Ben Lindstrom
e1c0912cb6
- stevesk@cvs.openbsd.org 2002/06/22 23:09:51
...
[monitor.c]
save auth method before monitor_reset_key_state(); bugzilla bug #284 ;
ok provos@
2002-06-23 00:38:24 +00:00
Ben Lindstrom
57f08005d3
- stevesk@cvs.openbsd.org 2002/06/22 20:05:27
...
[sshd.c]
don't call setsid() if debugging or run from inetd; no "Operation not
permitted" errors now; ok millert@ markus@
2002-06-23 00:37:10 +00:00
Ben Lindstrom
959de99aa0
- stevesk@cvs.openbsd.org 2002/06/22 16:45:29
...
[ssh-agent.1 sshd.8 sshd_config.5]
use process ID vs. pid/PID/process identifier
2002-06-23 00:35:25 +00:00
Ben Lindstrom
c06bf70b41
- stevesk@cvs.openbsd.org 2002/06/22 16:41:57
...
[scp.1]
typo
2002-06-23 00:34:37 +00:00
Ben Lindstrom
2dfacb3d40
- stevesk@cvs.openbsd.org 2002/06/22 16:40:19
...
[sshd.c]
check /var/empty owner mode; ok provos@
2002-06-23 00:33:47 +00:00
Ben Lindstrom
624e3f2065
- stevesk@cvs.openbsd.org 2002/06/22 16:32:54
...
[sshd.8]
add /var/empty in FILES section
2002-06-23 00:32:57 +00:00
Ben Lindstrom
c001cd3577
- naddy@cvs.openbsd.org 2002/06/22 11:51:39
...
[ssh.1]
typo
2002-06-23 00:32:11 +00:00
Ben Lindstrom
bf69e3b95d
- stevesk@cvs.openbsd.org 2002/06/22 02:40:23
...
[ssh.1]
section 5 not 4 for ssh_config
2002-06-23 00:31:24 +00:00
Ben Lindstrom
5590aa5b1f
- OpenBSD CVS Sync
...
- stevesk@cvs.openbsd.org 2002/06/22 02:00:29
[ssh.h]
correct comment
2002-06-23 00:30:30 +00:00
Ben Lindstrom
883844dc07
- (bal) add extern char *getopt. Based on report by dtucker@zip.com.au
2002-06-23 00:20:50 +00:00
Ben Lindstrom
1a1b851775
- (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset.
2002-06-23 00:18:15 +00:00
Kevin Steves
90d5de7670
- (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX.
2002-06-22 18:51:48 +00:00
Ben Lindstrom
ee9ac35fc2
- (bal) getopt now can be staticly compiled on those platforms missing
...
optreset. Patch by binder@arago.de
2002-06-22 00:26:59 +00:00
Damien Miller
f102bf6e50
- (djm) Release 3.3p1
2002-06-22 01:44:45 +10:00
Damien Miller
263d68fc56
- (djm) Update README.privsep; spotted by fries@
2002-06-22 00:45:50 +10:00
Damien Miller
53baddb775
- (djm) contrib/redhat/openssh.spec hacking:
...
- Merge in spec changes from seba@iq.pl (Sebastian Pachuta)
- Add new {ssh,sshd}_config.5 manpages
- Add new ssh-keysign program and remove setuid from ssh client
2002-06-21 16:42:41 +10:00
Damien Miller
4903eb4b74
- (djm) Warn and disable compression on platforms which can't handle both
...
useprivilegeseparation=yes and compression=yes
2002-06-21 16:20:44 +10:00
Damien Miller
444f9fca60
- ID sync for auth-passwd.c
2002-06-21 16:05:12 +10:00
Damien Miller
2d6b83353b
- djm@cvs.openbsd.org 2002/06/21 05:50:51
...
[monitor.c]
Don't initialise compression buffers when compression=no in sshd_config;
ok Niels@
2002-06-21 15:59:49 +10:00
Ben Lindstrom
90ac0b5945
- (bal) Still more Makefile.in updates for ssh{d}_config.5
2002-06-21 01:38:53 +00:00
Ben Lindstrom
900464e454
- (bal) Missed integrating ssh_config.5 and sshd_config.5
2002-06-21 01:24:01 +00:00
Ben Lindstrom
47e1b40c08
- stevesk@cvs.openbsd.org 2002/05/25 20:40:08
...
[LICENCE]
missed Per Allansson (auth2-chall.c)
2002-06-21 01:19:12 +00:00
Ben Lindstrom
1b8d730b7d
- markus@cvs.openbsd.org 2002/06/20 23:37:12
...
[sshd_config]
add Compression
2002-06-21 01:11:36 +00:00
Ben Lindstrom
23e0f667f8
- markus@cvs.openbsd.org 2002/06/20 23:05:56
...
[servconf.c servconf.h session.c sshd.c]
allow Compression=yes/no in sshd_config
2002-06-21 01:09:47 +00:00
Ben Lindstrom
9721e92ba8
- stevesk@cvs.openbsd.org 2002/06/20 20:03:34
...
[ssh_config sshd_config]
refer to config file man page
2002-06-21 01:06:03 +00:00
Ben Lindstrom
ba8e0dd7a0
tevesk@cvs.openbsd.org 2002/06/20 20:00:05
...
[scp.1 sftp.1]
ssh_config(5)
2002-06-21 01:00:40 +00:00
Ben Lindstrom
9f04903c50
- stevesk@cvs.openbsd.org 2002/06/20 19:56:07
...
[ssh.1 sshd.8]
move configuration file options from ssh.1/sshd.8 to
ssh_config.5/sshd_config.5; ok deraadt@ millert@
2002-06-21 00:59:05 +00:00
Ben Lindstrom
402c6cc681
- markus@cvs.openbsd.org 2002/06/19 18:01:00
...
[cipher.c monitor.c monitor_wrap.c packet.c packet.h]
make the monitor sync the transfer ssh1 session key;
transfer keycontext only for RC4 (this is still depends on EVP
implementation details and is broken).
2002-06-21 00:43:42 +00:00
Ben Lindstrom
cb72e4f6d2
- deraadt@cvs.openbsd.org 2002/06/19 00:27:55
...
[auth-bsdauth.c auth-skey.c auth1.c auth2-chall.c auth2-none.c authfd.c
authfd.h monitor_wrap.c msg.c nchan.c radix.c readconf.c scp.c sftp.1
ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c
ssh-keysign.c ssh.1 sshconnect.c sshconnect.h sshconnect2.c ttymodes.c
xmalloc.h]
KNF done automatically while reading....
2002-06-21 00:41:51 +00:00
Ben Lindstrom
115422f918
- (bal) Cygwin special handling of empty passwords wrong. Patch by
...
vinschen@redhat.com
2002-06-21 00:26:22 +00:00
Ben Lindstrom
45933dd9aa
- deraadt@cvs.openbsd.org 2002/06/17 06:05:56
...
[scp.c]
make usage like man page
2002-06-21 00:10:58 +00:00
Ben Lindstrom
61c183bea3
- itojun@cvs.openbsd.org 2002/06/16 21:30:58
...
