Darren Tucker
a916d143a1
- [auth-krb5.c auth.h gss-serv-krb5.c] Move KRB5CCNAME generation for the MIT
...
Kerberos code path into a common function and expand mkstemp template to be
consistent with the rest of OpenSSH. From sxw at inf.ed.ac.uk, ok djm@
2005-07-07 11:50:20 +10:00
Damien Miller
f92c0794ec
- markus@cvs.openbsd.org 2005/07/04 14:04:11
...
[channels.c]
don't forget to set x11_saved_display
2005-07-06 09:45:26 +10:00
Damien Miller
fd94fbaf56
- jmc@cvs.openbsd.org 2005/07/04 11:29:51
...
[ssh_config.5]
fix Xr and a little grammar;
2005-07-06 09:44:59 +10:00
Damien Miller
1339002e8b
- djm@cvs.openbsd.org 2005/07/04 00:58:43
...
[channels.c clientloop.c clientloop.h misc.c misc.h ssh.c ssh_config.5]
implement support for X11 and agent forwarding over multiplex slave
connections. Because of protocol limitations, the slave connections inherit
the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding
their own.
ok dtucker@ "put it in" deraadt@
2005-07-06 09:44:19 +10:00
Damien Miller
a7270309fc
- markus@cvs.openbsd.org 2005/07/01 13:19:47
...
[channels.c]
don't free() if getaddrinfo() fails; report mpech@
2005-07-06 09:36:05 +10:00
Damien Miller
dba6354c05
wrap
2005-06-26 08:56:48 +10:00
Damien Miller
7c71cc738c
- djm@cvs.openbsd.org 2005/06/25 22:47:49
...
[ssh.c]
do the default port filling code a few lines earlier, so it really
does fix %p
2005-06-26 08:56:31 +10:00
Damien Miller
8f74c8fc32
- djm@cvs.openbsd.org 2005/06/18 04:30:36
...
[ssh.c ssh_config.5]
allow ControlPath=none, patch from dwmw2 AT infradead.org; ok dtucker@
2005-06-26 08:56:03 +10:00
Damien Miller
9651fe690a
- (djm) OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2005/06/17 22:53:47
[ssh.c sshconnect.c]
Fix ControlPath's %p expanding to "0" for a default port,
spotted dwmw2 AT infradead.org; ok markus@
2005-06-26 08:55:25 +10:00
Damien Miller
52c8afeec5
- (djm) [loginrec.c ssh-rand-helper.c] Fix -Wsign-compare for portable,
...
tested and fixes tim@
2005-06-19 10:19:43 +10:00
Damien Miller
06221f1527
- djm@cvs.openbsd.org 2005/06/17 02:44:33
...
[auth1.c] make this -Wsign-compare clean; ok avsm@ markus@
2005-06-19 07:36:10 +10:00
Damien Miller
6abf57ccbf
- djm@cvs.openbsd.org 2005/05/20 12:57:01;
...
[auth1.c] split protocol 1 auth methods into separate functions, makes
authloop much more readable; fixes and ok markus@ (portable ok &
polish dtucker@)
2005-06-19 07:31:37 +10:00
Darren Tucker
f0bd352429
- (dtucker) [cipher.c openbsd-compat/openbsd-compat.h
...
openbsd-compat/openssl-compat.c] only include openssl compat stuff where
it's needed as it can cause conflicts elsewhere (eg xcrypt.c). Found by
and ok tim@
----------------------------------------------------------------------
automatically CVS: CVS: Committing in . CVS: CVS: Modified Files:
----------------------------------------------------------------------
2005-06-17 21:15:20 +10:00
Damien Miller
eccb9de72a
- djm@cvs.openbsd.org 2005/06/17 02:44:33
...
[auth-rsa.c auth.c auth1.c auth2-chall.c auth2-gss.c authfd.c authfile.c]
[bufaux.c canohost.c channels.c cipher.c clientloop.c dns.c gss-serv.c]
[kex.c kex.h key.c mac.c match.c misc.c packet.c packet.h scp.c]
[servconf.c session.c session.h sftp-client.c sftp-server.c sftp.c]
[ssh-keyscan.c ssh-rsa.c sshconnect.c sshconnect1.c sshconnect2.c sshd.c]
make this -Wsign-compare clean; ok avsm@ markus@
NB. auth1.c changes not committed yet (conflicts with uncommitted sync)
NB2. more work may be needed to make portable Wsign-compare clean
2005-06-17 12:59:34 +10:00
Damien Miller
677257fe07
- markus@cvs.openbsd.org 2005/06/16 08:00:00
...
