Commit Graph

882 Commits

Author SHA1 Message Date
Damien Miller 248131ae99 - (djm) Warning fix on entropy.c saved uid stuff. Patch from Mark Miller
<markm@swoon.net>
2001-02-27 09:47:16 +11:00
Damien Miller 5a7613186b - (djm) Move PAM init to after fork for non-Solaris derived PAMs 2001-02-27 09:28:23 +11:00
Damien Miller 767c7fc27c - (djm) fatal() on OpenSSL version mismatch 2001-02-27 09:20:57 +11:00
Ben Lindstrom dd784b2c00 Second Ooops... =) I started with the wrong date. 2001-02-26 22:11:59 +00:00
Damien Miller 255cae0be0 doh 2001-02-27 09:05:38 +11:00
Damien Miller fbd884a80d - (djm) Fix up POSIX saved uid support. Report from Mark Miller
<markm@swoon.net>
 - (djm) Search for -lcrypt on FreeBSD too
2001-02-27 08:39:07 +11:00
Ben Lindstrom 0c100870ac - (bal) sshd.init support for all Redhat release. Patch by Jim Knoble
<jmknoble@jmknoble.cx>
2001-02-26 20:38:53 +00:00
Ben Lindstrom 7603b2d244 - markus@cvs.openbsd.org 2001/02/23 15:37:45
[session.c]
     handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
2001-02-26 20:13:32 +00:00
Ben Lindstrom 10b9bf95c0 - (bal) Applied shutdown() patch for sftp.c by Corinna Vinschen
<vinschen@redhat.com>
2001-02-26 20:04:45 +00:00
Damien Miller bb7c976202 - (djm) Some systems (SCO3, NeXT) have weird saved uid semantics.
Based on patch from Tim Rice <tim@multitalents.net>
2001-02-26 20:49:58 +11:00
Ben Lindstrom 63941f9631 - (bal) Fixed bsd-snprinf.c so it now honors 'BROKEN_SNPRINTF' again. 2001-02-25 23:20:40 +00:00
Ben Lindstrom 416d874094 - (bal) Replace 'unsigned long long' to 'u_int64_t' since not every
platform defines u_int64_t as being that.
2001-02-25 02:02:43 +00:00
Damien Miller 73bb058d0d - (djm) Use %{_libexecdir} rather than hardcoded path in RPM specfile
Patch from Adrian Ho <lexfiend@usa.net>
2001-02-25 09:36:29 +11:00
Ben Lindstrom 8697e08660 - (bal) Missed part of the UNIX sockets patch. Patch by Corinna
Vinschen <vinschen@redhat.com>
 - (bal) Reorder where 'strftime' is detected to resolve linking
   issues on SCO.  Patch by Tim Rice <tim@multitalents.net>
2001-02-24 21:41:10 +00:00
Ben Lindstrom 38e60935bb - (bal) Generalize lack of UNIX sockets since this also effects Cray
not just Cygwin.  Based on patch by Wendy Palm <wendyp@cray.com>
2001-02-24 00:55:04 +00:00
Ben Lindstrom 803f16cbe4 - (bal) Renamed sigaction.[ch] to sigact.[ch]. Causes problems with
some platforms.
2001-02-24 00:24:19 +00:00
Ben Lindstrom 65981156b8 - (bal) pam_stack fix to correctly detect between RH7 and older RHs.
Patch by Pekka Savola <pekkas@netcore.fi>
2001-02-24 00:05:29 +00:00
Ben Lindstrom 4ef92b5844 - (bal) Double -I for OpenSSL on SCO. Patch by Tim Rice
<tim@multitalents.net>
2001-02-23 05:05:53 +00:00
Ben Lindstrom 379f205a16 - (bal) Patch to force OpenSSH rpm to require the same version of OpenSSL
that it was compiled against.  Patch by Pekka Savola <pekkas@netcore.fi>
2001-02-23 04:55:46 +00:00
Ben Lindstrom 008e29189e - (bal) Fix --define rh7 in openssh.spec file. Patch by Steve Tell
<tell@telltronics.org>
2001-02-23 04:45:15 +00:00
Kevin Steves 77aeaaf87f - (stevesk) remove erroneous #ifdef sgi code.
Michael Stone <mstone@cs.loyola.edu>
2001-02-22 21:23:21 +00:00
Ben Lindstrom e68c5670cd - (bal) Added mdoc2man.pl from Mark Roth <roth@feep.net>
- (bal) Removed reference to liblogin from contrib/README.  It was
   integrated into OpenSSH a long while ago.
