tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
4,006 Commits 6 Branches 20 Tags 99 MiB
Commit Graph

3578 Commits

Author SHA1 Message Date
Darren Tucker 1d3ca58705 - (dtucker) [configure.ac] Use krb5-config where available for Kerberos/ 
GSSAPI detection, libs and includes.  ok djm@
 2004-01-22 12:05:34 +11:00
Damien Miller f4da3bb6ca - deraadt@cvs.openbsd.org 2004/01/11 21:55:06 
[sshpty.c]
     for pty opening, only use the openpty() path.  the other stuff only needs
     to be in openssh-p; markus ok
 - (djm) [openbsd-compat/bsd-openpty.c] Rework old sshpty.c code into an
   openpty() replacement
 2004-01-21 17:07:16 +11:00
Damien Miller e4f5a82d6e - djm@cvs.openbsd.org 2004/01/21 03:07:59 
[sftp.c]
     initialise infile in main, rather than statically - from portable
 2004-01-21 14:11:05 +11:00
Damien Miller fb1310eded - markus@cvs.openbsd.org 2004/01/19 21:25:15 
[auth2-hostbased.c auth2-pubkey.c serverloop.c ssh-keysign.c sshconnect2.c]
     fix mem leaks; some fixes from Pete Flugstad; tested dtucker@
 2004-01-21 11:02:50 +11:00
Damien Miller a04ad496f6 - markus@cvs.openbsd.org 2004/01/19 09:24:21 
[channels.c]
     fake consumption for half closed channels since the peer is waiting for
     window adjust messages; bugzilla #790 Matthew Dillon; test + ok dtucker@
     reproduce with sh -c 'ulimit -f 10; ssh host -n od /bsd | cat > foo'
 2004-01-21 11:02:09 +11:00
Damien Miller f84fed6f71 - markus@cvs.openbsd.org 2004/01/13 19:45:15 
[compress.c]
     cast for portability; millert@
 2004-01-21 11:01:23 +11:00
Damien Miller 8f341f8b8b - markus@cvs.openbsd.org 2004/01/13 19:23:15 
[compress.c session.c]
     -Wall; ok henning
 2004-01-21 11:00:46 +11:00
Damien Miller 86a396857d - jmc@cvs.openbsd.org 2004/01/13 12:17:33 
[sftp.1]
     remove unnecessary Ic's;
     kill whitespace at EOL;

     ok djm@
 2004-01-21 11:00:04 +11:00
Damien Miller 44f75c14f6 - djm@cvs.openbsd.org 2004/01/13 09:25:05 
[sftp-int.c sftp.1 sftp.c]
     Tidy sftp batchmode handling, eliminate junk to stderr (bugzilla #754) and
     enable use of "-b -" to accept batchfile from stdin; ok markus@
 2004-01-21 10:58:47 +11:00
Darren Tucker a8df9248ce - (dtucker) [auth-pam.c] Add minor debugging. 2004-01-15 00:15:07 +11:00
Darren Tucker 7ae0962798 - (dtucker) [auth-pam.c] Reset signal handler in pthread_cancel too, add 
test for case where cleanup has already run.
 2004-01-14 23:07:56 +11:00
Darren Tucker 749bc95bd8 - (dtucker) [auth-pam.c] Have monitor die if PAM authentication thread exits 
unexpectedly.  with & ok djm@
 2004-01-14 22:14:04 +11:00
Darren Tucker 1b27c8fbcb - (dtucker) [auth-pam.c] Relocate struct pam_ctxt and prototypes. No 
functional changes.

This is in preparation for a change to catch the authentication thread
exitting unexpectedly, to split functional and cosmetic changes.
 2004-01-13 22:35:58 +11:00
Darren Tucker fd0894adae - (dtucker) [configure.ac] Remove extra (typo) comma. 2004-01-09 00:19:25 +11:00
Darren Tucker 0234e8607f - (dtucker) [auth-pam.c defines.h] Bug #783: move __unused to defines.h and 
only define if not already.  From des at freebsd.org.
 2004-01-08 23:32:04 +11:00
Darren Tucker 409cb328c1 - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c] 
Only enable KerberosGetAFSToken if Heimdal's libkafs is found.  with jakob@
 2004-01-05 22:36:51 +11:00
Darren Tucker e918318f2b - (dtucker) [contrib/ssh-copy-id] Bug #781: exit if ssh fails. Patch from 
cjwatson at debian.org.
 2004-01-05 08:16:34 +11:00
Damien Miller 0f47c53742 - (djm) OSX/Darwin put the PAM headers in a different place, detect this. 
Report from jakob@
 2004-01-02 18:01:30 +11:00
Damien Miller c8ec16651e - (djm) Remove useless DNS support configure summary message. from jakob@ 2004-01-02 17:53:04 +11:00
Damien Miller 7a2ea78cc4 - (djm) OSX/Darwin needs BIND_8_COMPAT to build getrrsetbyname. Report from 
jakob@
 2004-01-02 17:52:10 +11:00
Darren Tucker 2a6b029f99 - (dtucker) [configure.ac] Only test setresuid and setresgid if they exist. 2003-12-31 14:59:17 +11:00
Darren Tucker ea2870619d - dtucker@cvs.openbsd.org 2003/12/31 00:24:50 
[auth2-passwd.c]
     Ignore password change request during password auth (which we currently
     don't support) and discard proposed new password.  corrections/ok markus@
 2003-12-31 11:43:24 +11:00
Darren Tucker 0b3b97512f - millert@cvs.openbsd.org 2003/12/29 16:39:50 
[sshd_config]
     KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK
 2003-12-31 11:38:32 +11:00
Darren Tucker 22ef508754 - jakob@cvs.openbsd.org 2003/12/23 16:12:10 
[servconf.c servconf.h session.c sshd_config]
     implement KerberosGetAFSToken server option. ok markus@, beck@
 2003-12-31 11:37:34 +11:00
Darren Tucker a32e19c637 - markus@cvs.openbsd.org 2003/12/22 20:29:55 
[cipher-3des1.c]
     EVP_CIPHER_CTX_cleanup() for the des contexts; pruiksma@freesurf.fr
 2003-12-31 11:36:00 +11:00
Darren Tucker 06930c70ad - djm@cvs.openbsd.org 2003/12/22 09:16:58 
[moduli.c ssh-keygen.1 ssh-keygen.c]
     tidy up moduli generation debugging, add -v (verbose/debug) option to
     ssh-keygen; ok markus@
 2003-12-31 11:34:51 +11:00
Darren Tucker 3715be3cd3 - (dtucker) [defines.h] Bug #458: Define SIZE_T_MAX as UINT_MAX if we 
typedef size_t ourselves.
 2003-12-19 10:58:43 +11:00
Darren Tucker 07705c788e - (dtucker) [auth-pam.c] Do PAM chauthtok during SSH2 keyboard-interactive 
authentication.  Partially fixes bug #423.  Feedback & ok djm@

Some background on why this is the way it is:
* Solaris 8's pam_chauthtok ignores the CHANGE_EXPIRED_AUTHTOK flag, so
  we must call do_pam_account() to figure out if the password is expired.
* AIX 5.2 does not like having pam_acct_mgmt() called twice, once from the
  authentication thread and once from the main shell child, so we cache the
  result, which must be passed from the authentication thread back to the
  monitor.
 2003-12-18 15:34:31 +11:00
Darren Tucker 454da0b3dc - (dtucker) [configure.ac] Don't use setre[ug]id on DG-UX, from Tom Orban. 2003-12-18 12:52:19 +11:00
Ben Lindstrom 563eb99711 - (bal) [openbsd-compat/bsd-misc.c] unset 'signal' defined if we are 
using a real 'signal()' (Noticed by a NeXT Compile)
 2003-12-18 00:34:06 +00:00
Darren Tucker e937be36c3 - (dtucker) [acconfig.h configure.ac uidswap.c] Bug #645: Check for 
setres[ug]id() present but not implemented (eg some Linux/glibc
   combinations).
 2003-12-17 18:53:26 +11:00
Damien Miller 8975ddf11b - markus@cvs.openbsd.org 2003/12/16 15:51:54 
[dh.c]
     use <= instead of < in dh_estimate; ok provos/hshoexer;
     do not return < DH_GRP_MIN
 2003-12-17 16:33:53 +11:00
Damien Miller 509b0107f0 - markus@cvs.openbsd.org 2003/12/16 15:49:51 
[clientloop.c clientloop.h readconf.c readconf.h scp.1 sftp.1 ssh.1]
     [ssh.c ssh_config.5]
     application layer keep alive (ServerAliveInterval ServerAliveCountMax)
     for ssh(1), similar to the sshd(8) option; ok beck@; with help from
     jmc and dtucker@
 2003-12-17 16:33:10 +11:00
Damien Miller baafb981a4 - markus@cvs.openbsd.org 2003/12/14 12:37:21 
[ssh_config.5]
     we don't support GSS KEX; from Simon Wilkinson
 2003-12-17 16:32:23 +11:00
Damien Miller d696551443 - dtucker@cvs.openbsd.org 2003/12/09 23:45:32 
[clientloop.c]
     Clear exit code when ssh -N is terminated with a SIGTERM.  ok markus@
 2003-12-17 16:31:53 +11:00
Damien Miller 12c150e7e0 - markus@cvs.openbsd.org 2003/12/09 21:53:37 
[readconf.c readconf.h scp.1 servconf.c servconf.h sftp.1 ssh.1]
     [ssh_config.5 sshconnect.c sshd.c sshd_config.5]
     rename keepalive to tcpkeepalive; the old name causes too much
     confusion; ok djm, dtucker; with help from jmc@
 2003-12-17 16:31:10 +11:00
Damien Miller 9836cf8d71 - markus@cvs.openbsd.org 2003/12/09 17:30:05 
[ssh.c]
     don't modify argv for ssh -o; similar to sshd.c 1.283
 2003-12-17 16:30:06 +11:00
Damien Miller b9997192a7 - markus@cvs.openbsd.org 2003/12/09 17:29:04 
[sshd.c]
     fix -o and HUP; ok henning@
 2003-12-17 16:29:22 +11:00
Damien Miller b5820f40bf 20031217 
- (djm) OpenBSD CVS Sync
   - markus@cvs.openbsd.org 2003/12/09 15:28:43
     [serverloop.c]
     make ClientKeepAlive work for ssh -N, too (no login shell requested).
     1) send a bogus channel request if we find a channel
     2) send a bogus global request if we don't have a channel
     ok + test beck@
 2003-12-17 16:27:32 +11:00
Darren Tucker 5cd9d443ef - dtucker@cvs.openbsd.org 2003/12/09 13:52:55 
[moduli.c]
     Prevent ssh-keygen -T from outputting moduli with a generator of 0, since
     they can't be used for Diffie-Hellman.  Assistance and ok djm@
 2003-12-10 00:54:38 +11:00
Darren Tucker a615314d3b - (dtucker) [ssh-keyscan.c] Sync RCSIDs, missed in SSH_SSFDMAX change below. 2003-12-10 00:52:37 +11:00
Darren Tucker 1cbc444935 - djm@cvs.openbsd.org 2003/12/07 06:34:18 
[moduli.c]
     remove unused debugging #define templates
 2003-12-09 19:19:38 +11:00
Darren Tucker 564f19e237 - markus@cvs.openbsd.org 2003/12/08 11:00:47 
[kexgexc.c]
     print requested group size in debug; ok djm
 2003-12-09 19:18:07 +11:00
Darren Tucker 3175eb9a5a - markus@cvs.openbsd.org 2003/12/02 17:01:15 
[channels.c session.c ssh-agent.c ssh.h sshd.c]
     use SSH_LISTEN_BACKLOG (=128) in listen(2).
 2003-12-09 19:15:11 +11:00
Darren Tucker 1fb0425359 - markus@cvs.openbsd.org 2003/12/02 12:15:10 
[progressmeter.c]
     improvments from andreas@:
     * saner speed estimate for transfers that takes less than a second by
       rounding the time to 1 second.
     * when the transfer is finished calculate the actual total speed
       rather than the current speed which is given during the transfer
 2003-12-09 19:07:13 +11:00
Darren Tucker 37afa9d9a4 - djm@cvs.openbsd.org 2003/11/26 21:44:29 
[cipher-aes.c]
     fix #ifdef before #define; ok markus@
     (RCS ID sync only, Portable already had this)
 2003-12-09 19:05:42 +11:00
Darren Tucker 4c56843e44 - matthieu@cvs.openbsd.org 2003/11/25 23:10:08 
[ssh-add.1]
     ssh-add doesn't need to be a descendant of ssh-agent. Ok markus@, jmc@.
 2003-12-09 19:01:51 +11:00
Tim Rice 88368a3034 [configure.ac] Bug 770. Fix --without-rpath. 2003-12-08 12:35:59 -08:00
Damien Miller 3db2e4daf7 - (djm) Annotate OpenBSD-derived files in openbsd-compat/ with original 
source file path (in OpenBSD tree).