[ssh-keyscan.c]
use TAILQ_xx macro. from lukem@netbsd. markus ok
2002-06-21 00:09:54 +00:00
Ben Lindstrom
2b266b7f08
- markus@cvs.openbsd.org 2002/06/15 01:27:48
...
[authfd.c authfd.h ssh-add.c ssh-agent.c]
remove the CONSTRAIN_IDENTITY messages and introduce a new
ADD_ID message with contraints instead. contraints can be
only added together with the private key.
2002-06-21 00:08:39 +00:00
Ben Lindstrom
c90f8a98ea
- markus@cvs.openbsd.org 2002/06/15 00:07:38
...
[authfd.c authfd.h ssh-add.c ssh-agent.c]
fix stupid typo
2002-06-21 00:06:54 +00:00
Ben Lindstrom
4eb4c4e1ef
- markus@cvs.openbsd.org 2002/06/15 00:01:36
...
[authfd.c authfd.h ssh-add.c ssh-agent.c]
break agent key lifetime protocol and allow other contraints for key
usage.
2002-06-21 00:04:48 +00:00
Ben Lindstrom
f0bfa839bd
- (bal) Fixed AIX environment handling, use setpcred() instead of existing
...
code. (Bugzilla Bug 261)
2002-06-21 00:01:18 +00:00
Ben Lindstrom
3c73dfe55e
- todd@cvs.openbsd.org 2002/06/14 21:35:00
...
[monitor_wrap.c]
spelling; from Brian Poole <raj@cerias.purdue.edu>
2002-06-20 23:53:53 +00:00
Ben Lindstrom
0e23ebcc8b
- (bal) typo of setgroup for cygwin. Patch by vinschen@redhat.com
2002-06-13 21:34:57 +00:00
Ben Lindstrom
b7ae94dd0b
- (bal) Some platforms don't have ONLCR (Notable Mint)
2002-06-12 17:32:30 +00:00
Ben Lindstrom
837461bf9a
- (bal) Build noop setgroups() for cygwin to clean up code (For other
...
platforms without the setgroups() requirement, you MUST define
SETGROUPS_NOOP in the configure.ac) Based on patch by vinschen@redhat.com
2002-06-12 16:57:14 +00:00
Ben Lindstrom
da394cae04
- markus@cvs.openbsd.org 2002/06/12 01:09:52
...
[ssh.c]
ssh_connect returns 0 on success
2002-06-12 16:11:12 +00:00
Ben Lindstrom
2415757253
- markus@cvs.openbsd.org 2002/06/11 23:03:54
...
[ssh.c]
remove unused cruft.
2002-06-12 16:09:39 +00:00
Ben Lindstrom
1aa6427c0f
- (bal) Cygwin fix up from swap uid clean up in ssh.c patch by
...
vinschen@redhat.com
2002-06-11 20:28:05 +00:00
Ben Lindstrom
9a17c9a568
- itojun@cvs.openbsd.org 2002/06/11 08:11:45
...
[canohost.c]
use "ntop" only after initialized
2002-06-11 16:47:22 +00:00
Ben Lindstrom
ce0f634270
- mpech@cvs.openbsd.org 2002/06/11 05:46:20
...
[auth-krb4.c monitor.h serverloop.c session.c ssh-agent.c sshd.c]
pid_t cleanup. Markus need this now to keep hacking.
markus@, millert@ ok
2002-06-11 16:42:49 +00:00
Ben Lindstrom
f9c4884c8e
- markus@cvs.openbsd.org 2002/06/11 04:14:26
...
[ssh.c sshconnect.c sshconnect.h]
no longer use uidswap.[ch] from the ssh client
run less code with euid==0 if ssh is installed setuid root
just switch the euid, don't switch the complete set of groups
(this is only needed by sshd). ok provos@
2002-06-11 16:37:51 +00:00
Ben Lindstrom
8bb6f36c8f
- markus@cvs.openbsd.org 2002/06/10 22:28:41
...
[channels.c channels.h session.c]
move creation of agent socket to session.c; no need for uidswapping
in channel.c.
2002-06-11 15:59:02 +00:00
Ben Lindstrom
914d03758b
- stevesk@cvs.openbsd.org 2002/06/10 21:21:10
...
[ssh_config]
update defaults for RhostsRSAAuthentication and RhostsAuthentication
here too (all options commented out with default value).
2002-06-11 15:55:01 +00:00
Ben Lindstrom
2bf8276393
- stevesk@cvs.openbsd.org 2002/06/10 17:45:20
...
[readconf.c ssh.1]
change RhostsRSAAuthentication and RhostsAuthentication default to no
since ssh is no longer setuid root by default; ok markus@
2002-06-11 15:53:05 +00:00
Ben Lindstrom
1775c9c97a
- stevesk@cvs.openbsd.org 2002/06/10 17:36:23
...
[ssh-add.1 ssh-add.c]
use convtime() to parse and validate key lifetime. can now
use '-t 2h' etc. ok markus@ provos@
2002-06-11 15:51:54 +00:00
Ben Lindstrom
11d470de34
- stevesk@cvs.openbsd.org 2002/06/10 16:56:30
...
[ssh-keysign.8]
merge in stuff from my man page; ok markus@
2002-06-11 15:50:13 +00:00
Ben Lindstrom
2779d28a0f
- stevesk@cvs.openbsd.org 2002/06/10 16:53:06
...
[auth-rsa.c ssh-rsa.c]
display minimum RSA modulus in error(); ok markus@
2002-06-11 15:47:42 +00:00
Ben Lindstrom
18a32a7efa
- itojun@cvs.openbsd.org 2002/06/09 22:17:21
...
[sshconnect.c]
pass salen to sockaddr_ntop so that we are happy on linux/solaris
2002-06-11 15:46:34 +00:00
Ben Lindstrom
5cac423871
- stevesk@cvs.openbsd.org 2002/06/09 22:15:15
...
[ssh.1]
update for no setuid root and ssh-keysign; ok deraadt@
2002-06-11 15:45:02 +00:00
Ben Lindstrom
494709decb
- (bal) ssh-agent.c RCSD fix (|unexpand already done)
2002-06-11 15:42:53 +00:00
Ben Lindstrom
05efee1092
- (bal) RCSID tag updates on channels.c, clientloop.c, nchan.c,
...
sftp-client.c, ssh-agenet.c, ssh-keygen.c and connect.h (we did unexpand
independant of them)
2002-06-09 20:20:58 +00:00
Ben Lindstrom
2749e1c8f5
- markus@cvs.openbsd.org 2002/06/09 04:33:27
...
[sshconnect.c]
abort() - > fatal()
2002-06-09 20:16:22 +00:00
Ben Lindstrom
159ac2e8cd
- itojun@cvs.openbsd.org 2002/06/08 21:15:27
...
[sshconnect.c]
always use getnameinfo. (diag message only)
2002-06-09 20:14:54 +00:00
Ben Lindstrom
2e17b08e48
- markus@cvs.openbsd.org 2002/06/08 12:46:14
...
[readconf.c]
silently ignore deprecated options, since FallBackToRsh might be passed
by remote scp commands.