2001-02-22 06:20:10 +00:00
Ben Lindstrom e1bd29bc9e - (bal) Corrected SCO luid patch by svaughan <svaughan@asterion.com> 2001-02-21 20:00:28 +00:00
Kevin Steves ff793a27b8 - (stevesk) session.c: back out to where we were before:
- (djm) Move PAM session initialisation until after fork in sshd. Patch
      from Nalin Dahyabhai <nalin@redhat.com>
2001-02-21 16:36:51 +00:00
Ben Lindstrom 94bce40720 - (bal) Reverted out of 2001/02/15 patch by djm below because it
breaks Solaris.
        - (djm) Move PAM session setup back to before setuid to user.
          fixes problems on Solaris-drived PAMs.
2001-02-21 05:53:33 +00:00
Ben Lindstrom 5eff0316a8 - (bal) Fixed OpenSSL rework to use $saved_*. Patch by Tim Rice
<tim@multitalents.net>
2001-02-21 02:35:37 +00:00
Ben Lindstrom 866488b340 - (bal) Removed -L/usr/ucblib -R/usr/ucblib for Solaris platform. 2001-02-20 18:22:38 +00:00
Ben Lindstrom a9a29e1bed - deraadt@cvs.openbsd.org 2001/02/19 23:09:05
[sshd.c]
     clarify message to make it not mention "ident"
2001-02-20 01:20:47 +00:00
Ben Lindstrom 4ffaad8c33 - (bal) Fix mixed up params to memmove() from Jan 5th in setenv.c and
getcwd.c.
2001-02-19 19:54:43 +00:00
Damien Miller 7387fdb6b5 - Update versions in RPM spec files
- Release 2.5.1p1
2001-02-19 21:51:49 +11:00
Damien Miller ccdefb600f - (djm) Rework search for OpenSSL location. Skip directories which don't
exist, don't add -L$ssldir/lib if it doesn't exist. Should help SCO
   with its limit of 6 -L options.
2001-02-19 12:56:39 +11:00
Ben Lindstrom d95c09cc83 - (bal) Markus' blessing to rename login.[ch] -> sshlogin.[ch] and
pty.[ch] -> sshpty.[ch]
2001-02-18 19:13:33 +00:00
Damien Miller c32a5b1a15 Forgot to commit Changelog
- (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie
   enable with --with-bsd-auth.
2001-02-18 23:50:38 +11:00
Kevin Steves 4679f5b94f - (stevesk) entropy.c: typo; should be SIGPIPE 2001-02-18 11:34:32 +00:00
Damien Miller 75da9a9e72 - (djm) Update RPM spec files for 2.5.0p1 2001-02-18 15:43:07 +11:00
Damien Miller 877d8ea144 - (djm) SunOS 4.x also needs to define HAVE_BOGUS_SYS_QUEUE_H as it has
a <sys/queue.h> that lacks the TAILQ_* macros. Patch from Todd C.
   Miller <Todd.Miller@courtesan.com>
2001-02-18 15:29:28 +11:00
Damien Miller a1072a8e37 - (djm) Move entropy.c over to mysignal() 2001-02-18 15:28:11 +11:00
Damien Miller 722ccb1492 - (djm) SA_INTERRUPT is the converse of SA_RESTART, apply it only for
SIGALRM.
2001-02-18 15:18:43 +11:00
Kevin Steves 93c17d9eed - (stevesk) scp.c: use mysignal() for updateprogressmeter() handler. 2001-02-18 03:55:16 +00:00
Kevin Steves eff26f275e - (stevesk) misc.c: cpp rework of SA_(INTERRUPT|RESTART) handling. 2001-02-18 03:42:02 +00:00
Damien Miller df28802cdd - (djm) SCO needs librpc for libwrap. Patch from Tim Rice
<tim@multitalents.net>
2001-02-18 13:07:07 +11:00
Damien Miller 0318e2e0fb - (djm) Use SA_INTERRUPT along SA_RESTART if present (equivalent for
SunOS)
2001-02-18 13:04:23 +11:00
Damien Miller 8609332558 - (djm) Doc fixes from Pekka Savola <pekkas@netcore.fi> 2001-02-18 12:58:24 +11:00
Damien Miller 22d5aa7553 - (djm) Swapped tests for no_libsocket and no_libnsl in configure.in.