[canohost.c channels.c sshd.c]
don't exit if getpeername fails for forwarded ports; bugzilla #1054 ;
ok djm
2005-06-17 12:55:03 +10:00
Damien Miller
17e7ed0e75
- (djm) OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2005/06/16 03:38:36
[channels.c channels.h clientloop.c clientloop.h ssh.c]
move x11_get_proto from ssh.c to clientloop.c, to make muliplexed xfwd
easier later; ok deraadt@
2005-06-17 12:54:33 +10:00
Damien Miller
46f55d3665
- dtucker@cvs.openbsd.org 2005/06/09 13:43:49
...
[cipher.c]
Correctly initialize end of array sentinel; ok djm@
(Id sync only, change already in portable)
2005-06-16 13:21:17 +10:00
Damien Miller
d14b1e731c
- djm@cvs.openbsd.org 2005/06/08 11:25:09
...
[clientloop.c readconf.c readconf.h ssh.c ssh_config.5]
add ControlMaster=auto/autoask options to support opportunistic
multiplexing; tested avsm@ and jakob@, ok markus@
2005-06-16 13:19:41 +10:00
Damien Miller
ac7ef6a736
- djm@cvs.openbsd.org 2005/06/08 03:50:00
...
[ssh-keygen.1 ssh-keygen.c sshd.8]
increase default rsa/dsa key length from 1024 to 2048 bits;
ok markus@ deraadt@
2005-06-16 13:19:06 +10:00
Damien Miller
6476cad9bb
- djm@cvs.openbsd.org 2005/06/06 11:20:36
...
[auth.c auth.h misc.c misc.h ssh.c ssh_config.5 sshconnect.c]
introduce a generic %foo expansion function. replace existing % expansion
and add expansion to ControlPath; ok markus@
2005-06-16 13:18:34 +10:00
Damien Miller
05656967b1
- (djm) OpenBSD CVS Sync
...
- jaredy@cvs.openbsd.org 2005/06/07 13:25:23
[progressmeter.c]
catch SIGWINCH and resize progress meter accordingly; ok markus dtucker
2005-06-16 13:18:04 +10:00
Darren Tucker
488d602618
typo
2005-06-09 23:40:39 +10:00
Darren Tucker
a55ec77013
- (dtucker) [cipher.c openbsd-compat/Makefile.in
...
openbsd-compat/openbsd-compat.{c,h} openbsd-compat/openssl-compat.h]
Move compatibility code for supporting older OpenSSL versions to the
compat layer. Suggested by and "no objection" djm@
2005-06-09 21:45:10 +10:00
Darren Tucker
431f022263
- (dtucker) [configure.ac] Continue the hunt for LLONG_MIN and LLONG_MAX:
...
in today's episode we attempt to coax it from limits.h where it may be
hiding, failing that we take the DIY approach. Tested by tim@
2005-06-07 17:53:40 +10:00
Darren Tucker
6a45f3dab4
- (dtucker) [configure.ac] Point configure's reporting address at the
...
openssh-unix-dev list. ok tim@ djm@
2005-06-03 19:33:10 +10:00
Darren Tucker
67b3703da3
- (dtucker) [configure.ac] Only try gcc -std=gnu99 if LLONG_MAX isn't
...
defined, and check that it helps before keeping it in CFLAGS. Some old
gcc's don't set an error code when encountering an unknown value in -std.
Found and tested by tim@.
2005-06-03 17:58:31 +10:00
Tim Rice
fcc7ff1de8
- (tim) [configure.ac] Some platforms need sys/types.h for arpa/nameser.h.
...
Take AC_CHECK_HEADERS test out of ultrix section. It caused other platforms
to skip builtin standard includes tests. (first AC_CHECK_HEADERS test
must be run on all platforms) Add missing ;; to case statement. OK dtucker@
2005-06-02 20:28:29 -07:00
Tim Rice
4dbacffe7b
- (tim) [configure.ac] set TEST_SHELL for OpenServer 6
2005-06-01 20:09:28 -07:00
Tim Rice
5f7075800a
- (tim) [config.guess config.sub] Update to '2005-05-27' version.
2005-06-01 19:57:45 -07:00
Darren Tucker
0814d3136f
- djm@cvs.openbsd.org 2005/05/27 08:30:37
...
[ssh.c]
fix -O for cases where no ControlPath has been specified or socket at
ControlPath is not contactable; spotted by and ok avsm@
2005-06-01 23:08:51 +10:00
Darren Tucker
2db8ae671e
- dtucker@cvs.openbsd.org 2005/05/26 09:08:12
...
[ssh-keygen.c]
uint32_t -> u_int32_t for consistency; ok djm@
2005-06-01 23:02:25 +10:00
Darren Tucker
fc4f2dd347
- avsm@cvs.openbsd.org 2005/05/26 02:08:05
...
[scp.c]
If copying multiple files to a target file (which normally fails, as it
must be a target directory), kill the spawned ssh child before exiting.
This stops it trying to authenticate and spewing lots of output.
deraadt@ ok
2005-06-01 23:01:12 +10:00
Darren Tucker
81eb5d5e10
- (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoll.c]
...