2002-06-09 20:13:27 +00:00
Ben Lindstrom
af0c6d6a8c
- markus@cvs.openbsd.org 2002/06/08 12:36:53
...
[scp.c]
remove FallBackToRsh
2002-06-09 20:06:29 +00:00
Ben Lindstrom
7a7483d72e
- markus@cvs.openbsd.org 2002/06/08 05:41:18
...
[ssh_config]
remove FallBackToRsh/UseRsh
2002-06-09 20:05:35 +00:00
Ben Lindstrom
1c2bafebb3
- markus@cvs.openbsd.org 2002/06/08 05:40:01
...
[readconf.c]
just warn about Deprecated options for now
2002-06-09 20:04:50 +00:00
Ben Lindstrom
4daea86fd4
- markus@cvs.openbsd.org 2002/06/08 05:17:01
...
[readconf.c readconf.h ssh.1 ssh.c]
deprecate FallBackToRsh and UseRsh; patch from djm@
2002-06-09 20:04:02 +00:00
Ben Lindstrom
a20715788d
- markus@cvs.openbsd.org 2002/06/08 05:07:09
...
[ssh-keysign.c]
only accept 20 byte session ids
2002-06-09 20:01:48 +00:00
Ben Lindstrom
ece420413b
- markus@cvs.openbsd.org 2002/06/08 05:07:56
...
[ssh.c]
nuke ptrace comment
2002-06-09 20:00:09 +00:00
Ben Lindstrom
2ab1968da2
- (bal) Removed --{enable/disable}-suid-ssh
...
this was mistakenly commited with the __progname fix to ssh-keysign.
2002-06-07 16:49:11 +00:00
Ben Lindstrom
378a417389
- (bal) use 'LOGIN_PROGRAM' not '/usr/bin/login' in session.c patch by
...
Bertrand.Velle@apogee-com.fr
2002-06-07 14:49:56 +00:00
Ben Lindstrom
3545352dc4
- (bal) Missed __progname in ssh-keysign.c patch by dtucker@zip.com.au
2002-06-07 14:37:00 +00:00
Ben Lindstrom
03bab2861e
- (bal) Reverse logic, use __func__ first since it's C99
2002-06-07 03:19:35 +00:00
Ben Lindstrom
db41d2390c
- (bal) ssh-keysign should build and install correctly now. Phase two
...
would be to clean out any dead wood and disable ssh setuid on install.
2002-06-07 03:11:38 +00:00
Ben Lindstrom
b85ab30a6e
- (bal) Refixed auth2.c. It was never fully commited while spliting out
...
authentication to different files.
2002-06-07 02:05:25 +00:00
Ben Lindstrom
4eeccc79f6
- (bal) monitor_mm.c typos.
2002-06-07 01:57:25 +00:00
Ben Lindstrom
88d26ed408
- (bal) Forgot to add msg.c Makefile.in.
2002-06-07 01:53:59 +00:00
Ben Lindstrom
a93f12f396
- (bal) Missed msg.[ch] in merge. Required for ssh-keysign.
2002-06-07 01:51:06 +00:00
Ben Lindstrom
937df1d630
- markus@cvs.openbsd.org 2002/06/06 17:30:11
...
[sftp-server.c]
use get_int() macro (hide iqueue)
2002-06-06 21:58:35 +00:00
Ben Lindstrom
2c14047ada
- markus@cvs.openbsd.org 2002/06/06 17:12:44
...
[sftp-server.c]
discard remaining bytes of current request; ok provos@
2002-06-06 21:57:54 +00:00
Ben Lindstrom
d9d6ab6372
- stevesk@cvs.openbsd.org 2002/06/06 01:09:41
...
[monitor.h]
no trailing comma in enum; china@thewrittenword.com
2002-06-06 21:57:01 +00:00
Ben Lindstrom
61d328acf9
- markus@cvs.openbsd.org 2002/06/05 21:55:44
...
[authfd.c authfd.h ssh-add.1 ssh-add.c ssh-agent.c]
ssh-add -t life, Set lifetime (in seconds) when adding identities;
ok provos@
2002-06-06 21:54:57 +00:00
Ben Lindstrom
163f3b8f6b
- markus@cvs.openbsd.org 2002/06/05 20:56:39
...
[ssh-add.c]
add -x/-X to usage
2002-06-06 21:53:11 +00:00
Ben Lindstrom
2f71704b42
- markus@cvs.openbsd.org 2002/06/05 19:57:12
...
[authfd.c authfd.h ssh-add.1 ssh-add.c ssh-agent.c]
ssh-add -x for lock and -X for unlocking the agent.
todo: encrypt private keys with locked...
2002-06-06 21:52:03 +00:00
Ben Lindstrom
21d1ed8303
- markus@cvs.openbsd.org 2002/06/05 16:48:54
...
[ssh-agent.c]
copy current request into an extra buffer and just flush this
request on errors, ok provos@
2002-06-06 21:48:57 +00:00
Ben Lindstrom
b7788f3ebe
- markus@cvs.openbsd.org 2002/06/05 16:08:07
...
[ssh-agent.1 ssh-agent.c]
'-a bind_address' binds the agent to user-specified unix-domain
socket instead of /tmp/ssh-XXXXXXXX/agent.<pid>; ok djm@ (some time ago).
2002-06-06 21:46:08 +00:00
Ben Lindstrom
22fa01cdea
- markus@cvs.openbsd.org 2002/06/05 16:08:07
...
[ssh-agent.1 ssh-agent.c]
'-a bind_address' binds the agent to user-specified unix-domain
socket instead of /tmp/ssh-XXXXXXXX/agent.<pid>; ok djm@ (some time ago).
2002-06-06 21:46:07 +00:00
Ben Lindstrom
7d9c38f37a
- markus@cvs.openbsd.org 2002/06/04 23:05:49
...
[cipher.c monitor.c monitor_fdpass.c monitor_mm.c monitor_wrap.c]
__FUNCTION__ -> __func__
NOTE: This includes all portable references also.
2002-06-06 21:40:51 +00:00
Ben Lindstrom
3dca4f55f2
- markus@cvs.openbsd.org 2002/06/04 23:02:06
...
[packet.c]
remove __FUNCTION__
2002-06-06 20:59:25 +00:00
Ben Lindstrom
f67e07711f
- markus@cvs.openbsd.org 2002/06/04 19:53:40
...
[monitor.c]
save the session id (hash) for ssh2 (it will be passed with the
initial sign request) and verify that this value is used during
authentication; ok provos@
2002-06-06 20:58:19 +00:00
Ben Lindstrom
dcf6bfbfbd
- markus@cvs.openbsd.org 2002/06/04 19:42:35
...
[monitor.c]
only allow enabled authentication methods; ok provos@
2002-06-06 20:57:17 +00:00
Ben Lindstrom
2e14bc71e6
- deraadt@cvs.openbsd.org 2002/06/03 12:04:07
...
[ssh.h]
compatiblity -> compatibility
decriptor -> descriptor
authentciated -> authenticated
transmition -> transmission
2002-06-06 20:56:07 +00:00
Ben Lindstrom
ceae9d1c33
- markus@cvs.openbsd.org 2002/05/31 13:20:50
...
