Error
+		("invalid `logfilemax' specification `%s' (must be >= 2K) [%s:%d]",
+		 id, file, line);
+	return;
+    }
+
+    c->logfilemax = v;
+}
+
+void
+#if PROTOTYPES
+DefaultItemLogfilemax(char *id)
+#else
+DefaultItemLogfilemax(id)
+    char *id;
+#endif
+{
+    CONDDEBUG((1, "DefaultItemLogfilemax(%s) [%s:%d]", id, file, line));
+    ProcessLogfilemax(parserDefaultTemp, id);
+}
+
 void
 #if PROTOTYPES
 DefaultItemInitcmd(char *id)
@ -1543,6 +1605,12 @@ ProcessPortinc(c, id)
 	return;
    }
    c->portinc = (unsigned short)atoi(id) + 1;
+    /* make sure the value was >=1 */
+    if (c->portinc <= 1) {
+	if (isMaster)
+	    Error("invalid portinc number `%s' [%s:%d]", id, file, line);
+	c->portinc = 0;
+    }
 }

 void
@ -1560,16 +1628,24 @@ ProcessPortbase(c, id)
 	c->portbase = 0;
 	return;
    }
+
+    /* if we have -1, allow it (we allow >= -1 now) */
+    if (id[0] == '-' && id[1] == '1' && id[2] == '\000') {
+	c->portbase = 1;
+	return;
+    }
+
    for (p = id; *p != '\000'; p++)
 	if (!isdigit((int)(*p)))
 	    break;
+
    /* if it wasn't a number */
    if (*p != '\000') {
 	if (isMaster)
 	    Error("invalid portbase number `%s' [%s:%d]", id, file, line);
 	return;
    }
-    c->portbase = (unsigned short)atoi(id) + 1;
+    c->portbase = (unsigned short)atoi(id) + 2;
 }

 void
@ -1608,6 +1684,41 @@ DefaultItemPortinc(id)
    ProcessPortinc(parserDefaultTemp, id);
 }

+void
+#if PROTOTYPES
+ProcessProtocol(CONSENT *c, char *id)
+#else
+ProcessProtocol(c, id)
+    CONSENT *c;
+    char *id;
+#endif
+{
+    c->raw = 0;
+    if ((id == (char *)0) || (*id == '\000'))
+	return;
+
+    if (strcmp(id, "telnet") == 0)
+	return;
+    if (strcmp(id, "raw") == 0) {
+	c->raw = 1;
+	return;
+    }
+    if (isMaster)
+	Error("invalid protocol name `%s' [%s:%d]", id, file, line);
+}
+
+void
+#if PROTOTYPES
+DefaultItemProtocol(char *id)
+#else
+DefaultItemProtocol(id)
+    char *id;
+#endif
+{
+    CONDDEBUG((1, "DefaultItemProtocol(%s) [%s:%d]", id, file, line));
+    ProcessProtocol(parserDefaultTemp, id);
+}
+
 void
 #if PROTOTYPES
 ProcessIdletimeout(CONSENT *c, char *id)
@ -1877,7 +1988,7 @@ ProcessType(c, id)
    char *id;
 #endif
 {
-    CONSTYPE t = UNKNOWN;
+    CONSTYPE t = UNKNOWNTYPE;
    if ((id == (char *)0) || (*id == '\000')) {
 	c->type = t;
 	return;
@ -1888,7 +1999,7 @@ ProcessType(c, id)
 	t = EXEC;
    else if (strcasecmp("host", id) == 0)
 	t = HOST;
-    if (t == UNKNOWN) {
+    if (t == UNKNOWNTYPE) {
 	if (isMaster)
 	    Error("invalid console type `%s' [%s:%d]", id, file, line);
    } else
@ -2043,7 +2154,7 @@ ConsoleEnd()
 		invalid = 1;
 	    }
 	    break;
-	case UNKNOWN:
+	case UNKNOWNTYPE:
 	    if (isMaster)
 		Error("[%s] console type unknown [%s:%d]",
 		      parserConsoleTemp->server, file, line);
@ -2621,16 +2732,22 @@ ConsoleAdd(c)
 		    closeMatch = 0;
 		}
 		break;
-	    case UNKNOWN:
+	    case UNKNOWNTYPE:
 		break;
 	}

 	/* and now the rest (minus the "runtime" members - see below) */
 	pCEmatch->idletimeout = c->idletimeout;
 	if (pCEmatch->idletimeout != (time_t)0 &&
-	    (timers[T_IDLE] == (time_t)0 ||
-	     timers[T_IDLE] > pCEmatch->lastWrite + pCEmatch->idletimeout))
-	    timers[T_IDLE] = pCEmatch->lastWrite + pCEmatch->idletimeout;
+	    (timers[T_CIDLE] == (time_t)0 ||
+	     timers[T_CIDLE] >
+	     pCEmatch->lastWrite + pCEmatch->idletimeout))
+	    timers[T_CIDLE] = pCEmatch->lastWrite + pCEmatch->idletimeout;
+
+	pCEmatch->logfilemax = c->logfilemax;
+	if (pCEmatch->logfilemax != (off_t) 0 &&
+	    timers[T_ROLL] == (time_t)0)
+	    timers[T_ROLL] = time((time_t)0);