Add strtoll to the compat library, from OpenBSD.
2005-06-01 21:39:33 +10:00
Darren Tucker
d886e1ca2c
- (dtucker) [configure.ac] Look for _getshort and _getlong in
...
arpa/nameser.h.
2005-06-01 18:57:45 +10:00
Darren Tucker
f5615962c0
- (dtucker) [mdoc2man.awk] Teach it to understand .Ox.
2005-05-31 16:59:16 +10:00
Darren Tucker
11fb0f290f
- (dtucker) [contrib/aix/pam.conf] Correct comments. From davidl at
...
vintela.com.
2005-05-31 16:51:07 +10:00
Darren Tucker
f9fea65ba9
- (dtucker) [openbsd-compat/port-aix.c] Minor correction to debug message,
...
spotted by tim@.
2005-05-29 10:54:27 +10:00
Darren Tucker
6b2fe31def
- (dtucker) [openbsd-compat/port-aix.c] Whitespace cleanups while there.
2005-05-29 10:32:47 +10:00
Darren Tucker
782727ac61
20050529
...
- (dtucker) [openbsd-compat/port-aix.c] Bug #1046 : AIX 5.3 expects the
argument to passwdexpired to be initialized to NULL. Suggested by tim@
While at it, initialize the other arguments to auth functions in case they
ever acquire this behaviour.
2005-05-29 10:28:48 +10:00
Darren Tucker
5d72a40d67
- (dtucker) [openbsd-compat/port-aix.h] Use the HAVE_DECL_* definitions as
...
per the autoconf man page. Configure should always define them but it
doesn't hurt to check.
2005-05-28 20:28:39 +10:00
Darren Tucker
fd33328a25
- (dtucker) [configure.ac] Merge HP-UX blocks into a common block with minor
...
version-specific variations as required.
2005-05-28 18:31:42 +10:00
Darren Tucker
7d2171b2cd
- (dtucker) [configure.ac] getpgrp may be defined in unistd.h, so check for
...
its presence before doing AC_FUNC_GETPGRP.
2005-05-28 16:57:00 +10:00
Darren Tucker
390b6d5dbf
- (dtucker) [configure.ac] strsep() may be defined in string.h, so check
...
for its presence and include it in the strsep check.
2005-05-28 16:54:36 +10:00
Darren Tucker
0c9653f57e
- (dtucker) [configure.ac] For AC_CHECK_HEADERS() and AC_CHECK_FUNCS() have
...
one entry per line to make it easier to merge changes. ok djm@
2005-05-28 15:58:14 +10:00
Darren Tucker
2be1cbb7be
- (dtucker) [acconfig.h configure.ac defines.h includes.h sshpty.c
...
openbsd-compat/bsd-misc.c] Add support for Ultrix. No, that's not a typo.
Required changes from Bernhard Simon, integrated by me. ok djm@
2005-05-27 21:13:40 +10:00
Damien Miller
287b459194
- (djm) [defines.h] Use our realpath if we have to define PATH_MAX, spotted by
...
David Leach; ok dtucker@
2005-05-27 19:36:56 +10:00
Damien Miller
de3cb0a3dc
- (djm) [configure.ac openbsd-compat/Makefile.in]
...
[openbsd-compat/openbsd-compat.h openbsd-compat/strtonum.c]
Add strtonum(3) from OpenBSD libc, new code needs it.
Unfortunately Linux forces us to do a bizarre dance with compiler
options to get LLONG_MIN/MAX; Spotted by and ok dtucker@
2005-05-26 20:48:25 +10:00
Darren Tucker
84ce9b455d
- (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Bug #1033 : Provide
...
templates for _getshort and _getlong if missing to prevent compiler warnings
on Linux.
2005-05-26 20:12:15 +10:00
Darren Tucker
f08bdb5a7e
- (dtucker) [auth-pam.c] Bug #1033 : Fix warnings building with PAM on Linux:
...
warning: dereferencing type-punned pointer will break strict-aliasing rules
warning: passing arg 3 of `pam_get_item' from incompatible pointer type
The type-punned pointer fix is based on a patch from SuSE's rpm. ok djm@
2005-05-26 19:59:48 +10:00
Darren Tucker
d98dce6929
- (dtucker) [regress/reexec.sh] Add ${EXEEXT} so this test also works on
...
Cygwin.
2005-05-26 13:43:57 +10:00
Damien Miller
b253cc4213
- avsm@cvs.openbsd.org 2005/05/24 17:32:44
...
[atomicio.c atomicio.h authfd.c monitor_wrap.c msg.c scp.c sftp-client.c]
[ssh-keyscan.c sshconnect.c]
Switch atomicio to use a simpler interface; it now returns a size_t
(containing number of bytes read/written), and indicates error by
returning 0. EOF is signalled by errno==EPIPE.