 2003-11-24 13:33:34 +11:00
Damien Miller e0113ccc08 - dtucker@cvs.openbsd.org 2003/11/24 00:16:35 
[ssh.1 ssh.c]
     Make ssh -k mean GSSAPIDelegateCredentials=no. Suggestion & ok markus@
 2003-11-24 13:10:09 +11:00
Damien Miller a4b33dfb6d - djm@cvs.openbsd.org 2003/11/23 23:18:45 
[ssh-keygen.c]
     consistency PATH_MAX -> MAXPATHLEN; ok markus@
     (RCS ID sync only)
   - djm@cvs.openbsd.org 2003/11/23 23:21:21
     [scp.c]
     from portable: rename clashing variable limit-> limit_rate; ok markus@
     (RCS ID sync only)
 2003-11-24 13:09:27 +11:00
Damien Miller e00074a726 - (djm) OpenBSD CVS Sync 
- djm@cvs.openbsd.org 2003/11/23 23:17:34
     [ssh-keyscan.c]
     from portable - use sysconf to detect fd limit; ok markus@
     (tidy diff by adding SSH_SSFDMAX macro to defines.h)
 2003-11-24 13:07:45 +11:00
Damien Miller 927f52783e - (djm) [canohost.c] Move IPv4inV6 mapped address normalisation to its own 
function and call it unconditionally
 2003-11-24 12:57:25 +11:00
Damien Miller 5924ceb22d - (djm) [packet.c] Shuffle #ifdef to reduce conditionally compiled code 2003-11-22 15:02:42 +11:00
Damien Miller 841b9f1aad - (djm) [sftp-int.c] Remove duplicated code from bogus sync 2003-11-22 14:48:49 +11:00
Damien Miller 4da295c051 - (djm) [scp.c] Rename limitbw -> limit_rate to match upstreamed patch 2003-11-22 14:39:04 +11:00
Darren Tucker 4e06a1d75d - (dtucker) [auth-sia.c configure.ac] Tru64 update from cmadams at hiwaay.net. 
Use permanently_set_uid for SIA, only define DISABLE_FD_PASSING when SIA
   is enabled, rely on SIA to check for locked accounts if enabled.  ok djm@
 2003-11-22 14:25:15 +11:00
Darren Tucker d76341616d - (dtucker) [auth-passwd.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h] 
Move AIX specific password authentication code to port-aix.c, call
   authenticate() until reenter flag is clear.
 2003-11-22 14:16:56 +11:00
Darren Tucker 240fdfa909 - (dtucker) [channels.c] Make AIX write limit code clearer. Suggested by djm@ 2003-11-22 14:10:02 +11:00
Damien Miller a8e06cef35 - djm@cvs.openbsd.org 2003/11/21 11:57:03 
[everything]
     unexpand and delete whitespace at EOL; ok markus@
     (done locally and RCS IDs synced)
 2003-11-21 23:48:55 +11:00
Damien Miller 8c5e91c03f - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/11/20 11:39:28
     [progressmeter.c]
     fix rounding errors; from andreas@
 2003-11-21 23:09:10 +11:00
Damien Miller f96d18362d - djm@cvs.openbsd.org 2003/11/18 10:53:07 
[monitor.c]
     unbreak fake authloop for non-existent users (my screwup). Spotted and
     tested by dtucker@; ok markus@
 2003-11-18 22:01:48 +11:00
Damien Miller 4bb1dd3166 - (djm) OpenBSD CVS Sync 
- dtucker@cvs.openbsd.org 2003/11/18 00:40:05
     [serverloop.c]
     Correct check for authctxt->valid.  ok djm@
 2003-11-18 22:01:25 +11:00
Darren Tucker 8a1624c42d - (dtucker) [auth-pam.c] Only use pam_putenv if our platform has it. ok djm@ 2003-11-18 12:45:35 +11:00
Darren Tucker 18df00cc77 - (dtucker) [auth-pam.c] Convert chauthtok_conv into a generic tty_conv, 
and use it for do_pam_session.  Fixes problems like pam_motd not displaying
   anything.  ok djm@
 2003-11-18 12:42:07 +11:00
Damien Miller 6aef38f5ac - (djm) Fix early exit for root auth success when UsePAM=yes and 
PermitRootLogin=no
 2003-11-18 10:45:20 +11:00
Damien Miller 0425d40194 - markus@cvs.openbsd.org 2003/11/17 11:06:07 
[auth2-gss.c gss-genr.c gss-serv.c monitor.c monitor.h monitor_wrap.c]
     [monitor_wrap.h sshconnect2.c ssh-gss.h]
     replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson;
     test + ok jakob.
 2003-11-17 22:18:21 +11:00
Damien Miller c756e9b56e - (djm) Export environment variables from authentication subprocess to 
parent. Part of Bug #717
 2003-11-17 21:41:42 +11:00
Damien Miller 9bdba70350 - (djm) Bug #632: Don't call pam_end indirectly from within kbd-int 
conversation function
 2003-11-17 21:27:55 +11:00
Damien Miller 51bf11fcc9 - djm@cvs.openbsd.org 2003/11/17 09:45:39 
[msg.c msg.h sshconnect2.c ssh-keysign.c]
     return error on msg send/receive failure (rather than fatal); ok markus@
 2003-11-17 21:20:47 +11:00
Damien Miller 91c6aa4468 - markus@cvs.openbsd.org 2003/11/14 13:19:09 
[sshconnect2.c]
     cleanup and minor fixes for the client code; from Simon Wilkinson
 2003-11-17 21:20:18 +11:00
Damien Miller fe44847cb8 - jmc@cvs.openbsd.org 2003/11/12 20:14:51 
[ssh_config.5]
     make verb agree with subject, and kill some whitespace;
 2003-11-17 21:19:49 +11:00
Damien Miller 150b55745b - jakob@cvs.openbsd.org 2003/11/12 16:39:58 
[dns.c dns.h readconf.c ssh_config.5 sshconnect.c]
     update SSHFP validation. ok markus@
 2003-11-17 21:19:29 +11:00
Damien Miller c1f2792bd0 - dtucker@cvs.openbsd.org 2003/11/12 10:12:15 
[scp.c]
     When called with -q, pass -q to ssh; suppresses SSH2 banner.  ok markus@
 2003-11-17 21:19:05 +11:00
Damien Miller f58b58ced1 - jakob@cvs.openbsd.org 2003/11/10 16:23:41 
[bufaux.c bufaux.h cipher.c cipher.h hostfile.c hostfile.h key.c]
     [key.h sftp-common.c sftp-common.h sftp-server.c sshconnect.c sshd.c]
     [ssh-dss.c ssh-rsa.c uuencode.c uuencode.h]
     constify. ok markus@ & djm@
 2003-11-17 21:18:23 +11:00
Damien Miller 939cd38122 - jmc@cvs.openbsd.org 2003/11/08 19:17:29 
[sftp-int.c]
     typos from Jonathon Gray;
 2003-11-17 21:17:24 +11:00
Damien Miller a9fcd3ada2 - jakob@cvs.openbsd.org 2003/11/08 16:02:40 
[auth1.c]
     remove unused variable (pw). ok djm@
     (id sync only - still used in portable)
 2003-11-17 21:16:55 +11:00
Damien Miller 3e3b5145e5 - djm@cvs.openbsd.org 2003/11/04 08:54:09 
[auth1.c auth2.c auth2-pubkey.c auth.h auth-krb5.c auth-passwd.c]
     [auth-rhosts.c auth-rh-rsa.c auth-rsa.c monitor.c serverloop.c]
     [session.c]
     standardise arguments to auth methods - they should all take authctxt.
     check authctxt->valid rather then pw != NULL; ok markus@
 2003-11-17 21:13:40 +11:00
Damien Miller 8f746ec970 - jakob@cvs.openbsd.org 2003/11/03 09:37:32 
[sshconnect.c]
     do not free static type pointer in warn_changed_key()
 2003-11-17 21:11:15 +11:00
Damien Miller 5a38897dbb - jakob@cvs.openbsd.org 2003/11/03 09:09:41 
[sshconnect.c]
     move changed key warning into warn_changed_key(). ok markus@
 2003-11-17 21:10:47 +11:00
Damien Miller 3e8f41e6ac - (djm) OpenBSD CVS Sync 
- djm@cvs.openbsd.org 2003/11/03 09:03:37
     [auth-chall.c]
     make this a little more idiot-proof; ok markus@
     (includes portable-specific changes)
 2003-11-17 21:09:50 +11:00
Darren Tucker 203c40b513 - (dtucker) [regress/agent-ptrace.sh] Test for GDB output from Solaris and 
HP-UX, skip test on AIX.
 2003-11-15 12:13:16 +11:00
Darren Tucker ae52b7ca59 - (dtucker) [auth-pam.c] Add newline to accumulated PAM_TEXT_INFO and 
PAM_ERROR_MSG messages.
 2003-11-13 19:52:31 +11:00
Darren Tucker 798ca84d60 - (dtucker) [README ssh-host-config ssh-user-config Makefile] (All 
contrib/cygwin).  Major update from vinschen at redhat.com.
   - Makefile provides a `cygwin-postinstall' target to run right after
     `make install'.
   - Better support for Windows 2003 Server.
   - Try to get permissions as correct as possible.
   - New command line options to allow full automated host configuration.
   - Create configs from skeletons in /etc/defaults/etc.
   - Use /bin/bash, allows reading user input with readline support.
   - Remove really old configs from /usr/local.
 2003-11-13 11:28:49 +11:00
Darren Tucker 0947ddff72 - (dtucker) [auth-pam.c] Append newlines to lines output by the 
pam_chauthtok_conv().
 2003-11-13 11:21:31 +11:00
Damien Miller 418a386f2b - (djm) Clarify UsePAM consequences a little more 2003-11-06 20:27:51 +11:00
Darren Tucker be8a771af1 - (dtucker) [regress/agent-ptrace.sh] Use numeric uid and gid. 2003-11-03 22:52:52 +11:00
Darren Tucker 655a5e0987 - markus@cvs.openbsd.org 2003/11/02 11:01:03 
[auth2-gss.c compat.c compat.h sshconnect2.c]
     remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk
 2003-11-03 20:09:03 +11:00
Darren Tucker 6db8f936ae - markus@cvs.openbsd.org 2003/10/28 09:08:06 
[misc.c]
     error->debug for getsockopt+TCP_NODELAY; several requests
 2003-11-03 20:07:14 +11:00
Darren Tucker 56afe145e0 - avsm@cvs.openbsd.org 2003/10/26 16:57:43 
[sshconnect2.c]
     rename 'supported' static var in userauth_gssapi() to 'gss_supported'
     to avoid shadowing the global version.  markus@ ok
 2003-11-03 20:06:14 +11:00
Darren Tucker 8cc39788cb - markus@cvs.openbsd.org 2003/10/21 09:50:06 
[auth2-gss.c]
     make sure the doid is larger than 2
 2003-11-03 20:05:03 +11:00
Darren Tucker a47c9bcda6 - markus@cvs.openbsd.org 2003/10/15 09:48:45 
[monitor_wrap.c]
     check pmonitor != NULL
 2003-11-03 20:03:25 +11:00
Darren Tucker 7c582db74b - (dtucker) [contrib/cygwin/ssh-host-config] Ensure entries in /etc/services 
are created correctly with CRLF line terminations.  Patch from vinschen at
   redhat.com.
 2003-11-03 18:59:29 +11:00
Darren Tucker ea4c670eb8 - (dtucker) [regress/agent-ptrace.sh] Skip agent-test unless SUDO is set, 
make agent setgid during test.
 2003-10-21 22:27:08 +10:00
Darren Tucker 0d37b5ca7b - (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords 
directly.  Noted by Darren.Moffat at sun.com.
 2003-10-21 12:41:14 +10:00
Darren Tucker 9568ad96ad - (dtucker) [INSTALL] Note that --with-md5 is now required on platforms with 
MD5 passwords even if PAM support is enabled.  From steev at detritus.net.
 2003-10-17 16:32:11 +10:00
Tim Rice 6b1f8a3cf5 [regress/banner.sh] portability fix. 2003-10-15 09:22:39 -07:00
Darren Tucker c6020651ba - (dtucker) [auth.c] Check for disabled password expiry on HP-UX Trusted Mode. 2003-10-15 17:48:20 +10:00
Darren Tucker 5f88d3440e - (dtucker) [acconfig.h configure.ac dns.c openbsd-compat/getrrsetbyname.c 
openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always
   compiled in but disabled in config.
 2003-10-15 16:57:57 +10:00
Darren Tucker 072a7b178c - markus@cvs.openbsd.org 2003/10/14 19:54:39 
[session.c ssh-agent.c]
     10X for mkdtemp; djm@
 2003-10-15 16:10:25 +10:00
Darren Tucker 64b77bcb4b - jakob@cvs.openbsd.org 2003/10/14 19:43:23 
[README.dns]
     update

Resynced with OpenBSD too: DNSFP support is now always compiled in
so the configure support (and documentation thereof) can go away.