 	SwapStr(&pCEmatch->motd, &c->motd);
 	SwapStr(&pCEmatch->idlestring, &c->idlestring);
@ -2722,17 +2839,20 @@ ConsoleDestroy()
 	if (c->breakNum == 0)
 	    c->breakNum = 1;

-	/* portbase and portinc values are +1 so a zero can show that
-	 * no value was given.  defaults: portbase=0, portinc=1
+	/* portbase and portinc values are +2 and +1, so a zero can
+	 * show that no value was given.  defaults: portbase=0, portinc=1
 	 */
 	if (c->portbase != 0)
-	    c->portbase--;
+	    c->portbase -= 2;
 	if (c->portinc != 0)
 	    c->portinc--;
 	else
 	    c->portinc = 1;

 	/* now calculate the "real" port number */
+	/* this formula should always give >= 0 because
+	 * portbase >= -1, portinc >= 1, and port >= 1
+	 */
 	c->port = c->portbase + c->portinc * c->port;

 	/* check for substitutions */
@ -3074,6 +3194,18 @@ ConsoleItemLogfile(id)
    ProcessLogfile(parserConsoleTemp, id);
 }

+void
+#if PROTOTYPES
+ConsoleItemLogfilemax(char *id)
+#else
+ConsoleItemLogfilemax(id)
+    char *id;
+#endif
+{
+    CONDDEBUG((1, "ConsoleItemLogfilemax(%s) [%s:%d]", id, file, line));
+    ProcessLogfilemax(parserConsoleTemp, id);
+}
+
 void
 #if PROTOTYPES
 ConsoleItemInitcmd(char *id)
@ -3182,6 +3314,18 @@ ConsoleItemPortinc(id)
    ProcessPortinc(parserConsoleTemp, id);
 }

+void
+#if PROTOTYPES
+ConsoleItemProtocol(char *id)
+#else
+ConsoleItemProtocol(id)
+    char *id;
+#endif
+{
+    CONDDEBUG((1, "ConsoleItemProtocol(%s) [%s:%d]", id, file, line));
+    ProcessProtocol(parserConsoleTemp, id);
+}
+
 void
 #if PROTOTYPES
 ConsoleItemIdletimeout(char *id)
@ -4159,6 +4303,7 @@ ITEM keyDefault[] = {
    {"include", DefaultItemInclude},
    {"initcmd", DefaultItemInitcmd},
    {"logfile", DefaultItemLogfile},
+    {"logfilemax", DefaultItemLogfilemax},
    {"master", DefaultItemMaster},
    {"motd", DefaultItemMOTD},
    {"options", DefaultItemOptions},
@ -4166,6 +4311,7 @@ ITEM keyDefault[] = {
    {"port", DefaultItemPort},
    {"portbase", DefaultItemPortbase},
    {"portinc", DefaultItemPortinc},
+    {"protocol", DefaultItemProtocol},
    {"ro", DefaultItemRo},
    {"rw", DefaultItemRw},
    {"timestamp", DefaultItemTimestamp},
@ -4188,6 +4334,7 @@ ITEM keyConsole[] = {
    {"include", ConsoleItemInclude},
    {"initcmd", ConsoleItemInitcmd},
    {"logfile", ConsoleItemLogfile},
+    {"logfilemax", ConsoleItemLogfilemax},
    {"master", ConsoleItemMaster},
    {"motd", ConsoleItemMOTD},
    {"options", ConsoleItemOptions},
@ -4195,6 +4342,7 @@ ITEM keyConsole[] = {
    {"port", ConsoleItemPort},
    {"portbase", ConsoleItemPortbase},
    {"portinc", ConsoleItemPortinc},
+    {"protocol", ConsoleItemProtocol},
    {"ro", ConsoleItemRo},
    {"rw", ConsoleItemRw},
    {"timestamp", ConsoleItemTimestamp},
@ -4422,7 +4570,7 @@ ReadCfg(filename, fp)
 #endif
    isStartup = (pGroups == (GRPENT *)0 && pRCList == (REMOTE *)0);

-    /* inititalize local things */
+    /* initialize local things */
    if (word == (STRING *)0)
 	word = AllocString();
    line = 1;
--- a/conserver/version.h
+++ b/conserver/version.h
@ -1,5 +1,5 @@
 /*
- *  $Id: version.h,v 1.52 2003/11/07 20:54:49 bryan Exp $
+ *  $Id: version.h,v 1.57 2004/02/10 15:24:50 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -14,4 +14,4 @@
@(#) Copyright 2000 conserver.com.\n\
 All rights reserved.\n"

-#define THIS_VERSION "conserver.com version 8.0.6"
+#define THIS_VERSION "conserver.com version 8.1.1"
--- a/console/Makefile.in
+++ b/console/Makefile.in
@ -15,7 +15,7 @@ MKDIR = @MKDIR@