Typical use now becomes:
if (atomicio(read, ..., len) != len)
err(1,"read");
ok deraadt@, cloder@, djm@
2005-05-26 12:23:44 +10:00
Damien Miller
02e754f1f0
- avsm@cvs.openbsd.org 2005/05/24 02:05:09
...
[ssh-keygen.c]
some style nits from dmiller@, and use a fatal() instead of a printf()/exit
2005-05-26 12:19:39 +10:00
Damien Miller
3710f278ae
- djm@cvs.openbsd.org 2005/05/23 23:32:46
...
[cipher.c myproposal.h ssh.1 ssh_config.5 sshd_config.5]
add support for draft-harris-ssh-arcfour-fixes-02 improved arcfour modes;
ok markus@
2005-05-26 12:19:17 +10:00
Damien Miller
b089fb5fe1
- avsm@cvs.openbsd.org 2005/05/23 22:44:01
...
[moduli.c ssh-keygen.c]
- removes signed/unsigned comparisons in moduli generation
- use strtonum instead of atoi where its easier
- check some strlcpy overflow and fatal instead of truncate
2005-05-26 12:16:18 +10:00
Damien Miller
dfec2941ac
- jmc@cvs.openbsd.org 2005/05/20 11:23:32
...
[ssh_config.5]
oops - article and spacing;
2005-05-26 12:14:32 +10:00
Damien Miller
ebcfedce85
- djm@cvs.openbsd.org 2005/05/20 10:50:55
...
[ssh_config.5]
give a ProxyCommand example using nc(1), with and ok jmc@
2005-05-26 12:13:56 +10:00
Damien Miller
459735a0c6
- djm@cvs.openbsd.org 2005/05/19 02:42:26
...
[includes.h]
fix cast, from grunk AT pestilenz.org
2005-05-26 12:13:42 +10:00
Damien Miller
06b75ad56b
- djm@cvs.openbsd.org 2005/05/19 02:40:52
...
[sshd_config]
whitespace nit, from grunk AT pestilenz.org
2005-05-26 12:12:37 +10:00
Damien Miller
1594ad5a78
- djm@cvs.openbsd.org 2005/05/19 02:39:55
...
[sshd_config.5]
sort config options, from grunk AT pestilenz.org; ok jmc@
2005-05-26 12:12:19 +10:00
Damien Miller
17b23d8657
- markus@cvs.openbsd.org 2005/05/16 15:30:51
...
[readconf.c servconf.c]
check return value from strdelim() for NULL (AddressFamily); mpech
2005-05-26 12:11:56 +10:00
Damien Miller
538c9b71ec
- djm@cvs.openbsd.org 2005/05/10 10:30:43
...
[ssh.c]
report real errors on fallback from ControlMaster=no to normal connect
2005-05-26 12:11:28 +10:00
Damien Miller
924c25a64e
- djm@cvs.openbsd.org 2005/05/10 10:28:11
...
[ssh.c]
print nice error message for EADDRINUSE as well (ID sync only)
2005-05-26 12:09:32 +10:00
Damien Miller
d2ebd450f0
- markus@cvs.openbsd.org 2005/05/02 21:13:22
...
[readpass.c]
missing {}
2005-05-26 12:07:47 +10:00
Damien Miller
41bfc29ea5
- moritz@cvs.openbsd.org 2005/04/28 10:17:56
...
[progressmeter.c ssh-keyscan.c]
add snprintf checks. ok djm@ markus@
2005-05-26 12:07:32 +10:00
Damien Miller
dadfd4dd38
- jakob@cvs.openbsd.org 2005/04/26 13:08:37
...
[ssh.c ssh_config.5]
fallback gracefully if client cannot connect to ControlPath. ok djm@
2005-05-26 12:07:13 +10:00
Damien Miller
ac7a0059e2
- jmc@cvs.openbsd.org 2005/04/26 12:59:02
...
[sftp-client.h]
spelling correction in comment from wiz@netbsd;
2005-05-26 12:05:49 +10:00
Damien Miller
ddeb75294b
- dtucker@cvs.openbsd.org 2005/04/23 23:43:47
...
[readpass.c]
Add debug message if read_passphrase can't open /dev/tty; bz #471 ;
ok djm@
2005-05-26 12:05:28 +10:00
Damien Miller
ddee575b98
- djm@cvs.openbsd.org 2005/04/21 11:47:19
...
[ssh.c]
don't allocate a pty when -n flag (/dev/null stdin) is set, patch from
ignasi.roca AT fujitsu-siemens.com (bz #829 ); ok dtucker@
2005-05-26 12:05:05 +10:00
Damien Miller
167ea5d026
- djm@cvs.openbsd.org 2005/04/21 06:17:50
...
[ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 ssh_config.5 sshd.8]
[sshd_config.5] OpenSSH doesn't ever look at the $HOME environment
variable, so don't say that we do (bz #623 ); ok deraadt@
2005-05-26 12:04:02 +10:00
Damien Miller
a31c929f36
- jakob@cvs.openbsd.org 2005/04/20 10:05:45
...
[dns.c]
do not try to look up SSHFP for numerical hostname. ok djm@
2005-05-26 12:03:31 +10:00
Damien Miller
3dc967e17b
- jmc@cvs.openbsd.org 2005/04/14 12:30:30
...
[ssh.1]
arg to -b is an address, not if_name;
ok markus@
2005-05-26 12:03:15 +10:00
Damien Miller
5fd38c0ed9
- djm@cvs.openbsd.org 2005/04/09 04:32:54
...
[misc.c misc.h tildexpand.c Makefile.in]
replace tilde_expand_filename with a simpler implementation, ahead of
more whacking; ok deraadt@
2005-05-26 12:02:14 +10:00
Damien Miller
1b0de9a041
- dtucker@cvs.openbsd.org 2005/04/06 12:26:06
...
[ssh.c]
Fix debug call for port forwards; patch from pete at seebeyond.com,
ok djm@ (ID sync only - change already in portable)
2005-05-26 12:01:22 +10:00
Damien Miller
4f1d6b2c11
- djm@cvs.openbsd.org 2005/04/06 09:43:59
...
[sshd.c]
avoid harmless logspam by not performing setsockopt() on non-socket;
ok markus@
2005-05-26 11:59:32 +10:00
Damien Miller
9278ffaf71
- (djm) OpenBSD CVS Sync
...
- otto@cvs.openbsd.org 2005/04/05 13:45:31
[ssh-keygen.c]
2005-05-26 11:59:06 +10:00
Damien Miller
2c04deb888
- (djm) [mpaux.c mpaux.h Makefile.in] Remove old mpaux.[ch] code, it has not
...
been used for a while
2005-05-26 11:35:37 +10:00
Damien Miller
6b6d5be591
- Release 4.1p1
2005-05-26 11:34:36 +10:00
Darren Tucker
ae8c91ec07
- (dtucker) [openbsd-compat/bsd-cygwin_util.c] Ensure sufficient memory
...
allocation when retrieving core Windows environment. Add CYGWIN variable
to propagated variables. Patch from vinschen at redhat.com, ok djm@
2005-05-25 19:42:10 +10:00
Darren Tucker
328118aa79
- (dtucker) [auth-pam.c] Since people don't seem to be getting the message
...
that USE_POSIX_THREADS is unsupported, not recommended and generally a bad
idea, it is now known as UNSUPPORTED_POSIX_THREADS_HACK. Attempting to use
USE_POSIX_THREADS will now generate an error so we don't silently change
behaviour. ok djm@
2005-05-25 16:18:09 +10:00
Damien Miller
4d8f560c39
- (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
...
[contrib/suse/openssh.spec] Update spec file versions to 4.1p1
2005-05-25 14:43:47 +10:00
Damien Miller
df548bc310
- (djm) [openbsd-compat/readpassphrase.c] bz #950 : Retry tcsetattr to ensure
...
terminal modes are reset correctly. Fix from peak AT argo.troja.mff.cuni.cz;
"looks ok" dtucker@
2005-05-24 15:54:27 +10:00
Tim Rice
b58bd0327e
20050512
...
- (tim) [buildpkg.sh.in] missing ${PKG_INSTALL_ROOT} in init script
hard link section. Bug 1038.
2005-05-12 10:32:19 -07:00
Darren Tucker
fa2211d93d
- (dtucker) [contrib/cygwin/ssh-host-config] Add a test and warning for a
...
user-mode mounts in Cygwin installation. Patch from vinschen at redhat.com.
2005-05-09 23:48:17 +10:00
Damien Miller
4f10e25684
- (djm) [ssh.c] some systems return EADDRINUSE on a bind to an already-used
...
unix domain socket, so catch that too; from jakob@ ok dtucker@
2005-05-04 15:33:09 +10:00
Darren Tucker
5b115d4401
- (dtucker) [canohost.c] normalise socket addresses returned by
...
get_remote_hostname(). This means that IPv4 addresses in log messages
on IPv6 enabled machines will no longer be prefixed by "::ffff:" and
AllowUsers, DenyUsers, AllowGroups, DenyGroups will match IPv4-style
addresses only for 4-in-6 mapped connections, regardless of whether
or not the machine is IPv6 enabled. ok djm@
2005-05-03 19:05:32 +10:00
Darren Tucker
149da8577e
typo
2005-04-25 17:03:29 +10:00
Darren Tucker
af342556b9
- (dtucker) [regress/multiplex.sh] Put control socket in /tmp so running
...