[ssh-rsa.c]
pad received signature with leading zeros, because RSA_verify expects
a signature of RSA_size. the drafts says the signature is transmitted
unpadded (e.g. putty does not pad), reported by anakin@pobox.com
2002-06-06 20:55:04 +00:00
Ben Lindstrom
01fff0c9d4
- markus@cvs.openbsd.org 2002/05/31 13:16:48
...
[key.c]
add comment:
key_verify returns 1 for a correct signature, 0 for an incorrect signature
and -1 on error.
2002-06-06 20:54:07 +00:00
Ben Lindstrom
511bb24c5b
- markus@cvs.openbsd.org 2002/05/31 11:35:15
...
[auth.h auth2.c]
move Authmethod definitons to per-method file.
NOTE: The rest of this patch is with the import of the auth2-*.c files.
2002-06-06 20:52:37 +00:00
Ben Lindstrom
cec2ea8d02
- markus@cvs.openbsd.org 2002/05/31 10:30:33
...
[sshconnect2.c]
extent ssh-keysign protocol:
pass # of socket-fd to ssh-keysign, keysign verfies locally used
ip-address using this socket-fd, restricts fake local hostnames
to actual local hostnames; ok stevesk@
2002-06-06 20:51:04 +00:00
Ben Lindstrom
f088f4374a
- markus@cvs.openbsd.org 2002/05/30 08:07:31
...
[cipher.c]
use rijndael/aes from libcrypto (openssl >= 0.9.7) instead of
our own implementation. allow use of AES hardware via libcrypto,
ok deraadt@
2002-06-06 20:50:07 +00:00
Ben Lindstrom
a26ea63f8a
- markus@cvs.openbsd.org 2002/05/29 11:21:57
...
[sshd.c]
don't start if privsep is enabled and SSH_PRIVSEP_USER or
_PATH_PRIVSEP_CHROOT_DIR are missing; ok deraadt@
2002-06-06 20:46:25 +00:00
Ben Lindstrom
20abb75f53
- stevesk@cvs.openbsd.org 2002/05/29 03:06:30
...
[ssh.1 sshd.8]
spelling
2002-06-06 20:45:33 +00:00
Ben Lindstrom
10d9936413
- stevesk@cvs.openbsd.org 2002/05/28 21:24:00
...
[uidswap.c]
use correct function name in fatal()
[See the patch above, I saw it before apply the next patch. <sigh>]
2002-06-06 20:44:06 +00:00
Ben Lindstrom
ca8943e6de
- (bal) Corrected debug() in uidswap.c to match upstream.
2002-06-06 20:42:04 +00:00
Ben Lindstrom
abff1dd050
- stevesk@cvs.openbsd.org 2002/05/28 17:28:02
...
[uidswap.c]
format spec change/casts and some KNF; ok markus@
2002-06-06 20:38:49 +00:00
Ben Lindstrom
105ccbe192
- stevesk@cvs.openbsd.org 2002/05/28 16:45:27
...
[monitor_mm.c]
print strerror(errno) on mmap/munmap error; ok markus@
2002-06-06 20:33:06 +00:00
Ben Lindstrom
033a49c7cc
- stevesk@cvs.openbsd.org 2002/05/26 20:35:10
...
[ssh.1]
sort ChallengeResponseAuthentication; ok markus@
2002-06-06 20:30:28 +00:00
Ben Lindstrom
855bf3ac3c
- markus@cvs.openbsd.org 2002/05/25 18:51:07
...
[auth.h auth2.c auth2-hostbased.c auth2-kbdint.c auth2-none.c
auth2-passwd.c auth2-pubkey.c Makefile.in]
split auth2.c into one file per method; ok provos@/deraadt@
NOTE: Merged back noticable cygwin and pam stuff. May need review to
ensure I did not miss anything.
2002-06-06 20:27:55 +00:00
Ben Lindstrom
4887da222b
- markus@cvs.openbsd.org 2002/05/25 08:50:39
...
[sshconnect2.c]
execlp->execl; from stevesk
2002-06-06 20:05:57 +00:00
Ben Lindstrom
5206b951c6
- markus@cvs.openbsd.org 2002/05/24 08:45:14
...
[sshconnect2.c]
stat ssh-keysign first, print error if stat fails;
some debug->error; fix comment
2002-06-06 19:59:29 +00:00
Ben Lindstrom
9e5bb579f9
- markus@cvs.openbsd.org 2002/05/23 19:39:34
...
[ssh.c]
add comment about ssh-keysign
2002-06-06 19:58:27 +00:00
Ben Lindstrom
1bad256822
- markus@cvs.openbsd.org 2002/05/23 19:24:30
...
[authfile.c authfile.h pathnames.h ssh.c sshconnect.c sshconnect.h
sshconnect1.c sshconnect2.c ssh-keysign.8 ssh-keysign.c Makefile.in]
add /usr/libexec/ssh-keysign: a setuid helper program for hostbased
authentication in protocol v2 (needs to access the hostkeys).
Note: Makefile.in untested. Will test after merge is finished.
2002-06-06 19:57:33 +00:00
Ben Lindstrom
f666fec2d5
- deraadt@cvs.openbsd.org 2002/05/22 23:18:25
...
[ssh.c sshd.c]
spelling; abishoff@arc.nasa.gov
2002-06-06 19:51:58 +00:00
Ben Lindstrom
38ed63d759
- deraadt@cvs.openbsd.org 2002/05/19 20:54:52
...
[log.h]
extra commas in enum not 100% portable
2002-06-06 19:51:06 +00:00
Ben Lindstrom
fac7769f64
- stevesk@cvs.openbsd.org 2002/05/16 22:09:59
...
[session.c ssh.c]
don't limit xauth pathlen on client side and longer print length on
server when debug; ok markus@
2002-06-06 19:49:54 +00:00
Ben Lindstrom
6a24641365
- markus@cvs.openbsd.org 2002/05/16 22:02:50
...
[cipher.c kex.h mac.c]
fix warnings (openssl 0.9.7 requires const)
2002-06-06 19:48:16 +00:00
Ben Lindstrom
fb62a69488
- markus@cvs.openbsd.org 2002/05/15 21:56:38
...
[servconf.c sshd.8 sshd_config]
re-enable privsep and disable setuid for post-3.2.2
2002-06-06 19:47:11 +00:00
Kevin Steves
df75dd21f5
- (stevesk) [channels.c] bug #164 patch from YOSHIFUJI Hideaki (changed
...
setsockopt from debug to error for now).
2002-06-04 20:52:19 +00:00
Tim Rice
28bbb0c458
[configure.ac.orig monitor_fdpass.c] Enahnce msghdr tests to address
...
build problem on Irix reported by Dave Love <d.love@dl.ac.uk>. Back out
last monitor_fdpass.c changes that are no longer needed with new tests.
