This distribution includes modifications made primarily by Dan McDonald of the Naval Research Laboratory (NRL) during March 1994. Other NRL folks who helped or consulted with this included Jim Ramsey , Bao Phan , Georg Thomas , Preston Mullen and Ran Atkinson . NRL additions/modifications to the standard S/Key distribution include: * A modified BSD FTP daemon that does S/Key * The "su" binary always challenges for S/Key, even on the console. This was a hole on rlogin/telnet sessions in the original software. * MD5 support (MD5 seemed to work out of the box) which can be enabled simply by editing the supplied Makefile to comment out the MD4 lines and uncomment the MD5 lines. Comments make this clear in the file. MD5 is believed by many to be stronger than MD4, see the RFCs. * A more portable version of MD4 has been substituted for the original MD4. This ends many of the endian problems. * Took a few more hard-coded pathnames, and put them in "pathnames.h". * Cosmetic changes Additional modifications from Marcus Ranum are included in this distribution but are commented out by default or are protected by "#ifdef MJR" which is undefined by default. Marcus Ranum's changes are described in the README.MJR file included in this distribution. To enable those changes, add "-DMJR" to the CFLAGS in the Makefile. NRL has not tested the changes from Marcus Ranum. With the new MD4 routines, Marcus's changes may need further modification. ============ To install S/Key: 1. Edit the Makefile. Figure out if you want MD4, MD5, or Marcus Ranum's MD4 + DES support. These lines are commented in the Makefile as "Take your pick". 2. Configure the "CONFIGURATION PARAMETERS" section. This has information such as where certain binaries that S/Key modifies reside. 3. Edit the file "pathnames.h". See if your system include files define the various symbols in pathnames.h. 3a. The file "login.c" has an include of which doesn't work on all systems. If login.c doesn't compile, comment it out. 4. Edit the "keyinit" shell script. Subtitute your machine name for instances of "sundance". 5. Type in "make install" to install S/Key. Just typing in "make" will compile the S/Key binaries. WARNING: "make install" will move original su, login, and ftpd binaries to O.$. If you are installing over an old version of S/Key binaries the original binaries which lie in O.$ will be erased.