"make tests" works even if you'r building on a filesystem that doesn't
support sockets. From deengert at anl.gov, ok djm@
2005-04-25 17:01:26 +10:00
Darren Tucker
bf2b398327
- (dtucker) [regress/multiplex.sh] Remove cleanup call since test-exec.sh
...
will clean up anyway. From tim@
2005-04-25 14:49:48 +10:00
Darren Tucker
faefd2e73d
- (dtucker) [regress/multiplex.sh] Use "kill -0 $pid" to check for the
...
existence of a process since it's more portable. Found by jbasney at
ncsa.uiuc.edu; ok tim@
2005-04-25 14:48:22 +10:00
Darren Tucker
2f0b5c4869
- (dtucker) [INSTALL configure.ac] Make zlib version check test for 1.1.4 or
...
1.2.1.2 or higher. With tim@, ok djm@
2005-04-24 17:52:22 +10:00
Tim Rice
4149ebc0db
- (tim) [config.guess] Add support for OpenServer 6.
2005-04-23 18:17:29 -07:00
Darren Tucker
48554152b9
- (dtucker) [session.c] Bug #1024 : Don't check pam_session_is_open if
...
UseLogin is set as PAM is not used to establish credentials in that
case. Found by Michael Selvesteen, ok djm@
2005-04-21 19:50:55 +10:00
Darren Tucker
8d158c9937
- (dtucker) [INSTALL] Fix s/key text too.
2005-04-19 15:40:51 +10:00
Darren Tucker
ad1e5e286c
- (dtucker) [INSTALL] Put the s/key text and URL back together.
2005-04-19 15:31:49 +10:00
Darren Tucker
d9c88138f7
- (dtucker) [INSTALL] Reference README.privsep for the privilege separation
...
requirements. Pointed out by Bengt Svensson.
2005-04-19 12:21:21 +10:00
Tim Rice
2f97b8b088
- (tim) [configure.ac] UnixWare needs PASSWD_NEEDS_USERNAME
2005-04-11 19:00:18 -07:00
Darren Tucker
0f5eeff23d
- (dtucker) [auth-passwd.c auth-sia.h] Remove duplicate definitions of
...
sys_auth_passwd, pointed out by cmadams at hiwaay.net.
2005-04-05 21:00:47 +10:00
Darren Tucker
00cadb8c35
- (dtucker) [auth-sia.c] Constify sys_auth_passwd, fixes build error on
...
Tru64. Patch from cmadams at hiwaay.net.
2005-04-05 20:58:37 +10:00
Darren Tucker
9d2562cf20
- (dtucker) [configure.ac] Define HAVE_SO_PEERCRED if we have it. ok djm@
2005-04-05 19:22:45 +10:00
Darren Tucker
69152291e7
- (dtucker) [monitor.c] Don't free buffers in audit functions, monitor_read
...
will free as needed. ok tim@ djm@
2005-04-03 12:44:23 +10:00
Damien Miller
4942de5719
- djm@cvs.openbsd.org 2005/04/02 12:41:16
...
[scp.c]
since ssh has xstrdup, use it instead of strdup+test. unbreaks -Werror
build
2005-04-03 10:16:39 +10:00
Damien Miller
3dae15c611
- deraadt@cvs.openbsd.org 2005/03/31 18:39:21
...
[scp.c]
copy argv[] element instead of smashing the one that ps will see; ok otto
2005-04-03 10:16:11 +10:00
Darren Tucker
de0de39082
- (dtucker) [monitor.c] Remaining part of fix for bug #1006 .
2005-03-31 23:52:04 +10:00
Darren Tucker
73ba43798a
- (dtucker) [ssh.c] Prevent null pointer deref in port forwarding debug
...
message on some platforms. Patch from pete at seebeyond.com via djm.
2005-03-31 21:51:54 +10:00
Darren Tucker
f3bb434177
- (dtucker) [auth.h sshd.c openbsd-compat/port-aix.c] Bug #1006 : fix bug in
...
handling of password expiry messages returned by AIX's authentication
routines, originally reported by robvdwal at sara.nl.
2005-03-31 21:39:25 +10:00
Darren Tucker
83d5a9866d
- jmc@cvs.openbsd.org 2005/03/18 17:05:00
...
[sshd_config.5]
typo;
2005-03-31 21:33:50 +10:00
Darren Tucker
1f04ca240d
- markus@cvs.openbsd.org 2005/03/16 21:17:39
...
[version.h]
4.1
2005-03-31 21:31:54 +10:00
Darren Tucker
5ede2ad8a7
- jmc@cvs.openbsd.org 2005/03/16 11:10:38
...
[ssh_config.5]
get the syntax right for {Local,Remote}Forward;
based on a diff from markus;
problem report from ponraj;
ok dtucker@ markus@ deraadt@
2005-03-31 21:31:10 +10:00
Darren Tucker
6e1defdc5a
- (dtucker) [contrib/aix/buildbff.sh] Bug #1005 : Look up only the user we're
...
interested in which is much faster in large (eg LDAP or NIS) environments.