Patch tested on Irix by Jan-Frode Myklebust <janfrode@parallab.uib.no>
2002-05-27 17:37:32 -07:00
Damien Miller
8ce8296fd0
sync scard/
2002-05-22 14:24:01 +10:00
Damien Miller
23dc10ddac
crank rpm spec versions
2002-05-22 14:14:54 +10:00
Damien Miller
667fb25f47
Crank version
...
(also missed changelog message)
2002-05-22 14:14:00 +10:00
Damien Miller
74cc5bb851
fix spelling mistakes spotted by Solar Designer <solar@openwall.com>
2002-05-22 11:02:15 +10:00
Kevin Steves
bc5bb55755
- (stevesk) [sshd.c] #ifndef HAVE_CYGWIN for setgroups()
2002-05-21 17:59:13 +00:00
Kevin Steves
c5041acef3
- (stevesk) [sshd.c] bug 245; disable setsid() for now
2002-05-21 17:50:21 +00:00
Tim Rice
9de793cc6c
[configure.ac] remove extra MD5_MSG="no" line.
2002-05-17 08:59:22 -07:00
Ben Lindstrom
4e67d38a7e
- (bal) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2002/05/15 21:05:29
[version.h]
enter OpenSSH_3.2.2
- (bal) Caldara, Suse, and Redhat openssh.specs updated.
2002-05-15 21:50:14 +00:00
Ben Lindstrom
c5c15dde32
- markus@cvs.openbsd.org 2002/05/15 21:02:53
...
[servconf.c sshd.8 sshd_config]
disable privsep and enable setuid for the 3.2.2 release
2002-05-15 21:37:34 +00:00
Ben Lindstrom
c57bbf158d
- millert@cvs.openbsd.org 2002/05/06 23:34:33
...
[ssh.1 sshd.8]
Kill/adjust r(login|exec)d? references now that those are no longer in
the tree.
2002-05-15 21:36:45 +00:00
Ben Lindstrom
bb2ce36d4d
- deraadt@cvs.openbsd.org 2002/05/04 02:39:35
...
[servconf.c sshd.8 sshd_config]
enable privsep by default; provos ok
(historical)
2002-05-15 21:35:43 +00:00
Ben Lindstrom
2b70e5603f
- (bal) Clarified openbsd-compat/*-cray.* Licence provided by Wendy.
2002-05-15 16:39:51 +00:00
Ben Lindstrom
7339b2a278
- mouring@cvs.openbsd.org 2002/05/15 15:47:49
...
[kex.c monitor.c monitor_wrap.c sshd.c]
'monitor' variable clashes with at least one lame platform (NeXT). i
Renamed to 'pmonitor'. provos@
- (bal) Fixed up PAM case. I think.
2002-05-15 16:25:01 +00:00
Ben Lindstrom
bdde330d2f
- markus@cvs.openbsd.org 2002/05/13 21:26:49
...
[auth-rhosts.c]
handle debug messages during rhosts-rsa and hostbased authentication;
ok provos@
2002-05-15 16:19:37 +00:00
Ben Lindstrom
17401b6b77
- millert@cvs.openbsd.org 2002/05/13 15:53:19
...
[sshd.c]
Call setsid() in the child after sshd accepts the connection and forks.
This is needed for privsep which calls setlogin() when it changes uids.
Without this, there is a race where the login name of an existing
connection, as returned by getlogin(), may be changed to the privsep
user (sshd). markus@ OK
2002-05-15 16:17:56 +00:00
Ben Lindstrom
a574cda45b
- markus@cvs.openbsd.org 2002/05/13 20:44:58
...
[auth-options.c auth.c auth.h]
move the packet_send_debug handling from auth-options.c to auth.c;
ok provos@
2002-05-15 16:16:14 +00:00
Ben Lindstrom
58d4dafeb1
- itojun@cvs.openbsd.org 2002/05/13 02:37:39
...
[auth-skey.c auth2.c]
less warnings. skey_{respond,query} are public (in auth.h)
2002-05-15 16:14:36 +00:00
Ben Lindstrom
966bfdae6b
- stevesk@cvs.openbsd.org 2002/05/11 20:24:48
...
[ssh.h]
typo in comment
2002-05-15 16:09:57 +00:00
Ben Lindstrom
973be0083b
- deraadt@cvs.openbsd.org 2002/05/08 21:06:34
...
[ssh.h]
move to sshd.sshd instead
2002-05-15 16:08:48 +00:00
Ben Lindstrom
1650ba3f57
- deraadt@cvs.openbsd.org 2002/05/07 19:54:36
...
[ssh.h]
use ssh uid
2002-05-15 16:07:11 +00:00
Ben Lindstrom
beecf74e2b
- (bal) CVS ID fix up on auth-passwd.c
2002-05-15 15:59:17 +00:00
Damien Miller
860e929fa2
wrap
2002-05-15 10:12:29 +10:00
Damien Miller
ee5e3b2d8a
wrap
2002-05-15 10:08:17 +10:00
Tim Rice
8dd6febf73
update version.
2002-05-14 09:03:46 -07:00
Tim Rice
fd6fd24a71
remove reference to UnixWare 7 and OpenUNIX 8
...
from PAM-enabled pragraph. UnixWare has no PAM.
2002-05-13 20:50:38 -07:00
Tim Rice
1e28c9e6ba
20020514
...
[sshpty.c] set tty modes when allocating old style bsd ptys to
match what newer style ptys have when allocated. Based on a patch by
Roger Cornelius <rac@tenzing.org>
[README.privsep] UnixWare 7 and OpenUNIX 8 work.
2002-05-13 17:07:18 -07:00
Kevin Steves
f8defa2327
- (stevesk) [README.privsep] PAM+privsep works with Solaris 8.
2002-05-13 23:31:09 +00:00
Damien Miller
05720356d6
- (djm) Add INSTALL warning about SSH protocol 1 blowfish w/ OpenSSL < 0.9.6
2002-05-13 15:22:21 +10:00
Damien Miller
f71d2a5d44
- (djm) Bug #234 : missing readpassphrase declaration and defines
2002-05-13 15:14:08 +10:00
Kevin Steves
0228155f06
- (stevesk) add initial README.privsep
2002-05-13 03:57:04 +00:00
Kevin Steves
c81e12976e
- (stevesk) [configure.ac] nicer message: --with-privsep-user=user
2002-05-13 03:51:40 +00:00
Damien Miller
b7cb96934e
- (djm) Update RPM spec file: different superuser path, use
...
/var/empty/sshd for privsep
2002-05-13 13:26:57 +10:00
Damien Miller
f58c672f0e
- (djm) Add --with-privsep-path configure option
2002-05-13 13:15:42 +10:00
Damien Miller
5ad9fd9820
- (djm) Bug #231 : UsePrivilegeSeparation turns off Banner.
2002-05-13 11:07:41 +10:00
Damien Miller
a18bbd398e
- (djm) Add --with-superuser-path=xxx configure option to specify what $PATH
...
the superuser receives.
2002-05-13 10:48:57 +10:00
Tim Rice
802b956868
fix for systems that have both HAVE_ACCRIGHTS_IN_MSGHDR and
...
HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h has #define msg_accrights msg_control
2002-05-11 15:30:04 -07:00
Tim Rice
aef7371fe4
applied a rework of djm's OpenSSL search cleanup patch.