 2003-10-15 16:07:53 +10:00
Darren Tucker dda19d63ff - jakob@cvs.openbsd.org 2003/10/14 19:42:10 
[dns.c dns.h readconf.c ssh-keygen.c sshconnect.c]
     include SSHFP lookup code (not enabled by default). ok markus@
 2003-10-15 16:00:47 +10:00
Darren Tucker b370ca9313 - markus@cvs.openbsd.org 2003/10/13 08:22:25 
[scp.1 sftp.1]
     don't refer to options related to forwarding; ok jmc@
 2003-10-15 15:59:26 +10:00
Darren Tucker f132c67e8e - jmc@cvs.openbsd.org 2003/10/12 13:12:13 
[ssh_config.5]
     note that EnableSSHKeySign should be in the non-hostspecific section;
     remove unnecessary .Pp;
     ok markus@
 2003-10-15 15:58:18 +10:00
Darren Tucker 7eb3de0dfb - markus@cvs.openbsd.org 2003/10/11 11:36:23 
[monitor_wrap.c]
     return NULL for missing banner; ok djm@
 2003-10-15 15:56:58 +10:00
Darren Tucker d05b601895 - markus@cvs.openbsd.org 2003/10/11 08:26:43 
[sshconnect2.c]
     search keys in reverse order; fixes #684
 2003-10-15 15:55:59 +10:00
Darren Tucker 0a118da00e - markus@cvs.openbsd.org 2003/10/11 08:24:08 
[readconf.c readconf.h ssh.1 ssh.c ssh_config.5]
     remote x11 clients are now untrusted by default, uses xauth(8) to generate
     untrusted cookies; ForwardX11Trusted=yes restores old behaviour.
     ok deraadt; feedback and ok djm/fries
 2003-10-15 15:54:32 +10:00
Darren Tucker a044f47679 - markus@cvs.openbsd.org 2003/10/08 15:21:24 
[readconf.c ssh_config.5]
     default GSS API to no in client, too; ok jakob, deraadt@
 2003-10-15 15:52:03 +10:00
Darren Tucker 1f20394e92 - jmc@cvs.openbsd.org 2003/10/08 08:27:36 
[scp.1 scp.c sftp-server.8 sftp.1 sftp.c ssh.1 sshd.8]
     scp and sftp: add options list and sort options. options list requested
     by deraadt@
     sshd: use same format as ssh
     ssh: remove wrong option from list
     sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)
     ok deraadt@ markus@
 2003-10-15 15:50:42 +10:00
Darren Tucker 6c0c0705e3 - (dtucker) [sshd_config.5] UsePAM defaults to "no". ok djm@ 2003-10-09 14:13:53 +10:00
Darren Tucker 0240ff786e - djm@cvs.openbsd.org 2003/10/07 07:04:52 
[regress/sftp-cmds.sh]
     more sftp quoting regress tests; ok markus
 2003-10-08 17:52:10 +10:00
Darren Tucker dc001a5ee3 - dtucker@cvs.openbsd.org 2003/10/07 01:52:13 
[regress/Makefile regress/banner.sh]
     Test SSH2 banner.  ok markus@
 2003-10-08 17:47:19 +10:00
Darren Tucker 796448276c - deraadt@cvs.openbsd.org 2003/10/07 21:58:28 
[sshconnect2.c]
     set ptr to NULL after free
 2003-10-08 17:37:58 +10:00
Darren Tucker 64dbccc2a5 - djm@cvs.openbsd.org 2003/10/07 07:04:16 
[sftp-int.c]
     sftp quoting fix from admorten AT umich.edu; ok markus@
 2003-10-08 17:34:38 +10:00
Darren Tucker 046dff2a07 - dtucker@cvs.openbsd.org 2003/10/07 01:47:27 
[sshconnect2.c]
     Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 & #707.
     ok markus@
 2003-10-08 17:32:02 +10:00
Darren Tucker 89df7a3eca - (dtucker) [configure.ac] Bug #710: Check for dlsym() in libdl on 
Reliant Unix.  Based on patch from Robert.Dahlem at siemens.com.
 2003-10-07 20:35:57 +10:00
Darren Tucker 3b2a06c0d7 - (dtucker) [configure.ac] Bug #715: Set BROKEN_SETREUID and BROKEN_SETREGID 
on Reliant Unix.  Patch from Robert.Dahlem at siemens.com.
 2003-10-07 18:37:11 +10:00
Darren Tucker 2e8c0cc752 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoul.c] 
Bug #670: add strtoul() to openbsd-compat for platforms lacking it.  ok djm@
 2003-10-07 17:49:56 +10:00
Darren Tucker dfe6d914b7 - (dtucker) [contrib/redhat/openssh.spec] Bug #714: Now that UsePAM is a 
run-time switch, always build --with-md5-passwords.
 2003-10-07 17:40:56 +10:00
Darren Tucker f4bf5d086a So people know who to blame... 2003-10-07 11:31:22 +10:00
Darren Tucker 8846a07639 - (dtucker) [auth-pam.c auth-pam.h session.c] Make PAM use the new static 
cleanup functions.  With & ok djm@
 2003-10-07 11:30:15 +10:00
Damien Miller 6f1f611a52 - (djm) Delete autom4te.cache after autoreconf 2003-10-07 10:18:22 +10:00
Tim Rice 30aa44cf0a [contrib/caldera/openssh.spec] Remove obsolete --with-ipv4-default option. 2003-10-03 22:30:23 -07:00
Darren Tucker e3ca82e06c - markus@cvs.openbsd.org 2003/10/02 08:26:53 
[ssh-gss.h]
     missing $OpenBSD:; dtucker
 2003-10-03 18:02:30 +10:00
Darren Tucker 4a2505445f - markus@cvs.openbsd.org 2003/10/02 10:41:59 
[sshd.c]
     print openssl version, too, several requests; ok henning/djm.
 2003-10-03 17:57:24 +10:00
Darren Tucker f391ba6730 - (dtucker) [session.c] Fix bus errors on some 64-bit Solaris configurations. 
Based on patches by Matthias Koeppe and Thomas Baden.  ok djm@
 2003-10-02 20:07:09 +10:00
Darren Tucker 7596d6866f - (dtucker) [ssh-gss.h] Prototype change missed in sync. 2003-10-02 17:32:30 +10:00
Darren Tucker 0ccb59b85c - (dtucker) [configure.ac] Don't set DISABLE_SHADOW when configuring 
--with-pam.  ok djm@
 2003-10-02 16:26:34 +10:00
Darren Tucker a49d36e7b9 - markus@cvs.openbsd.org 2003/09/29 20:19:57 
[servconf.c sshd_config]
     GSSAPICleanupCreds -> GSSAPICleanupCredentials
 2003-10-02 16:20:54 +10:00
Darren Tucker 6177695c0b - jmc@cvs.openbsd.org 2003/09/29 11:40:51 
[ssh.1]
     - add list of options to -o and .Xr ssh_config(5)
     - some other cleanup
     requested by deraadt@;
     ok deraadt@ markus@
 2003-10-02 16:19:47 +10:00
Darren Tucker 8fca6b57b4 - markus@cvs.openbsd.org 2003/09/26 08:19:29 
[sshd.c]
     no need to set the listen sockets to non-block; ok deraadt@
 2003-10-02 16:18:22 +10:00
Darren Tucker 5dcdd219fb - markus@cvs.openbsd.org 2003/09/23 20:41:11 
[channels.c channels.h clientloop.c]
     move client only agent code to clientloop.c
 2003-10-02 16:17:00 +10:00
Darren Tucker 6cc310bd5f - markus@cvs.openbsd.org 2003/09/23 20:18:52 
[progressmeter.c]
     don't print trailing \0; bug #709; Robert.Dahlem@siemens.com
     ok millert/deraadt@
 2003-10-02 16:15:15 +10:00
Darren Tucker 3e33cecf71 - markus@cvs.openbsd.org 2003/09/23 20:17:11 
[Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c
     cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h
     monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h
     ssh-agent.c sshd.c]
     replace fatal_cleanup() and linked list of fatal callbacks with static
     cleanup_exit() function.  re-refine cleanup_exit() where appropriate,
     allocate sshd's authctxt eary to allow simpler cleanup in sshd.
     tested by many, ok deraadt@
 2003-10-02 16:12:36 +10:00
Ben Lindstrom b210aa2cfa - (bal) Fix issues in openbsd-compat/realpath.c 2003-09-30 23:49:06 +00:00
Tim Rice d4d1815cae [sshd_config] UsePAM defaults to no. 2003-09-25 19:04:34 -07:00
Darren Tucker b88fcc755d - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove 
DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam.  Patch from
   michael_steffens at hp.com, ok djm@
 2003-09-25 20:18:33 +10:00
Darren Tucker beaf6790e1 - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6. 2003-09-24 20:03:48 +10:00
Damien Miller dbb104791b - (djm) Update version.h and spec files for HEAD 2003-09-24 08:30:18 +10:00
Damien Miller 5c3a55846a - (djm) Sync with V_3_7 branch: 
- (djm) Fix SSH1 challenge kludge
   - (djm) Bug #671: Fix builds on OpenBSD
   - (djm) Bug #676: Fix PAM stack corruption
   - (djm) Fix bad free() in PAM code
   - (djm) Don't call pam_end before pam_init
   - (djm) Enable build with old OpenSSL again
   - (djm) Trim deprecated options from INSTALL. Mention UsePAM
   - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
 2003-09-23 22:12:38 +10:00
Tim Rice 7ff4e6dbe5 [configure.ac] add --disable-etc-default-login option. ok djm 2003-09-22 19:50:14 -07:00
Ben Lindstrom da4d9cf4bf - (bal) "extration" -> "extraction" in ssh-rand-helper.c; repoted by john 
on #unixhelp@efnet
 2003-09-22 15:36:15 +00:00
Darren Tucker 9a2c4cddad - markus@cvs.openbsd.org 2003/09/19 17:43:35 
[clientloop.c sshtty.c sshtty.h]
     remove fatal callbacks from client code; ok deraadt
 2003-09-22 21:16:05 +10:00
Darren Tucker 8654d16f0f - markus@cvs.openbsd.org 2003/09/19 17:40:20 
[scp.c]
     error handling for remote-remote copy; #638; report Harald Koenig;
     ok millert, fgs, henning, deraadt
 2003-09-22 21:14:55 +10:00
Darren Tucker aaa56cb804 - markus@cvs.openbsd.org 2003/09/19 11:33:09 
[packet.c sshd.c]
     do not call packet_close on fatal; ok deraadt
 2003-09-22 21:13:59 +10:00
Darren Tucker 3dbff2a93b - markus@cvs.openbsd.org 2003/09/19 11:31:33 
[channels.c]
     do not call channel_free_all on fatal; ok deraadt
 2003-09-22 21:12:56 +10:00
Darren Tucker 3d32622171 - markus@cvs.openbsd.org 2003/09/19 11:30:39 
[ssh-keyscan.c]
     avoid fatal_cleanup, just call exit(); ok deraadt
 2003-09-22 21:11:20 +10:00
Darren Tucker 6fa8abd58b - markus@cvs.openbsd.org 2003/09/19 11:29:40 
[ssh-agent.c]
     provide a ssh-agent specific fatal() function; ok deraadt
 2003-09-22 21:10:21 +10:00
Darren Tucker 631a4a9b3e - markus@cvs.openbsd.org 2003/09/19 09:03:00 
[buffer.c]
     sign fix in buffer_dump; Jedi/Sector One; pr 3473
 2003-09-22 21:08:21 +10:00
Darren Tucker a8151da5fe - markus@cvs.openbsd.org 2003/09/19 09:02:02 
[packet.c]
     buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471
 2003-09-22 21:06:46 +10:00
Darren Tucker c0815c927e - miod@cvs.openbsd.org 2003/09/18 13:02:21 
[authfd.c bufaux.c dh.c mac.c ssh-keygen.c]
     A few signedness fixes for harmless situations; markus@ ok
 2003-09-22 21:05:50 +10:00
Darren Tucker fb16b2411e - markus@cvs.openbsd.org 2003/09/18 08:49:45 
[deattack.c misc.c session.c ssh-agent.c]
     more buffer allocation fixes; from Solar Designer; CAN-2003-0682;
     ok millert@
 2003-09-22 21:04:23 +10:00
Darren Tucker d1d41b3181 - markus@cvs.openbsd.org 2003/09/18 07:56:05 
[authfile.c]
     missing  buffer_free(&encrypted); #662; zardoz at users.sf.net
 2003-09-22 21:01:27 +10:00
Darren Tucker d2730d39a1 - markus@cvs.openbsd.org 2003/09/18 07:54:48 
[buffer.c]
     protect against double free; #660;  zardoz at users.sf.net
 2003-09-22 21:00:19 +10:00
Darren Tucker bd5361b237 - markus@cvs.openbsd.org 2003/09/18 07:52:54 
[sshconnect.c]
     missing {}; bug #656; jclonguet at free.fr
 2003-09-22 20:59:16 +10:00
Darren Tucker 220bf133b6 - (dtucker) [contrib/aix/pam.conf] Include example pam.conf for AIX from 
article by genty at austin.ibm.com, included with the author's permission.