Patch from dleonard at vintela.com.
2005-03-29 23:24:12 +10:00
Darren Tucker
e66519d942
- (dtucker) [configure.ac openbsd-compat/port-aix.h] Prevent redefinitions
...
of setauthdb on AIX 5.3, reported by anders.liljegren at its.uu.se.
2005-03-21 22:46:34 +11:00
Darren Tucker
1df61452ea
- (dtucker) [configure.ac] Make configure error out if the user specifies
...
--with-libedit but the required libs can't be found, rather than silently
ignoring and continuing. ok tim@
2005-03-21 09:58:07 +11:00
Darren Tucker
86a5f8dd0a
- (dtucker) [configure.ac] Prevent configure --with-zlib from adding -Iyes
...
and -Lyes to CFLAGS and LIBS. Pointed out by peter at slagheap.net,
with & ok tim@
2005-03-21 09:55:17 +11:00
Tim Rice
eae17cc80e
- (tim) [configure.ac] remove trailing white space.
2005-03-17 16:52:20 -08:00
Tim Rice
35cc69dcb4
- (tim) [configure.ac] make some configure options a little more error proof.
2005-03-17 16:44:25 -08:00
Tim Rice
8bb561b500
- (tim) [configure.ac] portability changes on test statements. Some shells
...
have problems with -a operator.
2005-03-17 16:23:19 -08:00
Tim Rice
12ee8e241e
- (tim) [configure.ac] Bug 998. Make path for --with-opensc optional.
...
Make --without-opensc work.
2005-03-17 13:37:04 -08:00
Tim Rice
c3939e22fd
- (tim) [contrib/caldera/openssh.spec] links in rc?.d were getting trashed
...
with a rpm -F
2005-03-14 17:24:51 -08:00
Darren Tucker
c53c3a423c
credit patch author
2005-03-14 23:24:43 +11:00
Darren Tucker
11327cc5d7
- markus@cvs.openbsd.org 2005/03/14 11:46:56
...
[buffer.c buffer.h channels.c]
limit input buffer size for channels; bugzilla #896 ; with and ok dtucker@
2005-03-14 23:22:25 +11:00
Darren Tucker
a8f553df53
- dtucker@cvs.openbsd.org 2005/03/14 11:44:42
...
[auth.c]
Populate host for log message for logins denied by AllowUsers and
DenyUsers (bz #999 ); ok markus@
2005-03-14 23:17:27 +11:00
Darren Tucker
da1adbc2cc
- dtucker@cvs.openbsd.org 2005/03/14 10:09:03
...
[ssh-keygen.1]
Correct description of -H (bz #997 ); ok markus@, punctuation jmc@
2005-03-14 23:15:58 +11:00
Darren Tucker
1adc2bd8d7
- jmc@cvs.openbsd.org 2005/03/12 11:55:03
...
[ssh_config.5]
escape `.' at eol to avoid double spacing issues;
2005-03-14 23:14:20 +11:00
Darren Tucker
9f438a9d63
- markus@cvs.openbsd.org 2005/03/11 14:59:06
...
[ssh-keygen.c]
typo, missing \n; mpech
2005-03-14 23:09:18 +11:00
Darren Tucker
90b9e02230
- deraadt@cvs.openbsd.org 2005/03/10 22:40:38
...
[auth-options.c]
spacing
2005-03-14 23:08:50 +11:00
Darren Tucker
47eede77ed
- deraadt@cvs.openbsd.org 2005/03/10 22:01:05
...
[misc.c ssh-keygen.c servconf.c clientloop.c auth-options.c ssh-add.c
monitor.c sftp-client.c bufaux.h hostfile.c ssh.c sshconnect.c channels.c
readconf.c bufaux.c sftp.c]
spacing
2005-03-14 23:08:12 +11:00
Darren Tucker
f899e6a526
20050312
...
- (dtucker) [regress/test-exec.sh] DEBUG can cause problems where debug
output ends up in the client's output, causing regress failures. Found
by Corinna Vinschen.
(got 4.0 branch and HEAD slightly askew, this is to resync)
2005-03-14 23:02:46 +11:00
Darren Tucker
1d55ca748d
- dtucker@cvs.openbsd.org 2005/03/10 10:15:02
...
[readconf.c]
Check listen addresses for null, prevents xfree from dying during
ClearAllForwardings (bz #996 ). From Craig Leres, ok markus@
2005-03-14 22:58:40 +11:00
Darren Tucker
a21380b70e
- (dtucker) [contrib/cygwin/ssh-host-config] Makes the query for the
...
localized name of the local administrators group more reliable. From
vinschen at redhat.com.
2005-03-13 21:20:18 +11:00
Darren Tucker
835903da7b
- (djm) [log.c] Fix dumb syntax error; ok dtucker@
...
(pulled from 4.0 branch).