...
Now only searches system and /usr/local/ssl (OpenSSL's default install path)
Others must use --with-ssl-dir=....
2002-05-11 13:17:42 -07:00
Kevin Steves
f98fb721a0
- (stevesk) [auth.c] Shadow account and expiration cleanup. Now
...
check for root forced expire. Still don't check for inactive.
2002-05-10 15:48:52 +00:00
Ben Lindstrom
0b47814b43
- (bal) Back all the way out of auth-passwd.c changes. Breaks too many
...
things that don't set pw->pw_passwd.
2002-05-10 02:40:15 +00:00
Damien Miller
87aea25f1a
- (djm) Try to drop supplemental groups at daemon startup. Patch from
...
RedHat
2002-05-10 12:20:24 +10:00
Damien Miller
cfe4a89eef
- (djm) Rework RedHat RPM files. Based on spec from Nalin
...
Dahyabhai <nalin@redhat.com> and patches from
Pekka Savola <pekkas@netcore.fi>
2002-05-10 12:19:23 +10:00
Tim Rice
a7a5d6d1b5
Unbreak make -f Makefile.in distprep
2002-05-09 07:05:59 -07:00
Damien Miller
ffc868ff83
- (djm) Disable PAM kbd-int auth if privsep is turned on (it doesn't work)
2002-05-09 15:59:13 +10:00
Tim Rice
0502a471e0
set SHELL in Makefile in case someone makes from a non bourne compatable shell
2002-05-08 16:04:14 -07:00
Tim Rice
63cf84199d
fix logic on when seed_rng() is called.
...
Report by Chris Maxwell <maxwell@cs.dal.ca>
2002-05-08 15:57:18 -07:00
Tim Rice
4bd2a19890
Add truncate() emulation to address Bug 208
2002-05-07 19:51:31 -07:00
Damien Miller
f762a4bea5
- (djm) Don't reinitialise PAM credentials before we have started PAM.
...
Report from Pekka Savola <pekkas@netcore.fi>
2002-05-08 12:27:55 +10:00
Damien Miller
a33501bb5f
- (djm) Unbreak PAM auth for protocol 1. Report from Pekka Savola
...
<pekkas@netcore.fi>
2002-05-08 12:24:42 +10:00
Damien Miller
52910ddc66
- (djm) Unbreak auth-passwd.c for PAM and SIA
2002-05-08 12:18:26 +10:00
Ben Lindstrom
532bbdb99b
- (bal) Fixed auth-passwd.c to resolve PermitEmptyPassword issue
2002-05-06 23:06:08 +00:00
Damien Miller
804357ace9
- (djm) Fix readpassphase compilation for systems which have it
2002-05-01 22:00:22 +10:00
Damien Miller
38cd435892
- (djm) Import OpenBSD regression tests. Requires BSD make to run
2002-05-01 13:17:33 +10:00
Tim Rice
2f09289e74
[contrib/caldera/openssh.spec] update fixUP to reflect changes in sshd_config.
...
[contrib/cygwin/README] remove reference to regex.
patch from Corinna Vinschen <vinschen@redhat.com>
2002-04-29 20:53:12 -07:00
Damien Miller
aa100c546c
- (djm) Bug #180 : Set ToS bits on IPv4-in-IPv6 mapped addresses. Based on
...
patch from openssh@misc.tecq.org
2002-04-26 16:54:34 +10:00
Damien Miller
ae9d5af0de
- (djm) Disable PAM password expiry until a complete fix for bug #188 exists
2002-04-26 11:27:24 +10:00
Damien Miller
13ce922cc6
- (djm) Bug #137 , #209 : fix make problems for scard/Ssh.bin, do uudecode
...
during distprep only
2002-04-26 11:25:40 +10:00
Kevin Steves
0ea1d9d1f2
- (stevesk) [acconfig.h auth-passwd.c configure.ac sshd.c] HP-UX 10.26
...
support. bug #184 . most from dcole@keysoftsys.com .
2002-04-25 18:17:04 +00:00
Kevin Steves
30e494fbca
- (stevesk) [defines.h] remove USE_TIMEVAL; unused
2002-04-25 17:56:07 +00:00
Damien Miller
0150c65830
- djm@cvs.openbsd.org 2002/04/23 22:16:29
...
[sshd.c]
Improve error message; ok markus@ stevesk@
2002-04-24 09:49:09 +10:00
Damien Miller
11ec28176e
- (djm) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2002/04/23 12:54:10
[version.h]
3.2.1
2002-04-24 09:48:14 +10:00
Kevin Steves
5feaaefaf2
- (stevesk) [acconfig.h configure.ac session.c] LOGIN_NO_ENDOPT for HP-UX
2002-04-23 20:45:55 +00:00
Kevin Steves
03df6cd83c
- (stevesk) [acconfig.h] NEED_IN_SYSTM_H unused
2002-04-23 20:11:13 +00:00
Markus Friedl
78cf8c377f
- markus@cvs.openbsd.org 2002/04/23 12:58:26
...
[radix.c]
send complete ticket; semerad@ss1000.ms.mff.cuni.cz
2002-04-23 16:41:12 +02:00
Damien Miller
f75fcc61f4
wrap an out of control line
2002-04-23 23:32:38 +10:00
Damien Miller
fa2bb69d16
- (djm) Bug #206 - blibpath isn't always needed for AIX ld, avoid
...
sizeof(long long int) == 4 breakage. Patch from Matthew Clarke
<Matthew_Clarke@mindlink.bc.ca>
2002-04-23 23:22:25 +10:00
Damien Miller
f1b9d11a3e
- (djm) Bug #214 : Fix utmp for Irix (don't strip "tty"). Patch from
...
Kevin Taylor <no@nowhere.org> (??) via Philipp Grau
<phgrau@zedat.fu-berlin.de>
2002-04-23 23:09:19 +10:00
Damien Miller
d77facda1a
- (djm) Bug #213 : Simplify CMSG_ALIGN macros to avoid symbol clashes.
...
Reported by Doug Manton <dmanton@emea.att.com>
2002-04-23 22:59:51 +10:00
Damien Miller
f5fea44ae3
- (djm) Define BROKEN_REALPATH for AIX, patch from
...
Antti Tapaninen <aet@cc.hut.fi>
2002-04-23 22:52:45 +10:00
Damien Miller
654a4ef969
- (djm) Redhat spec enables KrbV by default
2002-04-23 21:17:17 +10:00
Damien Miller
0b3894d5b5
- (djm) Update RPM spec file versions
2002-04-23 21:15:31 +10:00
Damien Miller
ef7c11de6e
- (djm) Trim ChangeLog to include only post-3.1 changes
2002-04-23 21:13:32 +10:00
Damien Miller
2797f7f03a
- markus@cvs.openbsd.org 2002/04/22 21:04:52
...
[channels.c clientloop.c clientloop.h ssh.c]
request reply (success/failure) for -R style fwd in protocol v2,
depends on ordered replies.
fixes http://bugzilla.mindrot.org/show_bug.cgi?id=215 ; ok provos@
2002-04-23 21:09:44 +10:00
Damien Miller
d7de14b6ad
- markus@cvs.openbsd.org 2002/04/22 16:16:53
...