 2003-09-22 20:41:40 +10:00
Tim Rice 480ef8ddae [configure.ac] Bug 665: move 3 new AC_DEFINES outside of AC_TRY_RUN. 
Report by distler AT golem ph utexas edu.
 2003-09-21 21:38:11 -07:00
Tim Rice 7a74c6b428 Fix typo. s/SETEIUD_BREAKS_SETUID/SETEUID_BREAKS_SETUID/ 2003-09-21 21:00:59 -07:00
Darren Tucker 42d30828a4 - (dtucker) [INSTALL] Bug #686: Document requirement for zlib 1.1.4 or 
higher.
 2003-09-22 13:28:36 +10:00
Darren Tucker 051c270f88 - (dtucker) [openbsd-compat/port-aix.c] Use correct include for xmalloc.h, 
add canohost.h to stop warning.  Based on patch from openssh-unix-dev at
   thewrittenword.com
 2003-09-22 13:05:26 +10:00
Darren Tucker fbe3b36ca9 - (dtucker) [uidswap.c] Don't test restoration of uid on Cygwin since the 
OS does not support permanently dropping privileges.  Patch from
   vinschen at redhat.com.
 2003-09-22 12:54:37 +10:00
Darren Tucker 8daf4b45ea - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config] Update 
ssh-host-config to match current defaults, bump README version.  Patch from
   vinschen at redhat.com.
 2003-09-22 12:32:00 +10:00
Darren Tucker d5e082f0d5 - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c 
openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with
   where gai_strerror is defined as "const char *".  Part of patch supplied
   by bugzilla-openssh at thewrittenword.com
 2003-09-22 12:08:23 +10:00
Darren Tucker be79af1dfe - (dtucker) [configure.ac] Bug #659: uid swapping issues on IRIX 6. 
Part of patch supplied by bugzilla-openssh at thewrittenword.com
 2003-09-22 11:58:21 +10:00
Darren Tucker 0013011529 - (dtucker) [configure.ac] Bug #693: uid swapping issues on NCR MP-RAS. 
Patch from david.haughton at ncr.com
 2003-09-22 11:40:24 +10:00
Darren Tucker ed92b21321 - (dtucker) [configure.ac] Bug #653: uid swapping issues on Tru64. 2003-09-22 11:26:16 +10:00
Darren Tucker ed9eb02326 - (dtucker) [configure.ac] Bug #657: uid swappping issues on BSDi. 2003-09-22 11:18:47 +10:00
Darren Tucker 20379a37fa - (dtucker) [configure.ac] Bug #655: uid swapping issues on Mac OS X. 
Patch from max at quendi.de.
 2003-09-22 11:07:40 +10:00
Darren Tucker 8a49dd107b Wrong filename 2003-09-22 10:59:34 +10:00
Darren Tucker 782390e62e - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-tree 
builds.  Portability corrections from tim@.
 2003-09-22 10:58:55 +10:00
Darren Tucker 4724d96ca8 - (dtucker) [acconfig.h] Updated basename test needs HAVE_BASENAME 2003-09-19 21:25:23 +10:00
Darren Tucker c11b1e8420 - (dtucker) [session.c] Bug #643: Fix size_t -> u_int and fix null deref 
when /etc/default/login doesn't exist or isn't readable.  Fixes from
   jparsons-lists at saffron.net and georg.oppenberg at deu mci com.
 2003-09-19 20:56:51 +10:00
Darren Tucker 91acbf211c - (dtucker) [openbsd-compat/port-aix.h] Bug #640: Don't include audit.h 
unless required.  Reorder to reduce warnings.
 2003-09-19 20:43:38 +10:00
Damien Miller 8040939f72 - (djm) Bug #646: Fix location of x11-ssh-askpass; Jim 2003-09-19 17:05:24 +10:00
Damien Miller 968c8d25e9 - (djm) Bug #641: Allow RedHat RPM building without GTK-2; Patch from 
jason AT devrandom.org
 2003-09-19 16:58:21 +10:00
Damien Miller f09ad861e6 - (djm) Bug #661: Remove duplicate check for basename; from 
bugzilla-openssh AT thewrittenword.com
 2003-09-19 16:41:01 +10:00
Damien Miller 677179f23a - (djm) Bug #683: Remove reference to --with-ipv4-default from INSTALL; 
djast AT cs.toronto.edu
 2003-09-19 16:30:14 +10:00
Damien Miller 5d07e6d465 20030918 
- (djm) Bug #652: Fix empty password auth
 2003-09-18 18:25:46 +10:00
Tim Rice 628c873230 [openbsd-compat/inet_ntoa.c] 20030917 "Sync with V_3_7 branch" undid 
20030916 "Missed dead header in inet_ntoa.c"
 2003-09-17 13:20:33 -07:00
Damien Miller e007cf7fa4 - (djm) Crank RPM spec file versions 2003-09-17 07:32:17 +10:00
Damien Miller 5efcecc265 - (djm) OpenBSD Sync 
- markus@cvs.openbsd.org 2003/09/16 21:02:40
     [buffer.c channels.c version.h]
     more malloc/fatal fixes; ok millert/deraadt; ghudson at MIT.EDU
 2003-09-17 07:31:14 +10:00
Damien Miller f2728099ba - (djm) Sync with V_3_7 branch 2003-09-17 07:24:25 +10:00
Ben Lindstrom e121048392 - (bal) Missed dead header in inet_ntoa. 2003-09-16 17:23:29 +00:00
Tim Rice b925b4b82f [configure.ac] Fix portability issues. 2003-09-15 22:40:49 -07:00
Ben Lindstrom f2b4e4e07e - deraadt@cvs.openbsd.org 2003/09/16 03:03:47 
[buffer.c]
     do not expand buffer before attempting to reallocate it; markus ok
 2003-09-16 03:31:03 +00:00
Darren Tucker 16eec18a09 Fix line width 2003-09-16 13:24:50 +10:00
Darren Tucker e1a790d0d1 - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: Retrieve 
PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it
   (eg Solaris, Reliant Unix).  Patch from Robert.Dahlem at siemens.com.  ok djm@
 2003-09-16 11:52:19 +10:00
Darren Tucker 7b6cb5c5ef - (dtucker) [regress/Makefile] AIX's make doesn't like " +=", so replace 
with vanilla "=".

Hopefully everybody's "make" will be happy with that.
 2003-09-14 13:16:55 +10:00
Darren Tucker b12d16fd00 - (dtucker) [Makefile regress/Makefile] Fix portability issues preventing 
the regression tests from running with Solaris' make.  Patch from Brian
   Poole (raj at cerias.purdue.edu).

Further info:  Solaris' /usr/ccs/bin/make
* requires a space before "+=" (but not "=")
* does not like @for

The bit that relies on a trailing "/" on $OBJ so "rm ${OBJ}$$F works in the
current dir if OBJ isn't set is my fault.  Nasty but it works.
 2003-09-14 11:40:35 +10:00
Darren Tucker c58c2eedb0 - (dtucker) [auth-pam.c] Use SSHD_PAM_SERVICE for PAM service name, patch 
from cjwatson at debian.org.
 2003-09-13 22:02:05 +10:00
Tim Rice ae477e922e [configure.ac] define WITH_ABBREV_NO_TTY for SCO. Report by Roger Cornelius. 2003-09-12 18:15:15 -07:00
Darren Tucker 2270c7e8aa - (dtucker) [auth-passwd.c] On AIX, call setauthdb() before loginsuccess(), 
required to correctly reset failed login count when using a password
   registry other than "files" (eg LDAP, see bug #543).
 2003-09-13 10:41:56 +10:00
Darren Tucker dc7e65646f - (dtucker) [regress/agent-timeout.sh] Timeout of 5 sec is borderline for 
slower hosts, increase to 10 sec.
 2003-09-13 09:46:03 +10:00
Tim Rice e660ede8c0 [regress/yes-head.sh] shell portability fix. 2003-09-12 13:21:14 -07:00
Tim Rice ec28ca16b1 [Makefile.in] only mkdir regress if it does not exist. 2003-09-12 13:02:16 -07:00
Tim Rice b7efb630f6 [regress/agent-ptrace.sh] sh doesn't like "if ! shell_function; then". 2003-09-12 11:20:32 -07:00
Tim Rice 23ee359b08 [regress/agent-ptrace.sh regress/dynamic-forward.sh 
regress/sftp-cmds.sh regress/stderr-after-eof.sh regress/test-exec.sh]
no longer depends on which(1). patch by dtucker@
 2003-09-11 22:32:17 -07:00
Tim Rice d546a84ef6 [configure.ac] Prefer setuid/setgid on UnixWare and Open Server. 2003-09-11 22:24:36 -07:00
Tim Rice 1e1ef64566 [configure.ac] Move libgen tests to before libwrap to unbreak 
UnixWare 2.03 using --with-tcp-wrappers.
 2003-09-11 22:19:31 -07:00
Darren Tucker c82afd5c88 - (dtucker) [configure.ac] Bug #588, #615: Move other libgen tests to after 
the dirname test, to allow a broken dirname to be detected correctly.
   Based partially on patch supplied by alex.kiernan at thus.net.  ok djm@
 2003-09-11 14:42:55 +10:00
Darren Tucker 9a959ea1b5 - (dtucker) [regressh/yes-head.sh] Some platforms (eg Solaris) don't have 
"yes".
 2003-09-10 20:17:40 +10:00
Darren Tucker b2427c82bb - (dtucker) [configure.ac] Part of bug #615: tcsendbreak might be a macro. 2003-09-10 15:22:44 +10:00
Darren Tucker 9f7ffc5a17 - (dtucker) [configure.ac] Bug #636: Add support for Cray's new X1 machine. 
Patch from wendyp at cray.com.
 2003-09-10 11:39:05 +10:00
Tim Rice 1eb40cf514 [regress/sftp-badcmds.sh regress/sftp-cmds.sh] Fix errors like 
UX:rm: ERROR: Cannot remove '.' or '..'
 2003-09-09 08:35:20 -07:00
Tim Rice 5543947d7f [regress/agent-timeout.sh] s/TIMEOUT/SSHAGENT_TIMEOUT/ Fixes conflict 
with shell read-only variable.
 2003-09-09 08:27:40 -07:00
Tim Rice 8b2157d86a [regress/Makefile] Fixes for building outside of a read-only source tree. 2003-09-09 06:07:10 -07:00
Tim Rice 2e0e38e310 [ssh-keygen.c] s/PATH_MAX/MAXPATHLEN/ ok mouring@ 2003-09-08 16:11:33 -07:00
Tim Rice b284e16c10 [configure.ac acconfig.h openbsd-compat/getrrsetbyname.c] test for 
HEADER.ad in arpa/nameser.h
 2003-09-08 14:35:16 -07:00
Tim Rice 0ac16a4492 [configure.ac openbsd-compat/getrrsetbyname.c] wrap _getshort and 
_getlong in #ifndef
 2003-09-08 06:33:33 -07:00
Darren Tucker 167bd9cfef - (dtucker) [CREDITS Makefile.in configure.ac mdoc2man.awk mdoc2man.pl] 
Replace mdoc2man.pl with mdoc2man.awk, provided by Peter Stuge.
 2003-09-07 12:34:54 +10:00
Darren Tucker 7c600f24a4 - (dtucker) [acconfig.h] Typo. 2003-09-07 11:37:27 +10:00
Darren Tucker 3393c5c36e - (dtucker) openbsd-compat/xcrypt.c] #elsif -> #elif 2003-09-07 09:43:42 +10:00
Darren Tucker e7f7580cab - (dtucker) [regress/sftp-cmds.sh] Skip quoted file test on Cygwin. 2003-09-07 09:32:58 +10:00
Darren Tucker e1e26a6c15 - (dtucker) [regress/sftp-batch.sh] Make temporary batch file name more 
distinctive, so "rm ${BATCH}.*" doesn't match the script itself.
 2003-09-07 09:31:02 +10:00
Darren Tucker d199b6d69b - (dtucker) [dynamic-forward.sh forwarding.sh sftp-batch.sh (all regress/)] 
Add ${EXEEXT}: required to work on Cygwin.
 2003-09-07 09:28:03 +10:00
Darren Tucker 57ac36ffb4 - (dtucker) [agent-ptrace.sh dynamic-forward.sh (all regress/)] 
Put "which" inside quotes.
 2003-09-07 09:22:21 +10:00
Darren Tucker 9f18be63ab - (dtucker) [acconfig.h configure.ac uidswap.c] Prefer setuid/setgid on AIX. 2003-09-06 16:44:39 +10:00
Darren Tucker b2db4e83a3 - (dtucker) [Makefile.in] Add distclean target for regress/, fix clean target. 2003-09-05 11:35:52 +10:00
Darren Tucker 77d07e927d - [Makefile.in regress/agent-ptrace] Fix minor regress issues on Cygwin. 2003-09-04 22:06:16 +10:00
Darren Tucker 118576556b - [Makefile.in regress/agent-getpeereid.sh] config.h is now in $BUILDDIR 
not $OBJ.