 ### Compiler and link options
 CC	= @CC@
-CFLAGS	= @CFLAGS@ # -DPUCC -DSUN5
+CFLAGS	= @CFLAGS@
 DEFS	= @DEFS@ -DSYSCONFDIR=\"$(sysconfdir)\"
 CPPFLAGS = -I.. -I$(top_srcdir) -I$(srcdir) -I$(top_srcdir)/conserver $(DEFS) @CPPFLAGS@
 LDFLAGS	= @LDFLAGS@
@ -25,18 +25,23 @@ LIBS	= @LIBS@

 ### Makefile rules - no user-servicable parts below

-CONSOLE_OBJS = console.o getpassword.o ../conserver/util.o
-CONSOLE_HDRS = ../config.h $(top_srcdir)/compat.h $(top_srcdir)/conserver/port.h
+CONSOLE_OBJS = console.o getpassword.o ../conserver/cutil.o
+CONSOLE_HDRS = ../config.h $(top_srcdir)/compat.h \
+	       $(top_srcdir)/conserver/cutil.h \
+	       $(top_srcdir)/conserver/version.h \
+	       $(srcdir)/getpassword.h
 ALL = console


 all: $(ALL)

+$(CONSOLE_OBJS): $(CONSOLE_HDRS)
+
 console: $(CONSOLE_OBJS)
 	$(CC) $(CFLAGS) $(LDFLAGS) -o console $(CONSOLE_OBJS) $(LIBS)

-../conserver/util.o:
-	( cd ../conserver && $(MAKE) $(MAKE_FLAGS) util.o ) || exit 1;
+../conserver/cutil.o:
+	( cd ../conserver && $(MAKE) $(MAKE_FLAGS) cutil.o ) || exit 1;

 .c.o:
 	$(CC) $(CFLAGS) $(CPPFLAGS) -c -o $@ $<
--- a/console/console.c
+++ b/console/console.c
@ -1,5 +1,5 @@
 /*
- *  $Id: console.c,v 5.150 2003/11/15 16:32:21 bryan Exp $
+ *  $Id: console.c,v 5.155 2004/01/08 16:12:46 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -32,7 +32,7 @@
 #include <pwd.h>

 #include <getpassword.h>
-#include <util.h>
+#include <cutil.h>
 #include <version.h>
 #if HAVE_OPENSSL
 #include <openssl/ssl.h>
@ -54,6 +54,9 @@ unsigned short bindPort;
 CONSFILE *cfstdout;
 char *pcUser = (char *)0;
 int disconnectCount = 0;
+STRING *execCmd = (STRING *)0;
+CONSFILE *execCmdFile = (CONSFILE *)0;
+pid_t execCmdPid = 0;

 #if HAVE_OPENSSL
 SSL_CTX *ctx = (SSL_CTX *)0;
@ -190,7 +193,7 @@ Usage(wantfull)
 	"D       enable debug output, sent to stderr",
 	"e esc   set the initial escape characters",
 #if HAVE_OPENSSL
-	"E       don't require encrypted connections",
+	"E       don't attempt encrypted connections",
 #else
 	"E       ignored - encryption not compiled into code",
 #endif
@ -570,6 +573,7 @@ ReadReply(fd)
 	BuildString((char *)0, result);

    while (1) {
+	int l;
 	switch (nr = FileRead(fd, buf, sizeof(buf))) {
 	    case 0:
 		/* fall through */
@ -580,6 +584,13 @@ ReadReply(fd)
 		Error("lost connection");
 		Bye(EX_UNAVAILABLE);
 	    default:
+		while ((l = ParseIACBuf(fd, buf, &nr)) >= 0) {
+		    if (l == 0)
+			continue;
+		    BuildStringN(buf, l, result);
+		    nr -= l;
+		    MemMove(buf, buf + l, nr);
+		}
 		BuildStringN(buf, nr, result);
 		if (toEOF)	/* if toEOF, read until EOF */
 		    continue;
@ -601,78 +612,251 @@ ReadReply(fd)
    return result->string;
 }