[servconf.c sshd.8 sshd_config]
do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@
2002-04-23 21:04:51 +10:00
Damien Miller
635fe98a7f
- markus@cvs.openbsd.org 2002/04/22 06:15:47
...
[radix.c]
fix check for overflow
2002-04-23 21:00:33 +10:00
Damien Miller
f61c01506f
- stevesk@cvs.openbsd.org 2002/04/21 16:25:06
...
[sshconnect1.c]
spelling in error message; ok markus@
2002-04-23 20:56:02 +10:00
Damien Miller
7a8558d3ea
- stevesk@cvs.openbsd.org 2002/04/21 16:19:27
...
[sshd.8 sshd_config]
document default AFSTokenPassing no; ok deraadt@
2002-04-23 20:51:15 +10:00
Damien Miller
bad0e0162f
- markus@cvs.openbsd.org 2002/04/20 09:17:19
...
[radix.c]
rewrite using the buffer_* API, fixes overflow; ok deraadt@
2002-04-23 20:46:56 +10:00
Damien Miller
3b23566a5b
- markus@cvs.openbsd.org 2002/04/20 09:14:58
...
[bufaux.c bufaux.h]
add buffer_{get,put}_short
2002-04-23 20:42:36 +10:00
Damien Miller
7941855f09
- (djm) Make privsep work with PAM (still experimental)
2002-04-23 20:28:48 +10:00
Damien Miller
594a71b9b9
- (djm) Bug #222 : Fix tests for getaddrinfo on OSF/1. Spotted by
...
Robert Urban <urban@spielwiese.de>
2002-04-23 20:22:59 +10:00
Tim Rice
f02dccc0dc
[entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0).
...
entropy.c needs seteuid(getuid()) for the setuid(original_uid) to succeed.
Patch by gert@greenie.muc.de . This fixes one part of Bug 208
2002-04-21 11:26:10 -07:00
Damien Miller
a370f4dcc6
- (djm) Avoid SIGCHLD breakage when run from rsync. Fix from
...
Sturle Sunde <sturle.sunde@usit.uio.no>
2002-04-18 22:53:22 +10:00
Tim Rice
43a1c13e0f
[configure.ac] Issue warning on --with-default-path=/some_path
...
if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com>
2002-04-17 21:19:14 -07:00
Damien Miller
5efd71038d
- (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca
2002-04-17 12:30:45 +10:00
Damien Miller
bd63874d4b
- (djm) Tell users to configure /dev/random support into OpenSSL in INSTALL
2002-04-17 12:22:58 +10:00
Tim Rice
66480f188e
[configure.ac] add tests for recvmsg and sendmsg.
...
[monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for
systems that HAVE_ACCRIGHTS_IN_MSGHDR but no recvmsg or sendmsg.
2002-04-15 21:10:09 -07:00
Kevin Steves
eb3630205a
- (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen
2002-04-15 22:00:51 +00:00
Damien Miller
8be24f3846
- (djm) Unbreak "make install". Fix from Darren Tucker <dtucker@zip.com.au>
2002-04-15 13:23:59 +10:00
Damien Miller
49411ff8a7
- (djm) Random number collection doc fixes from Ben
2002-04-14 23:16:04 +10:00
Damien Miller
32e4818015
- (djm) ssh-rand-helper improvements
...
- Add commandline debugging options
- Don't write binary data if stdout is a tty (use hex instead)
- Give it a manpage
2002-04-14 19:27:12 +10:00
Damien Miller
fd4c9eee25
- (djm) Add KrbV support patch from Simon Wilkinson <simon@sxw.org.uk>
2002-04-13 11:04:40 +10:00
Ben Lindstrom
927dfd2d7e
- (bal) disable privsep if no MAP_ANON. We can re-enable it
...
after the release when we can do more testing.
2002-04-12 18:51:22 +00:00
Ben Lindstrom
c42f7cfd16
- (bal) Mistaken in Cygwin scripts for ssh starting. Patch by
...
Corinna Vinschen <vinschen@redhat.com>
2002-04-12 17:44:13 +00:00
Tim Rice
ae49fe64ca
[configure.ac] add <sys/types.h> to msghdr tests.
...
Change -L to -h on testing for /bin being symbolic link
2002-04-12 10:26:21 -07:00
Kevin Steves
19fa9b544f
- (stevesk) [auth-sia.[ch]] add BSD license from Chris Adams
2002-04-12 15:36:07 +00:00
Tim Rice
813f0452ed
[acconfig.h defines.h includes.h] put includes in includes.h and
...
defines in defines.h [rijndael.c openbsd-compat/fake-socket.h
openbsd-compat/inet_aton.c] include "includes.h" instead of "config.h"
ok stevesk@
2002-04-11 20:35:39 -07:00
Kevin Steves
0c283d8444
- (stevesk) [auth-sia.c] cleanup
2002-04-11 20:39:40 +00:00
Kevin Steves
fe6ca54ac2
- (stevesk) [configure.ac monitor.c] HAVE_SOCKETPAIR
2002-04-10 22:04:54 +00:00
Ben Lindstrom
027e4de24f
- markus@cvs.openbsd.org 2002/04/10 08:56:01
...
[version.h]
OpenSSH_3.2
- Added p1 to idenify Portable release version.
2002-04-10 16:26:20 +00:00
Ben Lindstrom
b5115eaf80
- markus@cvs.openbsd.org 2002/04/10 08:21:47
...
[auth1.c compat.c compat.h]
strip '@' from username only for KerbV and known broken clients, bug #204
2002-04-10 16:17:34 +00:00
Kevin Steves
6939b233d0
- (stevesk) [auth-sia.c] compile fix Chris Adams <cmadams@hiwaay.net>
2002-04-10 16:09:51 +00:00
Ben Lindstrom
34b7320a9d
- (bal) Minor OpenSC updates. Fix up header locations and update
...
README.smartcard provided by Juha Yrjölä <jyrjola@cc.hut.fi>
2002-04-08 18:37:07 +00:00
Kevin Steves
265c9d00c3
- (stevesk) wrap munmap() with HAVE_MMAP also.
2002-04-07 22:36:49 +00:00
Kevin Steves
7ff911216b
- (stevesk) --with-privsep-user; default sshd
2002-04-07 19:22:54 +00:00
Kevin Steves
b1184bbf29
- (stevesk) remove configure support for poll.h; it was removed
...
from sshd.c a long time ago.
2002-04-07 18:12:03 +00:00
Kevin Steves
86b9fe6a77
- (stevesk) HAVE_MMAP and HAVE_SYS_MMAN_H and use them in
...
monitor_mm.c
2002-04-07 17:08:53 +00:00
Kevin Steves
c3c825575c
- (stevesk) [monitor_fdpass.c] fatal() for UsePrivilegeSeparation=yes
...
and no fd passing support.
2002-04-07 16:39:12 +00:00
Kevin Steves
a44e0351ee
- (stevesk) HAVE_CONTROL_IN_MSGHDR; not used right now.