Patch from Marek Michalkiewicz <marekm@amelek.gda.pl>
2001-02-18 12:49:57 +11:00
Damien Miller 99e924357e - (djm) Use ttyname() to determine name of tty returned by openpty()
rather then risking overflow. Patch from Marek Michalkiewicz
   <marekm@amelek.gda.pl>
2001-02-18 12:49:35 +11:00
Damien Miller b3ffc5f1d4 - (djm) Robustify EGD/PRNGd code in face of socket closures. Patch from
Todd C. Miller <Todd.Miller@courtesan.com>
2001-02-18 12:44:29 +11:00
Damien Miller 0a4e27d583 - (djm) Close listen_sock on bind() failures. Patch from Arkadiusz
Miskiewicz <misiek@pld.ORG.PL>
2001-02-18 12:36:39 +11:00
Damien Miller 2deb3f64f6 - (djm) Fix my breaking of cygwin builds, Patch from Corinna Vinschen
<vinschen@redhat.com> and myself.
2001-02-18 12:30:55 +11:00
Ben Lindstrom 970c009b8e - (Bal) Patch for lack of RA_RESTART in misc.c for mysignal by
stevesk
2001-02-17 16:51:07 +00:00
Ben Lindstrom 6dc75f594d - (bal) Patch for fix FCHMOD reference in ftp-client.c by Tim Rice
<tim@multitalents.net>
2001-02-17 16:47:47 +00:00
Ben Lindstrom 8dcdeb8421 - markus@cvs.openbsd.org 2001/02/16 14:03:43
[session.c]
     proper payload-length check for x11 w/o screen-number
2001-02-16 16:02:14 +00:00
Ben Lindstrom 813f9402ae - markus@cvs.openbsd.org 2001/02/16 13:38:18
[channel.c]
  remove debug
2001-02-16 15:56:31 +00:00
Kevin Steves 799bed85ab - (stevesk) set SA_RESTART flag in mysignal() for SIGCHLD;
needed on Unixware 2.x.
2001-02-16 14:58:12 +00:00
Damien Miller 79438cc030 - (djm) OpenBSD CVS:
- markus@cvs.openbsd.org  2001/02/15 16:19:59
     [channels.c channels.h serverloop.c sshconnect.c sshconnect.h]
     [sshconnect1.c sshconnect2.c]
     genericize password padding function for SSH1 and SSH2.
     add stylized echo to 2, too.
 - (djm) Add roundup() macro to defines.h
2001-02-16 12:34:57 +11:00
Damien Miller 217f567187 - (djm) Set "login ID" on systems with setluid. Only enabled for SCO
OpenServer for now. Based on patch from svaughan <svaughan@asterion.com>
2001-02-16 12:12:41 +11:00
Damien Miller 5dfe976cdf - (djm) USE_PIPES for a few more sysv platforms
- (djm) Cleanup configure.in a little
 - (djm) Ask users to check config.log when we can't find necessary libs
2001-02-16 12:05:39 +11:00
Damien Miller b5e85a5d94 - (djm) Make gnome-ssh-askpass handle multi-line prompts. Patch from
Nalin Dahyabhai <nalin@redhat.com>
 - (djm) BSD license for gnome-ssh-askpass (was X11)
 - (djm) KNF on gnome-ssh-askpass
2001-02-16 11:18:58 +11:00
Damien Miller c547bf1930 - (djm) Mini-configure reorder patch from Tim Rice <tim@multitalents.net>
Fixes linking on SCO.