-static int SawUrg = 0;
-
-/* when the conserver program gets the suspend sequence it will send us
- * an out of band command to suspend ourself.  We just tell the reader
- * routine we saw one
- */
-RETSIGTYPE
+static void
 #if PROTOTYPES
-OOB(int sig)
+ReapVirt(void)
 #else
-OOB(sig)
+ReapVirt()
+#endif
+{
+    pid_t pid;
+    int UWbuf;
+
+    while (-1 != (pid = waitpid(-1, &UWbuf, WNOHANG | WUNTRACED))) {
+	if (0 == pid)
+	    break;
+
+	/* stopped child is just continued
+	 */
+	if (WIFSTOPPED(UWbuf) && 0 == kill(pid, SIGCONT)) {
+	    Msg("child pid %lu: stopped, sending SIGCONT",
+		(unsigned long)pid);
+	    continue;
+	}
+
+	if (WIFEXITED(UWbuf))
+	    Verbose("child process %lu: exit(%d)", pid,
+		    WEXITSTATUS(UWbuf));
+	if (WIFSIGNALED(UWbuf))
+	    Verbose("child process %lu: signal(%d)", pid, WTERMSIG(UWbuf));
+	if (pid == execCmdPid) {
+	    if (WIFEXITED(UWbuf))
+		FilePrint(cfstdout, FLAGFALSE,
+			  "[local command terminated - pid %lu: exit(%d)]\r\n",
+			  pid, WEXITSTATUS(UWbuf));
+	    if (WIFSIGNALED(UWbuf))
+		FilePrint(cfstdout, FLAGFALSE,
+			  "[local command terminated - pid %lu: signal(%d)]\r\n",
+			  pid, WTERMSIG(UWbuf));
+	}
+    }
+}
+
+static sig_atomic_t fSawReapVirt = 0;
+
+#if HAVE_SIGACTION
+static
+#endif
+  RETSIGTYPE
+#if PROTOTYPES
+FlagReapVirt(int sig)
+#else
+FlagReapVirt(sig)
    int sig;
 #endif
 {
-    ++SawUrg;
+    fSawReapVirt = 1;
 #if !HAVE_SIGACTION
-#if defined(SIGURG)
-    SimpleSignal(SIGURG, OOB);
+    SimpleSignal(SIGCHLD, FlagReapVirt);
 #endif
+}
+
+/* invoke the execcmd command */
+void
+#if PROTOTYPES
+ExecCmd(void)
+#else
+ExecCmd()
 #endif
+{
+    int i;
+    pid_t iNewGrp;
+    extern char **environ;
+    int pin[2];
+    int pout[2];
+    static char *apcArgv[] = {
+	"/bin/sh", "-ce", (char *)0, (char *)0
+    };
+
+    if (execCmd == (STRING *)0 || execCmd->used <= 1)
+	return;
+
+    CONDDEBUG((1, "ExecCmd(): `%s'", execCmd->string));
+
+    /* pin[0] = parent read, pin[1] = child write */
+    if (pipe(pin) != 0) {
+	Error("ExecCmd(): pipe(): %s", strerror(errno));
+	return;
+    }
+    /* pout[0] = child read, pout[l] = parent write */
+    if (pipe(pout) != 0) {
+	close(pin[0]);
+	close(pin[1]);
+	Error("ExecCmd(): pipe(): %s", strerror(errno));
+	return;
+    }
+
+    fflush(stdout);
+    fflush(stderr);
+
+    switch (execCmdPid = fork()) {
+	case -1:
+	    return;
+	case 0:
+	    thepid = getpid();
+	    break;
+	default:
+	    close(pout[0]);
+	    close(pin[1]);
+	    if ((execCmdFile =
+		 FileOpenPipe(pin[0], pout[1])) == (CONSFILE *)0) {
+		Error("ExecCmd(): FileOpenPipe(%d,%d) failed", pin[0],
+		      pout[1]);
+		close(pin[0]);
+		close(pout[1]);
+		kill(execCmdPid, SIGHUP);
+		return;
+	    }
+	    FilePrint(cfstdout, FLAGFALSE,
+		      "[local command running - pid %lu]\r\n", execCmdPid);
+	    FD_SET(pin[0], &rinit);
+	    if (maxfd < pin[0] + 1)
+		maxfd = pin[0] + 1;
+	    fflush(stderr);
+	    return;
+    }
+
+    close(pin[0]);
+    close(pout[1]);
+
+    /* put the signals back that we ignore (trapped auto-reset to default)
+     */
+    SimpleSignal(SIGPIPE, SIG_DFL);
+    SimpleSignal(SIGCHLD, SIG_DFL);
+
+    /* setup new process with clean file descriptors
+     * stderr still goes to stderr...so user sees it
+     */
+    i = GetMaxFiles();
+    for ( /* i above */ ; --i > 3;) {
+	if (i != pout[0] && i != pin[1])
+	    close(i);
+    }
+    close(1);
+    close(0);
+
+# if HAVE_SETSID
+    iNewGrp = setsid();
+    if (-1 == iNewGrp) {
+	Error("ExecCmd(): setsid(): %s", strerror(errno));
+	iNewGrp = thepid;
+    }
+# else
+    iNewGrp = thepid;
+# endif
+
+    if (dup(pout[0]) != 0 || dup(pin[1]) != 1) {
+	Error("ExecCmd(): fd sync error");
+	Bye(EX_OSERR);
+    }
+    close(pout[0]);
+    close(pin[1]);
+
+    tcsetpgrp(0, iNewGrp);
+
+    apcArgv[2] = execCmd->string;
+
+    execve(apcArgv[0], apcArgv, environ);
+    Error("ExecCmd(): execve(%s): %s", apcArgv[2], strerror(errno));
+    Bye(EX_OSERR);
+    return;
 }