...
Future: we may want to test if fd passing works correctly.
2002-04-07 16:18:03 +00:00
Ben Lindstrom
fdee8ef0ac
- (bal) We no longer use atexit()/xatexit()/on_exit()
2002-04-06 23:52:02 +00:00
Ben Lindstrom
0318801591
- (bal) Quiet down configure.ac if /bin/test does not exist.
2002-04-06 20:30:07 +00:00
Ben Lindstrom
8ff2a8d2c2
- (bal) Revered out of runtime IRIX runtime detection of joblimits. Code is
...
incomplete.
2002-04-06 18:58:31 +00:00
Ben Lindstrom
de3895d580
- mouring@cvs.openbsd.org 2002/04/06 18:24:09
...
[scp.c]
Fixes potental double // within path.
http://bugzilla.mindrot.org/show_bug.cgi?id=76
2002-04-06 18:29:59 +00:00
Ben Lindstrom
8d6017566c
- (bal) Slight update to OpenSC support. Better version checking. patch
...
by Juha Yrjölä <jyrjola@cc.hut.fi>
2002-04-06 18:19:38 +00:00
Ben Lindstrom
06e9515eb8
- djm@cvs.openbsd.org 2002/04/06 00:30:08
...
[sftp-client.c]
Fix occasional corruption on upload due to bad reuse of request id, spotted
by chombier@mac.com ; ok markus@
2002-04-06 04:16:45 +00:00
Ben Lindstrom
dc0594cc54
- (bal) Added MAP_FAILED to allow AIX and Trusted HP to compile.
2002-04-06 04:11:28 +00:00
Damien Miller
12db56ba2f
- (djm) Typo in Suse SPEC file. Fix from Carsten Grohmann
...
<carsten.grohmann@dr-baldeweg.de>
2002-04-06 11:12:52 +10:00
Ben Lindstrom
a11e270115
- stevesk@cvs.openbsd.org 2002/04/05 20:56:21
...
[sshd.8]
clarify sshrc some and handle X11UseLocalhost=yes; ok markus@
2002-04-05 22:18:48 +00:00
Ben Lindstrom
924144e650
- (bal) Too many <sys/queue.h> issues. Remove all workarounds and
...
using internal version only.
2002-04-05 20:23:35 +00:00
Ben Lindstrom
a42694fa25
- (bal) Patch for OpenSC SmartCard library; ok markus@; patch by
...
Juha Yrjölä <jyrjola@cc.hut.fi>
- (bal) Minor documentation update to reflect smartcard library
support changes.
2002-04-05 16:11:45 +00:00
Ben Lindstrom
8a725a843d
- markus@cvs.openbsd.org 2002/04/03 09:26:11
...
[cipher.c myproposal.h]
re-add rijndael-cbc@lysator.liu.se for MacSSH; ash@lab.poc.net
2002-04-04 22:10:38 +00:00
Kevin Steves
e683e76439
- (stevesk) [auth-pam.c auth-pam.h auth-passwd.c auth-sia.c auth-sia.h
...
auth1.c auth2.c] PAM, OSF_SIA password auth cleanup; from djm.
2002-04-04 19:02:28 +00:00
Ben Lindstrom
af40bc6a72
- (bal) mispelling in uidswap.c (portable only)
2002-04-03 03:36:54 +00:00
Ben Lindstrom
07739fe305
- markus@cvs.openbsd.org 2002/04/02 20:11:38
...
[ssh-rsa.c]
ignore SSH_BUG_SIGBLOB for ssh-rsa; #187
2002-04-03 03:03:04 +00:00
Ben Lindstrom
2f3d52a2d6
- markus@cvs.openbsd.org 2002/04/02 17:37:48
...
[sftp.c]
always call log_init()
2002-04-02 21:06:18 +00:00
Ben Lindstrom
eecdf23531
- markus@cvs.openbsd.org 2002/04/02 11:49:39
...
[ssh-agent.c]
check $SHELL for -k and -d, too;
http://bugzilla.mindrot.org/show_bug.cgi?id=199
2002-04-02 21:03:51 +00:00
Ben Lindstrom
f26ff5b9d8
- markus@cvs.openbsd.org 2002/04/01 22:07:17
...
[sftp-client.c]
fallback to stat if server does not support lstat
2002-04-02 21:00:31 +00:00
Ben Lindstrom
a1d8114044
- markus@cvs.openbsd.org 2002/04/01 22:02:16
...
[sftp-client.c]
20480 is an upper limit for older server
2002-04-02 20:58:11 +00:00
Ben Lindstrom
1e259bb0bf
- (bal) CVS ID sync of uidswap.c
2002-04-02 20:53:39 +00:00
Ben Lindstrom
47fd8112b5
- markus@cvs.openbsd.org 2002/03/30 18:51:15
...
[monitor.c serverloop.c sftp-int.c sftp.c sshd.c]
check waitpid for EINTR; based on patch from peter@ifm.liu.se
2002-04-02 20:48:19 +00:00
Ben Lindstrom
03f3932829
- stevesk@cvs.openbsd.org 2002/03/29 19:18:33
...
[auth-rsa.c ssh-rsa.c ssh.h]
make RSA modulus minimum #define; ok markus@
2002-04-02 20:43:11 +00:00
Ben Lindstrom
0d0be02a29
- stevesk@cvs.openbsd.org 2002/03/29 19:16:22
...
[sshd.8]
RSA key modulus size minimum 768; ok markus@
2002-04-02 20:39:29 +00:00
Ben Lindstrom
c447fee9f1
- markus@cvs.openbsd.org 2002/03/29 18:59:32
...
[session.c session.h]
retrieve last login time before the pty is allocated, store per session
2002-04-02 20:35:35 +00:00
Ben Lindstrom
2bf56e2dba
- markus@cvs.openbsd.org 2002/03/28 15:34:51
...
[session.c]
do not call record_login twice (for use_privsep)
2002-04-02 20:32:46 +00:00
Ben Lindstrom
155b981494
- markus@cvs.openbsd.org 2002/03/27 22:21:45
...
[ssh-keygen.c]
try to import keys with extra trailing === (seen with ssh.com < 2.0.12)
2002-04-02 20:26:26 +00:00
Ben Lindstrom
cdb66e0e82
- (bal) Hand Sync of scp.c (reverted to upstream code)
...
- deraadt@cvs.openbsd.org 2002/03/30 17:45:46
[scp.c]
stretch banners
2002-04-02 20:17:43 +00:00
Kevin Steves
38c4a28a7e
- (stevesk) [auth1.c] fix password auth for protocol 1 when
...
!USE_PAM && !HAVE_OSF_SIA; merge issue.
2002-04-02 03:24:56 +00:00
Kevin Steves
bd1901b7dc
- (stevesk) [monitor.c] PAM should work again; will *not* work with
...
UsePrivilegeSeparation=yes.
2002-04-01 18:04:35 +00:00
Tim Rice
c85496222b
[sshconnect2.c] change uint32_t to u_int32_t
2002-03-31 12:49:38 -08:00