 2003-09-04 18:04:16 +10:00
Darren Tucker 9d9d44811b - [regress/README.regress] Add a basic readme. 2003-09-04 15:39:54 +10:00
Darren Tucker ebc3c13d40 - [regress/Makefile] Remove BSDisms. 2003-09-04 15:37:58 +10:00
Darren Tucker 6d3921f64b - [regress/test-exec.sh] Use sudo, search for "whoami" equivalent, always 
use Strictmodes no, wait longer for sshd startup.
 2003-09-04 15:35:48 +10:00
Darren Tucker bd05609dff - [regress/ssh-com-sftp.sh] Remove dependency on /dev/stdin. 2003-09-04 15:26:57 +10:00
Darren Tucker 4735115e4d - [regress/sftp-cmds.sh] Use portable "test" option. 2003-09-04 15:24:50 +10:00
Darren Tucker a241d87e94 - [regress/dynamic-forward.sh] Some "which" programs output on stderr. 2003-09-04 15:22:01 +10:00
Darren Tucker 53c55f4179 - [regress/agent.sh regress/proto-version.sh regress/ssh-com.sh 
regress/test-exec.sh] Handle different was of echoing without newlines.
 2003-09-04 15:16:56 +10:00
Darren Tucker 58f89bc14d - [regress/agent-ptrace.sh regress/agent-timeout.sh] 
"grep -q" -> "grep >/dev/null"
 2003-09-04 15:07:59 +10:00
Darren Tucker e15b0dd011 - [regress/sftp.sh] Remove dependency on /dev/stdin. 2003-09-04 15:00:55 +10:00
Darren Tucker c2c4223ed0 - [regress/sftp-badcmds.sh regress/sftp-cmds.sh regress/sftp.sh 
regress/ssh-com-client.sh regress/ssh-com-sftp.sh regress/stderr-data.sh
     regress/transfer.sh] Use ${EXEEXT} where appropriate.
 2003-09-04 14:54:39 +10:00
Darren Tucker c376a88c10 - [regress/stderr-after-eof.sh] Search for a usable checksum program. 2003-09-04 14:32:02 +10:00
Darren Tucker 933e4f1c27 - [regress/sftp-cmds.sh] Ensure file used for test are readable. 2003-09-04 14:26:31 +10:00
Darren Tucker 60de9f1851 - [regress/rekey.sh] Remove dependence on /dev/zero (not all platforms have 
it).  The sparse file will take less disk space too.
 2003-09-04 14:02:56 +10:00
Darren Tucker 871f7408ab - [regress/reconfigure/sh] Make path to sshd fully qualified if required. 2003-09-04 13:59:48 +10:00
Darren Tucker 5569759bce - [regress/agent-ptrace.sh] Skip tests if platform doesn't support it or 
gdb cannot be found.
 2003-09-04 13:55:25 +10:00
Darren Tucker 2297ac41ca - [regress/agent-getpeereid.sh] Skip test on platforms that don't support 
getpeereid.
 2003-09-04 13:49:30 +10:00
Darren Tucker 150a81c745 - (dtucker) Portablize regression tests. Parts contributed by Roumen 
Petrov, David M. Williams and Corinna Vinschen.
   - [Makefile.in] Add "make tests" target and "make clean" hooks.
 2003-09-04 13:41:06 +10:00
Damien Miller c2b9827695 - jmc@cvs.openbsd.org 2003/09/02 18:50:06 
[sftp.1 ssh_config.5]
     escape punctuation;
     ok deraadt@
 2003-09-03 12:13:30 +10:00
Damien Miller f117f877b1 - markus@cvs.openbsd.org 2003/09/02 16:40:29 
[version.h]
     enter 3.7
 2003-09-03 12:12:54 +10:00
Damien Miller a256c650ac - markus@cvs.openbsd.org 2003/08/28 12:54:34 
[auth.h]
     remove kerberos support from ssh1, since it has been replaced with GSSAPI;
     but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
 2003-09-03 12:11:30 +10:00
Damien Miller 856f0be669 - markus@cvs.openbsd.org 2003/08/26 09:58:43 
[auth-passwd.c auth.c auth.h auth1.c auth2-none.c auth2-passwd.c]
     [auth2.c monitor.c]
     fix passwd auth for 'username leaks via timing'; with djm@, original
     patches from solar
 2003-09-03 07:32:45 +10:00
Damien Miller 39638b6aeb - (djm) Fix openbsd-compat/ again - remove references to strl(cpy|cat).h 2003-09-02 23:33:42 +10:00
Damien Miller 341c6e687c - (djm) Bug #423: reorder setting of PAM_TTY and calling of PAM session 
management (now done in do_setusercontext). Largely from
   michael_steffens AT hp.com
 2003-09-02 23:18:52 +10:00
Damien Miller f4b6f10ded - (djm) Don't initialise pam_conv structures inline. Avoids HP/UX compiler 
error. Part of Bug #423, patch from  michael_steffens AT hp.com
 2003-09-02 23:12:06 +10:00
Damien Miller 0b56b45d6f fix date 2003-09-02 23:09:41 +10:00
Damien Miller 982d326045 - markus@cvs.openbsd.org 2003/09/01 20:44:54 
[auth2-gss.c]
     fix leak
 2003-09-02 22:59:01 +10:00
Damien Miller fb10e9abe8 - markus@cvs.openbsd.org 2003/09/01 18:15:50 
[readconf.c readconf.h servconf.c servconf.h ssh.c]
     remove unused kerberos code; ok henning@
 2003-09-02 22:58:22 +10:00
Damien Miller 46aa3b9139 - markus@cvs.openbsd.org 2003/09/01 13:52:18 
[ssh.h]
     rm whitespace
 2003-09-02 22:57:54 +10:00
Damien Miller 84d03efdf7 - markus@cvs.openbsd.org 2003/09/01 12:50:46 
[readconf.c]
     rm gssapidelegatecreds alias; never supported before
 2003-09-02 22:57:27 +10:00
Damien Miller 9b7b03b270 - markus@cvs.openbsd.org 2003/09/01 09:50:04 
[sshd_config.5]
     gss kex is not supported; sxw@inf.ed.ac.uk
 2003-09-02 22:57:05 +10:00
Damien Miller 134350c20c - markus@cvs.openbsd.org 2003/08/31 13:31:57 
[gss-serv.c]
     whitspace KNF
 2003-09-02 22:56:42 +10:00
Damien Miller a0c4ad21b6 - markus@cvs.openbsd.org 2003/08/31 13:30:18 
[gss-serv.c]
     correct string termination in parse_ename(); sxw@inf.ed.ac.uk
 2003-09-02 22:56:18 +10:00
Damien Miller 324948b320 - markus@cvs.openbsd.org 2003/08/31 13:29:05 
[session.c]
     call ssh_gssapi_storecreds conditionally from do_exec();
     with sxw@inf.ed.ac.uk
 2003-09-02 22:55:45 +10:00
Damien Miller b5829f56eb - markus@cvs.openbsd.org 2003/08/31 12:14:22 
[progressmeter.c]
     do write to buf[-1]
 2003-09-02 22:53:32 +10:00
Damien Miller 17af176302 - markus@cvs.openbsd.org 2003/08/31 10:26:04 
[progressmeter.c]
     pass file_size + 1 to snprintf: fixes printing of truncated
     file names; fix based on patch/report from sturm@;
 2003-09-02 22:53:01 +10:00
Damien Miller fbdeecef92 - markus@cvs.openbsd.org 2003/08/29 10:04:36 
[channels.c nchan.c]
     be less chatty; debug -> debug2, cleanup; ok henning@
 2003-09-02 22:52:31 +10:00
Damien Miller 7630ee2fa6 - markus@cvs.openbsd.org 2003/08/29 10:03:15 
[compat.c compat.h]
     SSH_BUG_K5USER is unused; ok henning@
 2003-09-02 22:52:00 +10:00
Damien Miller 1a0c0b9621 - markus@cvs.openbsd.org 2003/08/28 12:54:34 
[auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c]
     [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5]
     [sshconnect1.c sshd.c sshd_config sshd_config.5]
     remove kerberos support from ssh1, since it has been replaced with GSSAPI;
     but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
 2003-09-02 22:51:17 +10:00
Damien Miller 55c47edc81 - (djm) OpenBSD CVS Sync 
- deraadt@cvs.openbsd.org 2003/08/24 17:36:51
     [auth2-gss.c]
     64 bit cleanups; markus ok
 2003-09-02 22:14:07 +10:00
Ben Lindstrom 4d5dffce9f ChangeLog fix pointed out by Darren. Yes, we should not use $Id$ when 
describing those changes. <chuckle>
 2003-08-30 00:11:56 +00:00
Ben Lindstrom 515d0f9a1e - (bal) openbsd-compat/ clean up. Considate headers, add in $Id$ on our 
files, and added missing license to header.
 2003-08-29 16:59:52 +00:00
Darren Tucker 43a0dc6653 - (dtucker) [auth.c] Do not check for locked accounts when PAM is enabled. 2003-08-26 14:22:12 +10:00
Darren Tucker 2fae867806 - (dtucker) [contrib/aix/inventory.sh] Add public domain notice. ok mouring@ 
(the original author)
 2003-08-26 13:43:12 +10:00
Darren Tucker 6ad50438ed - (dtucker) [Makefile.in] Remove auth2-krb5. 2003-08-26 12:22:04 +10:00
Darren Tucker 08bbb2f69d - djm@cvs.openbsd.org 2003/08/25 10:33:33 
[sshconnect2.c]
     fprintf->logit to silence login banner with "ssh -q"; ok markus@
 2003-08-26 12:14:05 +10:00
Darren Tucker 7858726e8a - fgsch@cvs.openbsd.org 2003/08/25 08:13:09 
[sftp-int.c]
     fix div by zero when listing for filename lengths longer than width.
     markus@ ok.
 2003-08-26 12:12:56 +10:00
Darren Tucker 600ad8de76 - deraadt@cvs.openbsd.org 2003/08/24 17:36:52 
[monitor.c monitor_wrap.c sshconnect2.c]
     64 bit cleanups; markus ok
 2003-08-26 12:10:48 +10:00
Darren Tucker 6b191a234c - markus@cvs.openbsd.org 2003/08/22 20:55:06 
[LICENCE]
     add Simon Wilkinson
 2003-08-26 12:09:53 +10:00
Darren Tucker 1e66a39e40 - markus@cvs.openbsd.org 2003/08/22 13:22:27 
[auth2.c] (auth2-krb5.c removed)
     nuke "kerberos-2@ssh.com"
 2003-08-26 12:08:15 +10:00
Darren Tucker be1a901f99 - markus@cvs.openbsd.org 2003/08/22 13:20:03 
[sshconnect2.c]
     remove support for "kerberos-2@ssh.com"
 2003-08-26 12:04:31 +10:00
Darren Tucker 49aaf4ad52 - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h 
configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
   sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
 2003-08-26 11:58:16 +10:00
Darren Tucker 0efd155c3c - markus@cvs.openbsd.org 2003/08/22 10:56:09 
[auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c
     gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c
     readconf.h servconf.c servconf.h session.c session.h ssh-gss.h
     ssh_config.5 sshconnect2.c sshd_config sshd_config.5]
     support GSS API user authentication; patches from Simon Wilkinson,
     stripped down and tested by Jakob and myself.
 2003-08-26 11:49:55 +10:00
Damien Miller 30912f7259 - (djm) Bug #629: Mark ssh_config option "pamauthenticationviakbdint" 
as deprecated. Remove mention from README.privsep. Patch from
   aet AT cc.hut.fi
 2003-08-26 10:48:14 +10:00
Darren Tucker 36ca53a5a0 - (dtucker) [README buildbff.sh inventory.sh] (all in contrib/aix) 
Update package builder: correctly handle config variables, use lsuser
   rather than /etc/passwd, fix typos, add Id's.
 2003-08-25 15:01:04 +10:00
Darren Tucker 3c8e1e1bbf - (dtucker) [configure.ac] Bug #533, #551: define BROKEN_GETADDRINFO on 
Tru64, solves getnameinfo and "bad addr or host" errors.  ok djm@
 2003-08-25 13:27:40 +10:00
Damien Miller 1f499fd368 - (djm) Bug #564: Perform PAM account checks for all authentications when 
UsePAM=yes; ok dtucker
 2003-08-25 13:08:49 +10:00
Darren Tucker e41bba5847 - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny 
any access to locked accounts.  ok djm@
 2003-08-25 11:51:19 +10:00
Ben Lindstrom 5ade9abc37 - (bal) redo how we handle 'mysignal()'. Move it to 
openbsd-compat/bsd-misc.c, s/mysignal/signal/ and #define signal to
   be our 'mysignal' by default.  OK djm@
 2003-08-25 01:16:21 +00:00
Ben Lindstrom af4a6c3a56 - (bal) openbsd-compat/ OpenBSD updates. Mostly licensing, ansifications 
and minor fixes.