 void
 #if PROTOTYPES
-ProcessUrgentData(int s)
+DoExec(CONSFILE *pcf)
 #else
-ProcessUrgentData(s)
-    int s;
+DoExec(pcf)
+    CONSFILE *pcf;
 #endif
 {
-    static char acCmd;
-
-    SawUrg = 0;
-
-    /* get the pending urgent message
-     */
-    while (recv(s, &acCmd, 1, MSG_OOB) < 0) {
-	switch (errno) {
-	    case EWOULDBLOCK:
-		/* clear any pending input to make room */
-		read(s, &acCmd, 1);
-		write(1, ".", 1);
-		continue;
-	    case EINVAL:
-	    default:
-		Error("recv(%d): %s\r", s, strerror(errno));
-		sleep(1);
-		continue;
+    FileWrite(cfstdout, FLAGFALSE, "exec: ", 6);
+    BuildString((char *)0, execCmd);
+    for (;;) {
+	char c;
+	if (read(0, &c, 1) == 0)
+	    break;
+	if (c == '\n' || c == '\r') {
+	    FileWrite(cfstdout, FLAGFALSE, "]\r\n", 3);
+	    break;
+	}
+	if (c == '\a' || (c >= ' ' && c <= '~')) {
+	    BuildStringChar(c, execCmd);
+	    FileWrite(cfstdout, FLAGFALSE, &c, 1);
+	} else if ((c == '\b' || c == 0x7f) && execCmd->used > 1) {
+	    if (execCmd->string[execCmd->used - 2] != '\a') {
+		FileWrite(cfstdout, FLAGFALSE, "\b \b", 3);
+	    }
+	    execCmd->string[execCmd->used - 2] = '\000';
+	    execCmd->used--;
+	} else if ((c == 0x15) && execCmd->used > 1) {
+	    while (execCmd->used > 1) {
+		if (execCmd->string[execCmd->used - 2] != '\a') {
+		    FileWrite(cfstdout, FLAGFALSE, "\b \b", 3);
+		}
+		execCmd->string[execCmd->used - 2] = '\000';
+		execCmd->used--;
+	    }
 	}
    }
-    switch (acCmd) {
-	case OB_SUSP:
-#if defined(SIGSTOP)
-	    write(1, "stop]", 5);
-	    C2Cooked();
-	    kill(getpid(), SIGSTOP);
-	    C2Raw();
-	    write(1, "[press any character to continue", 32);
-#else
-	    write(1,
-		  "stop not supported -- press any character to continue",
-		  53);
-#endif
-	    break;
-	case OB_DROP:
-	    write(1, "dropped by server]\r\n", 20);
-	    C2Cooked();
-	    Bye(EX_UNAVAILABLE);
-	 /*NOTREACHED*/ default:
-	    Error("unknown out of band command `%c\'\r", acCmd);
-	    fflush(stderr);
-	    break;
+    if (execCmd != (STRING *)0 && execCmd->used > 1) {
+	ExecCmd();
+	BuildString((char *)0, execCmd);
+	if (execCmdFile == (CONSFILE *)0) {	/* exec failed */
+	    /* say forget it */
+	    FileSetQuoteIAC(pcf, FLAGFALSE);
+	    FilePrint(pcf, FLAGFALSE, "%c%c", OB_IAC, OB_ABRT);
+	    FileSetQuoteIAC(pcf, FLAGTRUE);
+	} else {
+	    char *r;
+	    /* go back to blocking mode */
+	    SetFlags(FileFDNum(pcf), 0, O_NONBLOCK);
+	    /* say we're ready */
+	    FileSetQuoteIAC(pcf, FLAGFALSE);
+	    FilePrint(pcf, FLAGFALSE, "%c%c", OB_IAC, OB_EXEC);
+	    FileSetQuoteIAC(pcf, FLAGTRUE);
+	    r = ReadReply(pcf, 0);
+	    /* now back to non-blocking, now that we've got reply */
+	    SetFlags(FileFDNum(pcf), O_NONBLOCK, 0);
+	    /* if we aren't still r/w, abort */
+	    if (strncmp(r, "[rw]", 4) != 0) {
+		FileWrite(cfstdout, FLAGFALSE,
+			  "[no longer read-write - aborting command]\r\n",
+			  -1);
+		FD_CLR(FileFDNum(execCmdFile), &rinit);
+		FD_CLR(FileFDOutNum(execCmdFile), &winit);
+		FileClose(&execCmdFile);
+		FileSetQuoteIAC(pcf, FLAGFALSE);
+		FilePrint(pcf, FLAGFALSE, "%c%c", OB_IAC, OB_ABRT);
+		FileSetQuoteIAC(pcf, FLAGTRUE);
+		kill(execCmdPid, SIGHUP);
+	    }
+	}
+    } else {
+	/* say forget it */
+	FileSetQuoteIAC(pcf, FLAGFALSE);
+	FilePrint(pcf, FLAGFALSE, "%c%c", OB_IAC, OB_ABRT);
+	FileSetQuoteIAC(pcf, FLAGTRUE);
    }
 }

@ -690,9 +874,9 @@ CallUp(pcf, pcMaster, pcMach, pcHow, result)
 {
    int nc;
    int fIn = '-';
-    fd_set rmask, rinit;
+    fd_set rmask, wmask;
    int i;
-    int justProcessedUrg = 0;
+    int justSuspended = 0;
    char *r = (char *)0;
    static char acMesg[8192];