2001-02-16 10:18:12 +11:00
Ben Lindstrom 5805513b17 - (bal) Added DG/UX case and set that they have a broken IPTOS 2001-02-15 18:34:29 +00:00
Ben Lindstrom 4e5a0aa001 - (bal) added '--with-prce' to allow overriding of system regex when
required (tested by David Dulek <ddulek@fastenal.com>)
2001-02-15 18:16:22 +00:00
Kevin Steves b7f036fd8c - deraadt@cvs.openbsd.org 2001/02/15 01:38:04
[serverloop.c]
     indent
2001-02-15 17:27:15 +00:00
Damien Miller 0921454833 - (djm) Move to Jim's 1.2.0 X11 askpass program 2001-02-15 15:33:17 +11:00
Ben Lindstrom 0a7e354f64 - replaced PATH_MAX in sftp-int.c w/ MAXPATHLEN. 2001-02-15 03:50:49 +00:00
Ben Lindstrom 9d4f2c808c - djm@cvs.openbsd.org 2001/02/14 9:46:03
[sftp-client.c sftp-int.c sftp.1]
    Fix and document 'preserve modes & times' option ('-p' flag in sftp);
    ok markus@
2001-02-15 03:22:45 +00:00
Ben Lindstrom 6690494f21 - stevesk@cvs.openbsd.org 2001/02/12 20:53:33
[sftp-int.c]
    lumask now works with 1 numeric arg; ok markus@, djm@
2001-02-15 03:19:56 +00:00
Ben Lindstrom 5393f9360d - markus@cvs.openbsd.org 2001/02/12 23:26:20
[sshd.c]
    missing memset; from solar@openwall.com
2001-02-15 03:17:13 +00:00
Ben Lindstrom c1ba31fadc - markus@cvs.openssh.org 2001/02/13 22:49:40
[auth1.c auth2.c]
    setproctitle(user) only if getpwnam succeeds
2001-02-15 03:14:11 +00:00
Ben Lindstrom f9452513fc - deraadt@cvs.openbsd.org 2001/02/12 22:56:09
[clientloop.c packet.c ssh-keyscan.c]
     deal with EAGAIN/EINTR selects which were skipped
2001-02-15 03:12:08 +00:00
Ben Lindstrom d8a9021f36 - markus@cvs.openbsd.org 2001/02/12 16:16:23
[auth-passwd.c auth.c auth.h auth1.c auth2.c servconf.c servconf.h
      ssh-keygen.c sshd.8]
     PermitRootLogin={yes,without-password,forced-commands-only,no}
     (before this change, root could login even if PermitRootLogin==no)
2001-02-15 03:08:27 +00:00
Ben Lindstrom 06b33aa0e8 - markus@cvs.openbsd.org 2001/02/11 12:59:25
[Makefile.in sshd.8 sshconnect2.c readconf.h readconf.c packet.c
      sshd.c ssh.c ssh.1 servconf.h servconf.c myproposal.h kex.h kex.c]
     1) clean up the MAC support for SSH-2
     2) allow you to specify the MAC with 'ssh -m'
     3) or the 'MACs' keyword in ssh(d)_config
     4) add hmac-{md5,sha1}-96
             ok stevesk@, provos@
2001-02-15 03:01:59 +00:00
Ben Lindstrom 4272ed803f - markus@cvs.openbsd.org 2001/02/12 12:45:06
[sshconnect1.c]
     fix xmalloc(0), ok dugsong@
2001-02-15 02:36:46 +00:00
Damien Miller 646aa60b41 - (djm) Clean up PAM namespace. Suggested by Darren Moffat
<Darren.Moffat@eng.sun.com>
2001-02-15 11:51:32 +11:00
Damien Miller e8b5b04521 - (djm) Move PAM session setup back to before setuid to user. Fixes
problems on Solaris-derived PAMs.
2001-02-15 11:32:15 +11:00
Kevin Steves 7fafa5ccbe - (stevesk) fix for SIA patch, misplaced session_setup_sia() 2001-02-13 18:45:00 +00:00
Damien Miller 92ddb7d6f0 - (djm) Split out and improve OSF SIA auth code. Patch from Chris Adams
<cmadams@hiwaay.net> with a little modification and KNF.
2001-02-14 01:25:23 +11:00
Ben Lindstrom 116b6bdda8 - (bal) Missing function prototype in bsd-snprintf.c patch by
Mark Miller <markm@swoon.net>
2001-02-13 14:05:59 +00:00
Damien Miller 6b4146ad73 - (djm) Move PAM session initialisation until after fork in sshd. Patch
from Nalin Dahyabhai <nalin@redhat.com>
2001-02-14 00:45:51 +11:00
Damien Miller 3dfeee46d7 - (djm) Don't try to close PAM session or delete credentials if the
session has not been open or credentials not set. Based on patch from
   Andrew Bartlett <abartlet@pcug.org.au>
2001-02-14 00:43:55 +11:00
Kevin Steves bca8c8f3a1 - (stevesk) auth1.c: fix PAM passwordless check. 2001-02-13 11:26:21 +00:00
Ben Lindstrom 34bb0c7431 - (bal) Use chown() if fchown() does not exist in ftp-server.c patch by
Tim Rice <tim@multitalents.net>
2001-02-13 02:40:56 +00:00
Ben Lindstrom 6c92dab9a1 - (bal) Cleaned out bsd-snprintf.c. VARARGS have been banished and
I did a base KNF over the whe whole file to make it more acceptable.
   (backed out of original patch and removed it from ChangeLog)

This has been a long time coming.  If we decide that we need VARARGS support
we should do it at a higher level, since no where else do we support VARARGS
in the code base.