 2003-08-25 01:10:51 +00:00
Damien Miller 331b6af8fa - (djm) Bug #621: Select OpenSC keys by usage attributes. Patch from 
larsch@trustcenter.de
 2003-08-25 10:58:26 +10:00
Darren Tucker 49d32566c2 - (dtucker) [contrib/cygwin/ssh-user-config] Put keys in authorized_keys 
rather that authorized_keys2.  Patch from vinschen@redhat.com.
 2003-08-22 18:43:48 +10:00
Damien Miller 59d3d5b8b4 - (djm) s/get_progname/ssh_get_progname/g to avoid conflict with Heimdal 
-lbroken; ok dtucker
 2003-08-22 09:34:41 +10:00
Darren Tucker 70a3d55b4a - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement 
and after normal openpty test.
 2003-08-21 17:58:29 +10:00
Darren Tucker 8e3653d2f3 - (dtucker) [defines.h] Put CMSG_DATA, CMSG_FIRSTHDR with other CMSG* macros, 
change CMSG_DATA to use __CMSG_ALIGN (and thus work properly), reformat for
   consistency.
 2003-08-21 16:49:41 +10:00
Darren Tucker f4220e6cef - markus@cvs.openbsd.org 2003/08/14 16:08:58 
[ssh-keygen.c]
     exit after primetest, ok djm@
 2003-08-21 16:44:07 +10:00
Darren Tucker f38ea77c03 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] 
Add a tcsendbreak function for platforms that don't have one, based on the
   one from OpenBSD.

Any more of these and I'll split them out into bsd-termio.[ch].
 2003-08-13 20:48:07 +10:00
Darren Tucker 1c52ee3e6f - markus@cvs.openbsd.org 2003/08/13 09:07:10 
[readconf.c ssh.c]
     socks4->socks, since with support both 4 and 5; dtucker@zip.com.au
 2003-08-13 20:38:36 +10:00
Darren Tucker ec960f2c93 - markus@cvs.openbsd.org 2003/08/13 08:46:31 
[auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
     ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
     remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
     fgsch@, miod@, henning@, jakob@ and others
 2003-08-13 20:37:05 +10:00
Darren Tucker 3bdbd848ea - markus@cvs.openbsd.org 2003/08/13 08:33:02 
[session.c]
     use more portable tcsendbreak(3) and ignore break_length;
     ok deraadt, millert
 2003-08-13 20:31:05 +10:00
Darren Tucker d85efee437 - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge. 2003-08-13 20:28:14 +10:00
Darren Tucker bc8c8f36fb - (dtucker) [openbsd-compat/xcrypt.c] Remove Cygwin #ifdef block (duplicate 
in bsd-cygwin_util.h).
 2003-08-11 23:00:33 +10:00
Darren Tucker ec0943a96c - (dtucker) OpenBSD CVS Sync 
(thanks to Simon Wilkinson for help with this -dt)
   - markus@cvs.openbsd.org 2003/07/16 15:02:06
     [auth-krb5.c]
     mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
     otherwise the kerberos credentinal is stored in a memory cache
     in the privileged sshd. ok jabob@, hin@ (some time ago)
 2003-08-11 22:55:36 +10:00
Darren Tucker f38db7f5da - (dtucker) [auth-pam.c] Don't set PAM_TTY if tty is null. ok djm@ 2003-08-08 13:43:37 +10:00
Darren Tucker 65914f1eb3 - (dtucker) [openbsd-compat/fake-rfc2553.h] Older Linuxes have AI_PASSIVE and 
AI_CANONNAME in netdb.h but not AI_NUMERICHOST, so check each definition
   separately before defining them.
 2003-08-08 12:15:11 +10:00
Darren Tucker 80649c5fa6 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.h] Move Cygwin 
specific defines and includes to bsd-cygwin_util.h.  Fixes build error too.
 2003-08-07 16:28:16 +10:00
Darren Tucker 854d7fd439 - (dtucker) [openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h] 
Remove incorrect filenames from comments (file names are in Id tags).
 2003-08-07 16:23:43 +10:00
Darren Tucker f315224d7c - (dtucker) [defines.h] Bug #336: Add CMSG_DATA and CMSG_FIRSTHDR macros if 
not already defined (eg Linux with some versions of libc5), based on those
   from OpenBSD.
 2003-08-07 15:58:28 +10:00
Darren Tucker 89f4cf0d29 - (dtucker) [canohost.c] Bug #336: Only check ip options if IP_OPTIONS is 
defined (fixes compile error on really old Linuxes).
 2003-08-07 13:29:04 +10:00
Darren Tucker b9d3f41ceb - (dtucker) [session.c] Have session_break_req not attempt to send a break 
if TIOCSBRK and TIOCCBRK are not defined (eg Cygwin).
 2003-08-07 13:24:24 +10:00
Darren Tucker bdf571b0dc - (dtucker) [openbsd-compat/bsd-misc.c] Fix cut-and-paste bug in tcgetpgrp. 2003-08-03 00:36:16 +10:00
Darren Tucker db732b14d7 - markus@cvs.openbsd.org 2003/07/31 22:34:03 
[progressmeter.c]
    print rate similar old version; round instead truncate;
    (included in previous progressmeter.c commit)
 2003-08-03 00:07:35 +10:00
Darren Tucker 85f04c6fd5 - avsm@cvs.openbsd.org 2003/07/31 15:50:16 
[atomicio.c]
     correct comment: atomicio takes vwrite, not write; deraadt@ ok
 2003-08-03 00:05:58 +10:00
Darren Tucker 4b60966863 - markus@cvs.openbsd.org 2003/07/31 09:21:02 
[auth2-none.c]
     check whether passwd auth is allowd, similar to proto 1; rob@pitman.co.za
     ok henning
 2003-08-03 00:05:01 +10:00
Darren Tucker 40311f2feb Add imported progressmeter.c changes to Changelog 2003-08-03 00:00:47 +10:00
Darren Tucker b2f9d4161a - (dtucker) [Makefile.in moduli.c moduli.h] Add new files and to Makefile. 
Should have added with this sync:
   - djm@cvs.openbsd.org 2003/07/28 09:49:56
     [ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
 2003-08-02 23:51:38 +10:00
Darren Tucker 2e9c9cf702 - (dtucker) [openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] 
Add a tcgetpgrp function.
 2003-08-02 23:31:42 +10:00
Darren Tucker 06ef75bf0c - markus@cvs.openbsd.org 2003/07/29 18:24:00 
[LICENCE progressmeter.c]
     replace 4 clause BSD licensed progressmeter code with a replacement
     from Nils Nordman and myself; ok deraadt@
     (copied from OpenBSD an re-applied portable changes)
 2003-08-02 23:28:38 +10:00
Darren Tucker 019cefeaad - djm@cvs.openbsd.org 2003/07/28 09:49:56 
[ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
 2003-08-02 22:40:07 +10:00
Darren Tucker c20c60bc99 - markus@cvs.openbsd.org 2003/07/23 07:42:43 
[sshd_config]
     remove AFS; itojun@
 2003-08-02 22:31:45 +10:00
Darren Tucker 6aaa58c470 - (dtucker) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/07/22 13:35:22
     [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c
     monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1
     ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h]
     remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
     test+ok henning@
 - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support.
 - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files.

I hope I got this right....
 2003-08-02 22:24:49 +10:00
Darren Tucker 4c29dd9f44 - (dtucker) [monitor.h monitor_wrap.h] Remove excess ident tags. 2003-08-02 20:37:03 +10:00
Damien Miller 7f2d795e3f - (djm) [auth-pam.c] Don't use crappy APIs like sprintf. Thanks bal 2003-07-30 14:53:11 +10:00
Darren Tucker fbba5a0501 - (dtucker) [openbsd-compat/xcrypt.c] Fix typo: DISABLED_SHADOW -> 
DISABLE_SHADOW.  Fixes HP-UX compile error.
 2003-07-26 19:38:30 +10:00
Ben Lindstrom 0410e32f47 - (bal) [auth-passwd.c openbsd-compat/Makefile.in openbsd-compat/xcrypt.c 
openbsd-compat/xcrypt.h] Split off encryption into xcrypt() interface,
    and isolate shadow password functions.  Tested in Solaris, but should
    not break other platforms too badly (except maybe HP =).  Also brings
    auth-passwd.c into full sync with OpenBSD tree.
 2003-07-24 06:52:13 +00:00
Darren Tucker acb98497fb - (dtucker) [configure.ac] Back out change for bug #620. 2003-07-23 14:33:10 +10:00
Darren Tucker cca1bdb8a8 - djm@cvs.openbsd.org 2003/07/19 00:46:31 
[regress/sftp-cmds.sh]
     regress test for sftp arguments with escaped quotes; ok markus
 2003-07-19 20:11:54 +10:00
Darren Tucker 554d5b544a - djm@cvs.openbsd.org 2003/07/19 00:45:53 
[sftp-int.c]
     fix sftp filename parsing for arguments with escaped quotes. bz #517;
     ok markus
 2003-07-19 20:09:21 +10:00
Darren Tucker 03a29baf35 - deraadt@cvs.openbsd.org 2003/07/18 01:54:25 
[scp.c]
     userid is unsigned, but well, force it anyways; andrushock@korovino.net
 2003-07-19 20:07:45 +10:00
Darren Tucker 538d180395 - markus@cvs.openbsd.org 2003/07/16 10:36:28 
[sshtty.c]
     clear IUCLC in enter_raw_mode; from rob@pitman.co.za; ok deraadt@, fgs@
 2003-07-19 19:56:18 +10:00
Darren Tucker e98dfa323e - markus@cvs.openbsd.org 2003/07/16 10:34:53 
[ssh.c sshd.c]
     don't exit on multiple -v or -d; ok deraadt@
 2003-07-19 19:54:31 +10:00
Darren Tucker fe0078ae49 - markus@cvs.openbsd.org 2003/07/14 12:36:37 
[sshd.c]
     remove undocumented -V option. would be only useful if openssh is used
     as ssh v1 server for ssh.com's ssh v2.
 2003-07-19 19:52:28 +10:00
Darren Tucker 394b8c8db3 - (dtucker) [configure.ac] Bug #620: Define BROKEN_GETADDRINFO for 
Solaris/x86.  Patch from jrhett at isite.net.
 2003-07-19 19:49:45 +10:00
Darren Tucker 1a721156b0 - markus@cvs.openbsd.org 2003/07/10 20:05:55 
[sftp.c]
     sync usage with manpage, add missing -R
 2003-07-14 17:32:29 +10:00
Darren Tucker 81a0b371f4 - markus@cvs.openbsd.org 2003/07/10 14:42:28 
[packet.c]
     the 2^(blocksize*2) rekeying limit is too expensive for 3DES,
     blowfish, etc, so enforce a 1GB limit for small blocksizes.
 2003-07-14 17:31:06 +10:00
Darren Tucker 29588616c2 - avsm@cvs.openbsd.org 2003/07/09 13:58:19 
[key.c]
     minor tweak: when generating the hex fingerprint, give strlcat the full
     bound to the buffer, and add a comment below explaining why the
     zero-termination is one less than the bound.  markus@ ok
 2003-07-14 17:28:34 +10:00
Darren Tucker 0abf13bb50 - (dtucker) [port-aix.h] Fix prototypes. 2003-07-14 16:43:42 +10:00
Darren Tucker fc3454ee67 - (dtucker) Bug #543: [configure.ac port-aix.c port-aix.h] 
Call setauthdb() before loginfailed(), which may load password registry-
   specific functions.  Based on patch by cawlfiel@us.ibm.com.
 2003-07-14 16:41:55 +10:00
Darren Tucker 30317e37e4 - (dtucker) [port-aix.h] Work around name collision on AIX for r_type by 
undef'ing it.
 2003-07-14 16:26:51 +10:00
Darren Tucker 5c6a91a39d - (dtucker) [acconfig.h configure.ac port-aix.c] Older AIXes don't declare 
loginfailed at all, so assume 3-arg loginfailed if not declared.
 2003-07-14 16:21:44 +10:00
Darren Tucker b9aa0a0baa - (dtucker) [auth-passwd.c auth.c session.c sshd.c port-aix.c port-aix.h] 
Convert aixloginmsg into platform-independant Buffer loginmsg.
 2003-07-08 22:59:59 +10:00
Darren Tucker 793e817d49 - (dtucker) Check return value of setpcred(). 2003-07-08 21:01:04 +10:00
Darren Tucker a0c0b63112 - (dtucker) [acconfig.h auth-passwd.c configure.ac session.c port-aix.[ch]] 
Include AIX headers for authentication functions and make calls match
   prototypes.  Test for and handle 3-args and 4-arg variants of loginfailed.
 2003-07-08 20:52:12 +10:00
Darren Tucker f1159b5b29 - (dtucker) [configure.ac] Bug #600: Check that getrusage is declared before 
searching libraries for it.  Fixes build errors on NCR MP-RAS.