@ -701,9 +885,9 @@ CallUp(pcf, pcMaster, pcMach, pcHow, result)
    }
 #if !defined(__CYGWIN__)
 # if defined(F_SETOWN)
-    if (fcntl(FileFDNum(pcf), F_SETOWN, getpid()) == -1) {
-	Error("fcntl(F_SETOWN,%d): %d: %s", getpid(), FileFDNum(pcf),
-	      strerror(errno));
+    if (fcntl(FileFDNum(pcf), F_SETOWN, thepid) == -1) {
+	Error("fcntl(F_SETOWN,%lu): %d: %s", (unsigned long)thepid,
+	      FileFDNum(pcf), strerror(errno));
    }
 # else
 #  if defined(SIOCSPGRP)
@ -711,7 +895,7 @@ CallUp(pcf, pcMaster, pcMach, pcHow, result)
 	int iTemp;
 	/* on the HP-UX systems if different
 	 */
-	iTemp = -getpid();
+	iTemp = -thepid;
 	if (ioctl(FileFDNum(pcf), SIOCSPGRP, &iTemp) == -1) {
 	    Error("ioctl(%d,SIOCSPGRP): %s", FileFDNum(pcf),
 		  strerror(errno));
@ -720,9 +904,7 @@ CallUp(pcf, pcMaster, pcMach, pcHow, result)
 #  endif
 # endif
 #endif
-#if defined(SIGURG)
-    SimpleSignal(SIGURG, OOB);
-#endif
+    SimpleSignal(SIGCHLD, FlagReapVirt);

    /* if we are going for a particular console
     * send sign-on stuff, then wait for some indication of what mode
@ -818,27 +1000,32 @@ CallUp(pcf, pcMaster, pcMach, pcHow, result)

    C2Raw();

+    /* set socket to non-blocking */
+    SetFlags(FileFDNum(pcf), O_NONBLOCK, 0);
+
    /* read from stdin and the socket (non-blocking!).
     * rmask indicates which descriptors to read from,
     * the others are not used, nor is the result from
     * select, read, or write.
     */
    FD_ZERO(&rinit);
+    FD_ZERO(&winit);
    FD_SET(FileFDNum(pcf), &rinit);
    FD_SET(0, &rinit);
    if (maxfd < FileFDNum(pcf) + 1)
 	maxfd = FileFDNum(pcf) + 1;
    for (;;) {
-	justProcessedUrg = 0;
-	if (SawUrg) {
-	    ProcessUrgentData(FileFDNum(pcf));
-	    justProcessedUrg = 1;
+	justSuspended = 0;
+	if (fSawReapVirt) {
+	    fSawReapVirt = 0;
+	    ReapVirt();
 	}
 	/* reset read mask and select on it
 	 */
 	rmask = rinit;
+	wmask = winit;
 	if (-1 ==
-	    select(maxfd, &rmask, (fd_set *)0, (fd_set *)0,
+	    select(maxfd, &rmask, &wmask, (fd_set *)0,
 		   (struct timeval *)0)) {
 	    if (errno != EINTR) {
 		Error("Master(): select(): %s", strerror(errno));
@ -847,21 +1034,84 @@ CallUp(pcf, pcMaster, pcMach, pcHow, result)
 	    continue;
 	}