2005-03-09 20:12:47 +11:00
Damien Miller
aa1dba62b0
- (djm) Release OpenSSH 4.0p1
2005-03-09 11:03:08 +11:00
Damien Miller
6f632bf2aa
- (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
...
[contrib/suse/openssh.spec] Update spec file versions
2005-03-09 11:02:41 +11:00
Damien Miller
aca8626cf7
- djm@cvs.openbsd.org 2005/03/08 23:49:48
...
[version.h]
OpenSSH 4.0
2005-03-09 11:00:42 +11:00
Damien Miller
b096ac4674
- jmc@cvs.openbsd.org 2005/03/07 23:41:54
...
[ssh.1 ssh_config.5]
more macro simplification;
2005-03-09 11:00:05 +11:00
Darren Tucker
50c7db92d6
- (dtucker) [regress/test-exec.sh] Set BIN_SH=xpg4 on OSF1/Digital Unix/Tru64
...
so that regress tests behave. From Chris Adams.
2005-03-09 10:02:55 +11:00
Tim Rice
c390c8dc68
- (tim) [configure.ac] SCO 3.2v4.2 no longer supported. This platform is
...
too old and too broken.
2005-03-07 01:21:37 -08:00
Darren Tucker
4b9ac3319e
- (dtucker) [regress/test-exec.sh] Put SUDO in the right place.
2005-03-07 19:15:06 +11:00
Darren Tucker
5d909f0773
- djm@cvs.openbsd.org 2005/03/04 08:48:46
...
[Makefile envpass.sh]
regress test for SendEnv config parsing bug; ok dtucker@
2005-03-07 18:35:34 +11:00
Darren Tucker
894823ec69
- djm@cvs.openbsd.org 2005/02/27 23:13:36
...
[login-timeout.sh]
avoid nameservice lookups in regress test; ok dtucker@
2005-03-07 18:34:04 +11:00
Darren Tucker
a0f3ba71a0
- dtucker@cvs.openbsd.org 2005/02/27 11:33:30
...
[multiplex.sh test-exec.sh sshd-log-wrapper.sh]
Add optional capability to log output from regress commands; ok markus@
Use with: make TEST_SSH_LOGFILE=/tmp/regress.log
2005-03-07 18:33:02 +11:00
Darren Tucker
b712fccc18
- david@cvs.openbsd.org 2005/01/14 04:21:18
...
[Makefile test-exec.sh]
pass the SUDO make variable to the individual sh tests; ok dtucker@ markus@
2005-03-07 18:27:28 +11:00
Darren Tucker
68f7213a2c
- fgsch@cvs.openbsd.org 2004/12/10 01:31:30
...
[Makefile sftp-glob.sh]
some globbing regress; prompted and ok djm@
2005-03-07 18:25:53 +11:00
Darren Tucker
1c56ef6ac3
- (dtucker) OpenBSD CVS Sync (regress/)
...
- fgsch@cvs.openbsd.org 2004/12/10 01:31:30
[Makefile]
some globbing regress; prompted and ok djm@
2005-03-07 17:36:18 +11:00
Darren Tucker
0d0966934e
- (dtucker) [configure.ac] Disable gettext search when configuring with
...
BSM audit support for the time being. ok djm@
2005-03-07 17:34:45 +11:00
Darren Tucker
2b59a6dad6
- (dtucker) [session.c sshd.c] Bug #125 comment #49 : Send disconnect audit
...
events earlier, prevents mm_request_send errors reported by Matt Goebel.
2005-03-06 22:38:51 +11:00
Darren Tucker
3745e2bb62
- (dtucker) [monitor.c] Bug #125 comment #47 : fix errors returned by monitor
...
when attempting to audit disconnect events. Reported by Phil Dibowitz.
2005-03-06 22:31:35 +11:00
Damien Miller
f8e7accd01
- djm@cvs.openbsd.org 2005/03/04 08:48:06
...
[readconf.c]
fix SendEnv config parsing bug found by Roumen Petrov; ok dtucker@
2005-03-05 11:22:50 +11:00
Damien Miller
b022b23584
- jmc@cvs.openbsd.org 2005/03/02 11:45:01
...
[ssh.1]
missing word;
2005-03-05 11:22:36 +11:00
Damien Miller
7ffa367a93
- (djm) [contrib/cygwin/README] Improve Cygwin build documentation. Patch
...
from vinschen at redhat.com
2005-03-05 11:20:40 +11:00
Tim Rice
f8f3016f9e
- (tim) [regress/agent-ptrace.sh] add another possible gdb error.
2005-03-02 21:49:56 -08:00
Damien Miller
947219e6e6
- djm@cvs.openbsd.org 2005/03/02 02:21:07
...
[ssh.1]
bz#987: mention ForwardX11Trusted in ssh.1,
reported by andrew.benham AT thus.net; ok deraadt@
2005-03-02 13:22:30 +11:00