 2003-07-07 19:44:01 +10:00
Darren Tucker 8661b56903 - (dtucker) [ssh-rand-helper.c loginrec.c] 
Apply atomicio typing change to these too.
 2003-07-06 15:20:46 +10:00
Darren Tucker 0a4f04b5b2 - djm@cvs.openbsd.org 2003/07/03 08:09:06 
[readconf.c readconf.h ssh-keysign.c ssh.c]
     fix AddressFamily option in config file, from brent@graveland.net;
     ok markus@
 2003-07-03 20:37:47 +10:00
Darren Tucker e2f2be7a3a - markus@cvs.openbsd.org 2003/07/03 08:24:13 
[regress/Makefile]
     enable tests for dynamic fwd via socks (-D), uses nc(1)
 2003-07-03 20:27:55 +10:00
Darren Tucker 7a2466291b - markus@cvs.openbsd.org 2003/07/03 08:21:46 
[regress/dynamic-forward.sh]
     add socks5; speedup; reformat; based on patch from dtucker@zip.com.au
 2003-07-03 20:26:04 +10:00
Darren Tucker 3f521e21c0 - markus@cvs.openbsd.org 2003/07/02 20:37:48 
[ssh.c]
     convert hostkeyalias to lowercase, otherwise uppercase aliases will
     not match at all; ok henning@
 2003-07-03 16:20:42 +10:00
Darren Tucker 46471c9a81 - markus@cvs.openbsd.org 2003/07/02 14:51:16 
[channels.c ssh.1 ssh_config.5]
     (re)add socks5 suppport to -D; ok djm@
     now ssh(1) can act both as a socks 4 and socks 5 server and
     dynamically forward ports.
 2003-07-03 13:55:19 +10:00
Darren Tucker 9189ff89c3 - markus@cvs.openbsd.org 2003/07/02 12:56:34 
[channels.c]
     deny dynamic forwarding with -R for v1, too; ok djm@
 2003-07-03 13:52:04 +10:00
Darren Tucker edeb1f7449 - markus@cvs.openbsd.org 2003/06/29 12:44:38 
[sshconnect.c]
     memset 0, not \0; andrushock@korovino.net
 2003-07-03 13:48:04 +10:00
Darren Tucker 9f63f22aa0 - deraadt@cvs.openbsd.org 2003/06/28 16:23:06 
[atomicio.c atomicio.h authfd.c clientloop.c monitor_wrap.c msg.c
     progressmeter.c scp.c sftp-client.c ssh-keyscan.c ssh.h sshconnect.c
     sshd.c]
     deal with typing of write vs read in atomicio
 2003-07-03 13:46:56 +10:00
Darren Tucker e53270481c - djm@cvs.openbsd.org 2003/06/28 07:48:10 
[sshd.c]
     report pidfile creation errors, based on patch from Roumen Petrov; ok markus@
 2003-07-03 13:40:44 +10:00
Damien Miller 200d0a7bf5 - (djm) Search for support functions necessary to build our 
getrrsetbyname() replacement. Patch from Roumen Petrov
 2003-06-30 19:21:36 +10:00
Darren Tucker 6eb9304782 - (dtucker) [configure.ac] Add sanity test after system-dependant compiler 
flag modifications.
 2003-06-29 21:30:41 +10:00
Darren Tucker cc9fd54a36 - (dtucker) Bug #602: move #include of netdb.h to after in.h (fixes compiler 
warnings on Solaris 2.5.1).
 2003-06-29 21:23:37 +10:00
Darren Tucker 3b08df9da7 Same day... 2003-06-29 21:20:04 +10:00
Damien Miller 723569b257 - (djm) Bug #593: Sanity check OpenSC card reader number; patch from 
aj@dungeon.inka.de
 2003-06-28 18:08:16 +10:00
Damien Miller 4a8e284855 - (djm) Bug #591: use PKCS#15 private key label as a comment in case 
of OpenSC. Report and patch from larsch@trustcenter.de
 2003-06-28 18:02:47 +10:00
Darren Tucker a3020db6b4 - (dtucker) [configure.ac] Bug #570: Have ./configure --enable-FEATURE 
actually enable the feature, for those normally disabled.  Patch by
   openssh (at) roumenpetrov.info.
 2003-06-28 12:54:33 +10:00
Darren Tucker b611c12e67 - (dtucker) [regress/dynamic-forward.sh] Import new regression test. 2003-06-28 12:42:09 +10:00
Darren Tucker a99c1b77ab - markus@cvs.openbsd.org 2003/06/26 20:08:33 
[readconf.c]
     do not dump core for 'ssh -o proxycommand host'; ok deraadt@
 2003-06-28 12:40:12 +10:00
Darren Tucker a6612d43cf - miod@cvs.openbsd.org 2003/06/25 22:39:36 
[sftp-server.c]
     Typo police: attribute is better written with an 'r'.
 2003-06-28 12:39:03 +10:00
Darren Tucker 502d384b74 - markus@cvs.openbsd.org 2003/06/24 08:23:46 
[auth2-hostbased.c auth2-pubkey.c auth2.c channels.c key.c key.h
      monitor.c packet.c packet.h serverloop.c sshconnect2.c sshd.c]
     int -> u_int; ok djm@, deraadt@, mouring@
 2003-06-28 12:38:01 +10:00
Darren Tucker 674f71d77e - markus@cvs.openbsd.org 2003/06/23 09:02:44 
[ssh_config.5]
     document EnableSSHKeysign; bugzilla #599; ok deraadt@, jmc@
 2003-06-28 12:33:12 +10:00
Darren Tucker a0472e095d - (dtucker) Have configure refer the user to config.log and 
contrib/findssl.sh for OpenSSL header/library mismatches.
 2003-06-24 20:22:09 +10:00
Darren Tucker 89b249be64 Missed a line cut-and-pasting the ChangeLog 2003-06-22 21:22:04 +10:00
Darren Tucker b8dae8ece0 20030622 
- (dtucker) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2003/06/20 05:48:21
     [sshd_config]
     sync some implemented options; ok markus@
 2003-06-22 20:48:45 +10:00
Darren Tucker 91cf261bd5 20030622 
- (dtucker) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2003/06/20 05:47:58
     [sshd_config.5]
     sync description of protocol 2 cipher proposal; ok markus
 2003-06-22 20:46:53 +10:00
Darren Tucker a251f809a0 - (dtucker) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/06/18 11:28:11
     [ssh-rsa.c]
     backout last change, since it violates pkcs#1
     switch to share/misc/license.template
 2003-06-22 20:45:15 +10:00
Darren Tucker 6cf1a2cfe8 - (dtucker) [openbsd-compat/setproctitle.c] Ensure SPT_TYPE is defined before 
testing its value.

When HAVE_SETPROCTITLE is defined (at least on NetBSD, gcc 2.95.3) the test
"#if SPT_TYPE == SPT_REUSEARGV" is not true (probably because SPT_TYPE or
SPT_REUSEARGV is not defined).  This results in the following build error:

$ gcc [flags] setproctitle.c
setproctitle.c: In function `compat_init_setproctitle':
setproctitle.c:102: `argv_start' undeclared (first use in this function)
 2003-06-22 18:32:10 +10:00
Darren Tucker e0194e52ca - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/06/21 09:14:05
     [reconfigure.sh]
     missing $SUDO; from dtucker@zip.com.au
 - (dtucker) [regress/authorized_keys_root] Remove temp data file from CVS.
 2003-06-22 12:33:27 +10:00
Darren Tucker 50cea67222 - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/06/12 15:43:32
     [Makefile]
     test -HUP; dtucker at zip.com.au
 2003-06-18 22:45:34 +10:00
Darren Tucker 76437600b2 - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/06/12 15:40:01
     [try-ciphers.sh]
     add ctr
 2003-06-18 22:43:13 +10:00
Darren Tucker c43362c89a - (dtucker) OpenBSD CVS Sync (regress/) 
- mouring@cvs.openbsd.org 2003/05/15 04:07:12
     [sftp-cmds.sh]
     Advanced put/get testing for sftp.  OK @djm
 2003-06-18 22:41:41 +10:00
Darren Tucker ee5f83d3ea - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/05/14 22:08:27
     [ssh-com-client.sh ssh-com-keygen.sh ssh-com-sftp.sh ssh-com.sh]
     test against some new commerical versions
 2003-06-18 22:36:48 +10:00
Darren Tucker a4040f5904 - (dtucker) OpenBSD CVS Sync (regress/) 
- djm@cvs.openbsd.org 2003/04/04 09:34:22
     [Makefile sftp-cmds.sh]
     More regression tests, including recent directory rename bug; ok markus@
 2003-06-18 22:35:11 +10:00
Darren Tucker d57a76eec5 - (dtucker) OpenBSD CVS Sync (regress/) 
- markus@cvs.openbsd.org 2003/04/02 12:21:13
     [Makefile]
     enable rekey test
 2003-06-18 22:32:51 +10:00
Darren Tucker 3a222ac0d0 - (dtucker) [regress/copy.1 regress/copy.2] Remove temp data files from CVS. 2003-06-18 22:21:33 +10:00
Darren Tucker fc8a7ea202 - (dtucker) [reconfigure.sh rekey.sh sftp-badcmds.sh] 
Import new regression tests from OpenBSD
 2003-06-18 22:18:57 +10:00
Damien Miller 0275b52387 - markus@cvs.openbsd.org 2003/06/17 18:14:23 
[cipher-ctr.c]
     use license from /usr/share/misc/license.template for new code
 2003-06-18 20:29:35 +10:00
Damien Miller 80163e1b72 - markus@cvs.openbsd.org 2003/06/16 10:22:45 
[ssh-add.c]
     print out key comment on each prompt; make ssh-askpass more useable; ok djm@
 2003-06-18 20:29:18 +10:00
Damien Miller 8c1d2e3926 - markus@cvs.openbsd.org 2003/06/16 08:22:35 
[ssh-rsa.c]
     make sure the signature has at least the expected length (don't
     insist on len == hlen + oidlen, since this breaks some smartcards)
     bugzilla #592; ok djm@
 2003-06-18 20:29:01 +10:00
Damien Miller 56a0bb07c4 - markus@cvs.openbsd.org 2003/06/12 19:12:03 
[scard.c scard.h ssh-agent.c ssh.c]
     add sc_get_key_label; larsch at trustcenter.de; bugzilla#591
 2003-06-18 20:28:40 +10:00
Damien Miller b2cdcb50a2 - nino@cvs.openbsd.org 2003/06/12 15:34:09 
[scp.c]
     Typo. Ok markus@.
 2003-06-18 20:26:34 +10:00
Damien Miller 116aabbb66 - djm@cvs.openbsd.org 2003/06/12 12:22:47 
[LICENCE]
     mention more copyright holders; ok markus@
 2003-06-18 20:26:13 +10:00
Damien Miller 469954debd - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/06/12 07:57:38
     [monitor.c sshlogin.c sshpty.c]
     typos; dtucker at zip.com.au
 2003-06-18 20:25:33 +10:00
Damien Miller 53950b68bf - (djm) Update license on fake-rfc2553.[ch]; ok itojun@ 2003-06-14 08:43:22 +10:00
Damien Miller af63951c57 - (djm) Put licenses on substantial header files 2003-06-11 22:51:32 +10:00
Damien Miller 141efa7036 - (djm) Mention portable copyright holders in LICENSE 2003-06-11 22:50:56 +10:00
Damien Miller 4bfeb14742 - (djm) Sync LICENSE against OpenBSD 2003-06-11 22:08:36 +10:00
Damien Miller d94f20d28e - djm@cvs.openbsd.org 2003/06/11 11:18:38 
[authfd.c authfd.h ssh-add.c ssh-agent.c]
     make agent constraints (lifetime, confirm) work with smartcard keys;
     ok markus@
 2003-06-11 22:06:33 +10:00
Damien Miller 0e1b937f13 - jakob@cvs.openbsd.org 2003/06/11 10:18:47 
[dns.c]
     sync with check_host_key() change
 2003-06-11 22:05:45 +10:00
Damien Miller 7392ae6270 - jakob@cvs.openbsd.org 2003/06/11 10:16:16 
[sshconnect.c]
     clean up check_host_key() and improve SSHFP feedback. ok markus@
 2003-06-11 22:05:25 +10:00
Damien Miller 2b92d32e19 - deraadt@cvs.openbsd.org 2003/06/10 22:20:52 
[packet.c progressmeter.c]
     mostly ansi cleanup; pval ok
 2003-06-11 22:05:06 +10:00
Damien Miller f1ce505daf - jmc@cvs.openbsd.org 2003/06/10 09:12:11 
[scp.1 sftp-server.8 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5]
     [sshd.8 sshd_config.5 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
     - section reorder
     - COMPATIBILITY merge
     - macro cleanup
     - kill whitespace at EOL
     - new sentence, new line
     ssh pages ok markus@
 2003-06-11 22:04:39 +10:00
Damien Miller 78f2e5ca98 - (djm) Re-merge OpenSC info into README.smartcard 2003-06-10 21:09:09 +10:00
Damien Miller c18c06e131 - (djm) Sync README.smartcard with OpenBSD -current 2003-06-10 18:55:22 +10:00
Darren Tucker 400b8786d6 - (dtucker) [uidswap.c] Fix setreuid and add missing args to fatal(). ok djm@ 2003-06-06 10:46:04 +10:00
Darren Tucker 881753bef2 - (dtucker) Define EAI_NONAME in fake-rfc2553.h (used by fake-rfc2553.c). 2003-06-05 22:20:11 +10:00
Darren Tucker 4aff13f1e7 - (dtucker) Add includes.h to fake-rfc2553.c so it will build. 2003-06-05 19:37:30 +10:00
Damien Miller 76b5c8a83a - (djm) Bug #589 - scard-opensc: load only keys with a private keys 
Patch from larsch@trustcenter.de
 2003-06-05 19:19:35 +10:00
Damien Miller f49078dfdf - (djm) Bug #588 - Add scard-opensc.o back to Makefile.in 
Patch from larsch@trustcenter.de
 2003-06-05 18:53:42 +10:00
Damien Miller c28e38d23a - (djm) Merge all the openbsd/fake-* into fake-rfc2553.[ch] 2003-06-05 18:52:47 +10:00
Damien Miller b95bb7f9b1 - (djm) Don't use xmalloc() or pull in toplevel headers in fake-* code 2003-06-05 10:04:12 +10:00
Damien Miller 5fe46a45c8 - (djm) Implement paranoid priv dropping checks, based on: 
"SetUID demystified" - Hao Chen, David Wagner and Drew Dean
   Proceedings of USENIX Security Symposium 2002
 2003-06-05 09:53:31 +10:00
Damien Miller 10eac0cf8f - (djm) Support AI_NUMERICHOST in fake-getaddrinfo.c. Needed for recent 
canohost.c changes.