+	/* anything from execCmd */
+	if (execCmdFile != (CONSFILE *)0) {
+	    if (FileCanRead(execCmdFile, &rmask, &wmask)) {
+		if ((nc =
+		     FileRead(execCmdFile, acMesg, sizeof(acMesg))) < 0) {
+		    FD_CLR(FileFDNum(execCmdFile), &rinit);
+		    FD_CLR(FileFDOutNum(execCmdFile), &winit);
+		    FileClose(&execCmdFile);
+		    FileSetQuoteIAC(pcf, FLAGFALSE);
+		    FilePrint(pcf, FLAGFALSE, "%c%c", OB_IAC, OB_ABRT);
+		    FileSetQuoteIAC(pcf, FLAGTRUE);
+		} else {
+		    if (fStrip) {
+			for (i = 0; i < nc; ++i)
+			    acMesg[i] &= 127;
+		    }
+		    FileWrite(pcf, FLAGFALSE, acMesg, nc);
+		}
+	    } else if (!FileBufEmpty(execCmdFile) &&
+		       FileCanWrite(execCmdFile, &rmask, &wmask)) {
+		CONDDEBUG((1, "CallUp(): flushing fd %d",
+			   FileFDNum(execCmdFile)));
+		if (FileWrite(execCmdFile, FLAGFALSE, (char *)0, 0) < 0) {
+		    /* -bryan */
+		    break;
+		}
+	    }
+	}
+
 	/* anything from socket? */
-	if (FD_ISSET(FileFDNum(pcf), &rmask)) {
+	if (FileCanRead(pcf, &rmask, &wmask)) {
+	    int l;
 	    if ((nc = FileRead(pcf, acMesg, sizeof(acMesg))) < 0) {
 		/* if we got an error/eof after returning from suspend */
-		if (justProcessedUrg) {
+		if (justSuspended) {
 		    fprintf(stderr, "\n");
 		    Error("lost connection");
 		}
 		break;
 	    }
-	    if (fStrip) {
-		for (i = 0; i < nc; ++i)
-		    acMesg[i] &= 127;
+	    while ((l = ParseIACBuf(pcf, acMesg, &nc)) >= 0) {
+		if (l == 0) {
+		    if (FileSawQuoteExec(pcf) == FLAGTRUE)
+			DoExec(pcf);
+		    if (FileSawQuoteSusp(pcf) == FLAGTRUE) {
+			justSuspended = 1;
+#if defined(SIGSTOP)
+			FileWrite(cfstdout, FLAGFALSE, "stop]", 5);
+			C2Cooked();
+			kill(thepid, SIGSTOP);
+			C2Raw();
+			FileWrite(cfstdout, FLAGFALSE,
+				  "[press any character to continue", 32);
+#else
+			FileWrite(cfstdout, FLAGFALSE,
+				  "stop not supported -- press any character to continue",
+				  53);
+#endif
+		    }
+		    continue;
+		}
+		if (fStrip) {
+		    for (i = 0; i < l; ++i)
+			acMesg[i] &= 127;
+		}
+		FileWrite(cfstdout, FLAGFALSE, acMesg, l);
+		if (execCmdFile != (CONSFILE *)0) {
+		    FileWrite(execCmdFile, FLAGFALSE, acMesg, l);
+		}
+		nc -= l;
+		MemMove(acMesg, acMesg + l, nc);
+	    }
+	} else if (!FileBufEmpty(pcf) && FileCanWrite(pcf, &rmask, &wmask)) {
+	    CONDDEBUG((1, "CallUp(): flushing fd %d", FileFDNum(pcf)));
+	    if (FileWrite(pcf, FLAGFALSE, (char *)0, 0) < 0) {
+		/* -bryan */
+		break;
 	    }
-	    FileWrite(cfstdout, FLAGFALSE, acMesg, nc);
 	}

 	/* anything from stdin? */
@ -874,11 +1124,31 @@ CallUp(pcf, pcMaster, pcMach, pcHow, result)
 		    continue;
 		}
 	    }
-	    if (fStrip) {
-		for (i = 0; i < nc; ++i)
-		    acMesg[i] &= 127;
+	    if (execCmdFile == (CONSFILE *)0) {
+		if (fStrip) {
+		    for (i = 0; i < nc; ++i)
+			acMesg[i] &= 127;
+		}
+		FileWrite(pcf, FLAGFALSE, acMesg, nc);
+	    } else {
+		for (i = 0; i < nc; ++i) {
+		    if (acMesg[i] == '\n' || acMesg[i] == '\r')
+			FilePrint(cfstdout, FLAGFALSE,
+				  "[local command running - pid %lu]\r\n",
+				  execCmdPid);
+		    else if (acMesg[i] == 0x03) {	/* ctrl-c */
+			kill(execCmdPid, SIGHUP);
+			FilePrint(cfstdout, FLAGFALSE,
+				  "[local command sent SIGHUP - pid %lu]\r\n",
+				  execCmdPid);
+		    } else if (acMesg[i] == 0x1c) {	/* ctrl-\ */
+			kill(execCmdPid, SIGKILL);
+			FilePrint(cfstdout, FLAGFALSE,
+				  "[local command sent SIGKILL - pid %lu]\r\n",
+				  execCmdPid);
+		    }
+		}
 	    }
-	    FileWrite(pcf, FLAGFALSE, acMesg, nc);
 	}
    }
    C2Cooked();
@ -949,6 +1219,8 @@ DoCmds(master, ports, cmdi)
 	if ((pcf = GetPort(server, port)) == (CONSFILE *)0)
 	    continue;

+	FileSetQuoteIAC(pcf, FLAGTRUE);
+
 	t = ReadReply(pcf, 0);
 	if (strcmp(t, "ok\r\n") != 0) {
 	    FileClose(&pcf);
@ -956,15 +1228,17 @@ DoCmds(master, ports, cmdi)
 	    continue;
 	}
 #if HAVE_OPENSSL
-	FileWrite(pcf, FLAGFALSE, "ssl\r\n", 5);
-	t = ReadReply(pcf, 0);
-	if (strcmp(t, "ok\r\n") == 0) {
-	    AttemptSSL(pcf);
-	}
-	if (fReqEncryption && FileGetType(pcf) != SSLSocket) {
-	    Error("Encryption not supported by server `%s'", server);
-	    FileClose(&pcf);
-	    continue;
+	if (fReqEncryption) {
+	    FileWrite(pcf, FLAGFALSE, "ssl\r\n", 5);
+	    t = ReadReply(pcf, 0);
+	    if (strcmp(t, "ok\r\n") == 0) {
+		AttemptSSL(pcf);
+	    }
+	    if (FileGetType(pcf) != SSLSocket) {
+		Error("Encryption not supported by server `%s'", server);
+		FileClose(&pcf);
+		continue;
+	    }
 	}
 #endif