2001-02-13 02:18:50 +00:00
Damien Miller d8ab0d4a85 - (djm) Only test -S potential EGD sockets if they exist and are readable. 2001-02-13 12:11:17 +11:00
Ben Lindstrom 5d8520ab76 - (bal) added NeXT work around for bsd-snprintf.c in bsd-nextstep.h.
- (bal) added TODO item to clean up and sort out 'varargs' from 'stdargs'
2001-02-12 15:57:18 +00:00
Kevin Steves 7f982bf6c9 - (stevesk) session.c: remove debugging code. 2001-02-12 15:07:52 +00:00
Ben Lindstrom 603bdfd602 - (bal) NCR SVR4 compatiblity provide by Don Bragg <thewizarddon@yahoo.com> 2001-02-12 07:29:45 +00:00
Damien Miller 61ce036c4a - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby
<mib@unimelb.edu.au>
2001-02-12 18:02:23 +11:00
Damien Miller f172020510 - (djm) Clean up PCRE text in INSTALL 2001-02-12 11:15:41 +11:00
Damien Miller 070ca31325 - (djm) Update Redhat specfile to allow --define "skip_x11_askpass
--define "skip_gnome_askpass 1", --define "rh7 1" and make the
   implicit rpm-3.0.5 dependancy explicit. Patch and suggestions fro
   Pekka Savola <pekkas@netcore.fi>
2001-02-12 09:34:17 +11:00
Kevin Steves bcc862755d - (stevesk) compat.c: more friendly cpp error 2001-02-11 18:49:23 +00:00
Kevin Steves d85bf4b57e - stevesk@cvs.openbsd.org 2001/02/11 06:15:57
[LICENSE]
     typos and small cleanup; ok deraadt@
2001-02-11 16:43:05 +00:00
Kevin Steves fad3c513f0 - (stevesk) misc.c: ssh.h not needed. 2001-02-11 14:34:10 +00:00
Kevin Steves 432768612c missed sshconnect.c part of:
- itojun@cvs.opebsd.org 2001/02/08 10:47:05
     [sshconnect.c sshconnect1.c sshconnect2.c]
     %.30s is too short for IPv6 numeric address.  use %.128s for now.
     markus ok
2001-02-11 13:56:43 +00:00
Damien Miller bd5817d4ff - (djm) Set PAM_RHOST earlier, patch from Andrew Bartlett
<abartlet@pcug.org.au>
2001-02-11 22:35:11 +11:00
Ben Lindstrom e055716a89 - itojun@cvs.opebsd.org 2001/02/08 10:47:05
[sshconnect1.c sshconnect2.c]
     %.30s is too short for IPv6 numeric address.  use %.128s for now.
     markus ok
2001-02-11 00:00:24 +00:00
Ben Lindstrom e5b3fb351e - (bal) A bit more whitespace cleanup 2001-02-10 23:56:35 +00:00
Ben Lindstrom aa630def4d - 1.47 Thu Feb 8 23:11:42 GMT 2001 by dugsong
[serverloop.c sshconnect1.c]
     mitigate SSH1 traffic analysis - from Solar Designer
     <solar@openwall.com>, ok provos@
2001-02-10 23:44:47 +00:00
Ben Lindstrom a905ecd994 - deraadt 2001/02/07 8:57:26
[xmalloc.c]
     deal with new ANSI malloc stuff
   - markus@cvs.openbsd.org 2001/02/07 16:46:08
     [xmalloc.c]
     typo in fatal()
   - itojun@cvs.openbsd.org 2001/02/07 18:04:50
     [xmalloc.c]
     fix size_t -> int cast (use u_long).  markus ok
2001-02-10 23:34:54 +00:00
Ben Lindstrom 70ea46a382 - (bal) uuencode.c resync w/ OpenBSD tree, plus whitespace. 2001-02-10 23:30:16 +00:00
Ben Lindstrom e9d0444524 - djm@cvs.openbsd.org 2001/02/04 21:26:07
[sshd_config]
     type: ok markus@
   - deraadt@cvs.openbsd.org 2001/02/06 22:07:50
     [sshd_config]
     enable sftp-server by default
2001-02-10 23:26:35 +00:00
Ben Lindstrom b6c06d9303 - markus@cvs.openbsd.org 2001/02/08 22:35:30
[sshconnect.c]
     don't connect if batch_mode is true and stricthostkeychecking set to
    'ask'
2001-02-10 23:21:09 +00:00