 2003-06-05 09:48:32 +10:00
Damien Miller 0cbb9dea05 - (djm) Always use mysignal() for SIGALRM 2003-06-04 22:56:15 +10:00
Damien Miller cc685c1cbe - djm@cvs.openbsd.org 2003/06/04 12:41:22 
[sftp.c]
     kill ssh process on receipt of signal; ok markus@
 2003-06-04 22:51:38 +10:00
Damien Miller b69aaa8db7 - djm@cvs.openbsd.org 2003/06/04 12:40:39 
[scp.c]
     kill ssh process upon receipt of signal, bz #241.
     based on patch from esb AT hawaii.edu; ok markus@
 2003-06-04 22:51:24 +10:00
Damien Miller 65d1f5765f - djm@cvs.openbsd.org 2003/06/04 12:18:49 
[scp.c]
     ansify; ok markus@
 2003-06-04 22:51:08 +10:00
Damien Miller 9fc7c699af - djm@cvs.openbsd.org 2003/06/04 12:03:59 
[serverloop.c]
     remove bitrotten commet; ok markus@
 2003-06-04 22:50:54 +10:00
Damien Miller 4c322482bb - (djm) Update to fix of bug #584: lock card before return. 
From larsch@trustcenter.de
 2003-06-04 22:12:17 +10:00
Damien Miller 31b3a0a98f - djm@cvs.openbsd.org 2003/06/04 10:23:48 
[sshd.c]
     remove duplicated group-dropping code; ok markus@
 2003-06-04 20:32:12 +10:00
Damien Miller 941ac459ce - (djm) OpenBSD CVS Sync 
- djm@cvs.openbsd.org 2003/06/04 08:25:18
     [sshconnect.c]
     disable challenge/response and keyboard-interactive auth methods
     upon hostkey mismatch. based on patch from fcusack AT fcusack.com.
     bz #580; ok markus@
 2003-06-04 20:31:53 +10:00
Damien Miller 2527f5755a - (djm) Bug #584: scard-opensc.c doesn't work without PIN. Patch from 
larsch@trustcenter.de; ok markus@
 2003-06-04 19:22:06 +10:00
Damien Miller 485397c48d - (djm) Bug #577 - wrong flag in scard-opensc.c sc_private_decrypt. 
ok markus@
 2003-06-04 19:15:10 +10:00
Damien Miller 865173ee03 - (djm) Bug #573 - Remove unneeded Krb headers and compat goop. Patch from 
simon@sxw.org.uk (Also matches a change in OpenBSD a while ago)
 2003-06-04 19:06:59 +10:00
Damien Miller d311c4e54b change "No more 4-term BSD licenses in our tree" to 
"No more 4-term BSD licenses in linked code"

mdoc2man.pl is 4-term BSDL
 2003-06-03 13:09:16 +10:00
Damien Miller dafb12ed28 a - millert@cvs.openbsd.org 2003/06/03 02:56:16 
[scp.c]
     Remove the advertising clause in the UCB license which Berkeley
     rescinded 22 July 1999.  Proofed by myself and Theo.
 2003-06-03 13:06:18 +10:00
Darren Tucker eb28cbc399 - (dtucker) [port-aix.c bsd-cray.c] Fix uses of verify_reverse_mapping. 2003-06-03 12:45:27 +10:00
Damien Miller 048d88d5aa trim prior to 3.6p1 2003-06-03 12:43:14 +10:00
Damien Miller 329638e49c - (djm) Sync openbsd-compat with OpenBSD CVS. 
- No more 4-term BSD licenses in our tree
 2003-06-03 12:12:50 +10:00
Damien Miller 3a961dc0d3 - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/06/02 09:17:34
     [auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c]
     [canohost.c monitor.c servconf.c servconf.h session.c sshd_config]
     [sshd_config.5]
     deprecate VerifyReverseMapping since it's dangerous if combined
     with IP based access control as noted by Mike Harding; replace with
     a UseDNS option, UseDNS is on by default and includes the
     VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@
     ok deraadt@, djm@
 - (djm) Fix portable-specific uses of verify_reverse_mapping too
 2003-06-03 10:25:48 +10:00
Damien Miller 35276253a6 - (djm) Replace setproctitle replacement with code derived from 
UCB sendmail
 2003-06-03 10:14:28 +10:00
Damien Miller eacbb4fcc1 - jakob@cvs.openbsd.org 2003/06/02 08:31:10 
[ssh_config.5]
     VerifyHostKeyDNS is v2 only. ok markus@
 2003-06-02 19:10:41 +10:00
Damien Miller 61d3680aca - deraadt@cvs.openbsd.org 2003/05/29 16:58:45 
[sshd.c uidswap.c]
     seteuid and setegid; markus ok
 2003-06-02 19:09:48 +10:00
Damien Miller ab2db41b61 - djm@cvs.openbsd.org 2003/05/26 12:54:40 
[sshconnect.c]
     fix format strings; ok markus@
 2003-06-02 19:09:13 +10:00
Damien Miller f46844214d - (djm) Sync license on openbsd-compat/bindresvport.c with OpenBSD CVS 2003-06-02 18:59:08 +10:00
Damien Miller dcc8312a19 - (djm) Fix use of macro before #define in cipher-aes.c 2003-06-02 18:57:59 +10:00
Damien Miller dba5950820 - (djm) Remove "noip6" option from RedHat spec file. This may now be 
set at runtime using AddressFamily option.
 2003-06-02 17:43:19 +10:00
Tim Rice 237ca4ab08 openbsd-compat/xmmap.[ch] License clarifications. Add missing CVS ID. 2003-06-01 19:25:27 -07:00
Damien Miller f2e3e9deba - (djm) Always use saved_argv in sshd.c as compat_init_setproctitle may 
clobber
 2003-06-02 12:15:54 +10:00
Damien Miller f3bff94957 - (djm) Fix segv from bad reordering in auth-pam.c 2003-06-02 12:13:40 +10:00
Darren Tucker 2972d6c045 - (dtucker) Define SSHD_ACQUIRES_CTTY for NCR MP-RAS and Reliant Unix. 
I'm pretty sure these are required.  I also want to add -D_XOPEN_SOURCE=1
-D_XOPEN_SOURCE_EXTENDED=1 to CPPFLAGS for MP-RAS but I haven't had confirmation
that it will not break anything else.
 2003-05-30 17:43:42 +10:00
Darren Tucker 3cb84e5ec8 - (dtucker) Add missing semicolon in md5crypt.c, patch from openssh at 
roumenpetrov.info
 2003-05-30 16:58:22 +10:00
Damien Miller a6a7c19dcb - (djm) Avoid auth2-chall.c warning when compiling without 
PAM, BSD_AUTH and SKEY
 2003-05-26 21:36:13 +10:00
Damien Miller 04bd8b0bcc - djm@cvs.openbsd.org 2003/05/24 09:30:40 
[authfile.c monitor.c sftp-common.c sshpty.c]
     cast some types for printing; ok markus@
 2003-05-25 14:38:33 +10:00
Damien Miller c11fe255ab - (djm) OpenBSD CVS Sync 
- djm@cvs.openbsd.org 2003/05/24 09:02:22
     [log.c]
     pass logged data through strnvis; ok markus
 2003-05-25 14:38:02 +10:00
Darren Tucker 6014578b90 - (dtucker) Correct --osfsia in INSTALL. Patch by skeleten at shillest.net 2003-05-24 11:41:16 +10:00
Damien Miller 08293fa435 - djm@cvs.openbsd.org 2003/05/23 08:29:30 
[sshconnect.c]
     fix leak; ok markus@
 2003-05-23 18:44:41 +10:00
Damien Miller fbf486b4a6 - jmc@cvs.openbsd.org 2003/05/20 12:09:31 
[ssh.1 ssh_config.5 sshd.8 sshd_config.5 ssh-keygen.1]
     new sentence, new line
 2003-05-23 18:44:23 +10:00
Damien Miller 5067792a72 - (djm) OpenBSD CVS Sync 
- jmc@cvs.openbsd.org 2003/05/20 12:03:35
     [sftp.1]
     - new sentence, new line
     - added .Xr's
     - typos
     ok djm@
 2003-05-23 18:44:04 +10:00
Damien Miller d419bdae77 - (djm) Use VIS_SAFE on logged strings rather than default strnvis 
encoding (which encodes many more characters)
 2003-05-23 18:43:40 +10:00
Damien Miller 1340ec297b - (djm) Configure logic to detect syslog_r and friends 2003-05-20 09:24:42 +10:00
Damien Miller 74a3442d10 - deraadt@cvs.openbsd.org 2003/05/18 23:22:01 
[log.c]
     use syslog_r() in a signal handler called place; markus ok
 2003-05-20 09:24:17 +10:00
Damien Miller eb0e969a4f - (djm) Sync auth-pam.h with what we actually implement 2003-05-19 11:28:44 +10:00
Damien Miller 5b5ca19ef0 - (djm) KNF on auth-sia.[ch] 2003-05-19 00:50:02 +10:00
Damien Miller e7fb103192 - (djm) KNF on md5crypt.c 2003-05-19 00:46:46 +10:00
Damien Miller 317412502b - (djm) Big KNF on openbsd-compat/ 2003-05-19 00:13:38 +10:00
Damien Miller e323df6c48 - (djm) Sync openbsd-compat/ with OpenBSD CVS head 2003-05-18 22:24:09 +10:00
Damien Miller 0b8e9006d8 - (djm) Tidy and trim TODO 2003-05-18 21:44:07 +10:00
Damien Miller f5399c24dc - markus@cvs.openbsd.org 2003/05/17 04:27:52 
[cipher.c cipher-ctr.c myproposal.h]
     experimental support for aes-ctr modes from
     http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt
     ok djm@
 2003-05-18 20:53:59 +10:00
Damien Miller a9825785e8 - itojun@cvs.openbsd.org 2003/05/17 03:25:58 
[auth-rhosts.c]
     just in case, put numbers to sscanf %s arg.
 2003-05-18 20:53:10 +10:00
Damien Miller 7e1bbc55af - (djm) Remove IPv4 by default hack now that we can specify AF in config 2003-05-18 20:52:40 +10:00
Damien Miller 20a8f97b03 - djm@cvs.openbsd.org 2003/05/16 03:27:12 
[readconf.c ssh_config ssh_config.5 ssh-keysign.c]
     add AddressFamily option to ssh_config (like -4, -6 on commandline).
     Portable bug #534; ok markus@
 2003-05-18 20:50:30 +10:00
Damien Miller 25d9342f04 - (djm) Return of the dreaded PAM_TTY_KLUDGE, which went missing in 
recent merge
 2003-05-18 20:45:47 +10:00
Ben Lindstrom 4c9e9ab165 - (bal) strcat -> strlcat on openbsd-compat/realpath.c (rev 1.8 OpenBSD) 2003-05-18 01:22:43 +00:00
Damien Miller e27c6cc3ad - (djm) Guard free_pam_environment against NULL argument. Works around 
HP/UX PAM problems debugged by dtucker
 2003-05-16 18:21:01 +10:00
Damien Miller c46b6bc4f7 - (djm) A few type mismatch fixes from Bug #565 2003-05-16 15:51:44 +10:00