@ -1014,6 +1288,10 @@ DoCmds(master, ports, cmdi)
 		continue;
 	    } else
 		count = 0;
+	} else if (strcmp(t, "ok\r\n") != 0) {
+	    FileClose(&pcf);
+	    FilePrint(cfstdout, FLAGFALSE, "%s: %s", server, t);
+	    continue;
 	}

 	/* now that we're logged in, we can do something */
@ -1151,6 +1429,8 @@ main(argc, argv)

    isMultiProc = 0;		/* make sure stuff DOESN'T have the pid */

+    thepid = getpid();
+
    if (textMsg == (STRING *)0)
 	textMsg = AllocString();
    if (acPorts == (STRING *)0)
@ -1387,6 +1667,8 @@ main(argc, argv)
 	}
    }

+    if (execCmd == (STRING *)0)
+	execCmd = AllocString();

    SimpleSignal(SIGPIPE, SIG_IGN);

--- a/console/console.man
+++ b/console/console.man
@ -1,5 +1,5 @@
-.\" $Id: console.man,v 1.40 2003/11/16 15:35:45 bryan Exp $
-.TH CONSOLE 1 "2003/11/16" "conserver-8.0.6" "conserver"
+.\" $Id: console.man,v 1.42 2003/12/25 19:22:02 bryan Exp $
+.TH CONSOLE 1 "2003/12/25" "conserver-8.1.1" "conserver"
 .SH NAME
 console \- console server client program
 .SH SYNOPSIS
@ -324,7 +324,7 @@ file descriptor for the device.
 Commands will have values of the command, the command's pid, the
 pseudo-tty, and file descriptor for the pseudo-tty.
 Remote ports will have values of the remote hostname, remote port number,
-and file descriptor for the socket connection.
+``raw'' or ``telnet'' protocol, and file descriptor for the socket connection.
 .TP
 .I users-list
 The details of each user connected to the console.
@ -454,6 +454,9 @@ examine this group's devices and modes
 .B z
 suspend this connection
 .TP
+.B |
+attach a local command to the console
+.TP
 .B ?
 display list of commands
 .TP
--- a/console/getpassword.c
+++ b/console/getpassword.c
@ -1,5 +1,5 @@
 /*
- *  $Id: getpassword.c,v 1.7 2003/09/28 19:29:17 bryan Exp $
+ *  $Id: getpassword.c,v 1.8 2003/11/20 13:56:41 bryan Exp $
 *
 *  Copyright conserver.com, 2000
 *
@ -12,7 +12,7 @@

 #include <pwd.h>

-#include <util.h>
+#include <cutil.h>
 #include <version.h>


--- a/contrib/redhat-rpm/conserver.spec
+++ b/contrib/redhat-rpm/conserver.spec
@ -4,7 +4,7 @@
 #

 %define pkg  conserver
-%define ver  8.0.6
+%define ver  8.1.1

 # define the name of the machine on which the main conserver
 # daemon will be running if you don't want to use the default
--- a/contrib/solaris-package/pkginfo
+++ b/contrib/solaris-package/pkginfo
@ -1,7 +1,7 @@
 PKG="conserver"
 NAME="Console server and client"
 CATEGORY="system"
-VERSION="8.0.6"
+VERSION="8.1.1"
 DESC="Console server and client"
 CLASSES=none
 ARCH=sparc
--- a/test/results/test2
+++ b/test/results/test2
@ -11,7 +11,7 @@
 r    replay the last 20 lines          s    spy read only
 u    show host status                  v    show version info
 w    who is on this console            x    show console baud info
- z    suspend the connection            <cr> ignore/abort command
- ?    print this message                ^R   replay the last line
- \ooo send character by octal code
+ z    suspend the connection            |    attach local command
+ <cr> ignore/abort command              ?    print this message
+ ^R   replay the last line              \ooo send character by octal code
 [disconnect]
--- a/test/results/test7
+++ b/test/results/test7
@ -11,7 +11,7 @@
 r    replay the last 20 lines          s    spy read only
 u    show host status                  v    show version info
 w    who is on this console            x    show console baud info
- z    suspend the connection            <cr> ignore/abort command
- ?    print this message                ^R   replay the last line
- \ooo send character by octal code
+ z    suspend the connection            |    attach local command
+ <cr> ignore/abort command              ?    print this message
+ ^R   replay the last line              \ooo send character by octal code
 [disconnect]
Author	SHA1	Message	Date
Bryan Stansell	9eed9f2d8f	Imported from conserver-8.1.1.tar.gz	2004-02-10 07:26:45 -08:00
Bryan Stansell	25a4dcb0fd	Imported from conserver-8.1.0.tar.gz	2004-01-18 09:31:24 -08:00
Bryan Stansell	75cfd02f7a	Imported from conserver-8.0.9.tar.gz	2003-12-10 10:37:48 -08:00
Bryan Stansell	ad7a90dd69	Imported from conserver-8.0.8.tar.gz	2003-12-02 08:40:59 -08:00
Bryan Stansell	691c3102c9	Imported from conserver-8.0.7.tar.gz	2003-11-20 06:49:09 -08:00