tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,617 Commits 6 Branches 20 Tags 97 MiB
Commit Graph

3204 Commits

Author SHA1 Message Date
Darren Tucker 4a2505445f - markus@cvs.openbsd.org 2003/10/02 10:41:59 
[sshd.c]
     print openssl version, too, several requests; ok henning/djm.
 2003-10-03 17:57:24 +10:00
Darren Tucker f391ba6730 - (dtucker) [session.c] Fix bus errors on some 64-bit Solaris configurations. 
Based on patches by Matthias Koeppe and Thomas Baden.  ok djm@
 2003-10-02 20:07:09 +10:00
Darren Tucker 7596d6866f - (dtucker) [ssh-gss.h] Prototype change missed in sync. 2003-10-02 17:32:30 +10:00
Darren Tucker 0ccb59b85c - (dtucker) [configure.ac] Don't set DISABLE_SHADOW when configuring 
--with-pam.  ok djm@
 2003-10-02 16:26:34 +10:00
Darren Tucker a49d36e7b9 - markus@cvs.openbsd.org 2003/09/29 20:19:57 
[servconf.c sshd_config]
     GSSAPICleanupCreds -> GSSAPICleanupCredentials
 2003-10-02 16:20:54 +10:00
Darren Tucker 6177695c0b - jmc@cvs.openbsd.org 2003/09/29 11:40:51 
[ssh.1]
     - add list of options to -o and .Xr ssh_config(5)
     - some other cleanup
     requested by deraadt@;
     ok deraadt@ markus@
 2003-10-02 16:19:47 +10:00
Darren Tucker 8fca6b57b4 - markus@cvs.openbsd.org 2003/09/26 08:19:29 
[sshd.c]
     no need to set the listen sockets to non-block; ok deraadt@
 2003-10-02 16:18:22 +10:00
Darren Tucker 5dcdd219fb - markus@cvs.openbsd.org 2003/09/23 20:41:11 
[channels.c channels.h clientloop.c]
     move client only agent code to clientloop.c
 2003-10-02 16:17:00 +10:00
Darren Tucker 6cc310bd5f - markus@cvs.openbsd.org 2003/09/23 20:18:52 
[progressmeter.c]
     don't print trailing \0; bug #709; Robert.Dahlem@siemens.com
     ok millert/deraadt@
 2003-10-02 16:15:15 +10:00
Darren Tucker 3e33cecf71 - markus@cvs.openbsd.org 2003/09/23 20:17:11 
[Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c
     cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h
     monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h
     ssh-agent.c sshd.c]
     replace fatal_cleanup() and linked list of fatal callbacks with static
     cleanup_exit() function.  re-refine cleanup_exit() where appropriate,
     allocate sshd's authctxt eary to allow simpler cleanup in sshd.
     tested by many, ok deraadt@
 2003-10-02 16:12:36 +10:00
Ben Lindstrom b210aa2cfa - (bal) Fix issues in openbsd-compat/realpath.c 2003-09-30 23:49:06 +00:00
Tim Rice d4d1815cae [sshd_config] UsePAM defaults to no. 2003-09-25 19:04:34 -07:00
Darren Tucker b88fcc755d - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove 
DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam.  Patch from
   michael_steffens at hp.com, ok djm@
 2003-09-25 20:18:33 +10:00
Darren Tucker beaf6790e1 - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6. 2003-09-24 20:03:48 +10:00
Damien Miller dbb104791b - (djm) Update version.h and spec files for HEAD 2003-09-24 08:30:18 +10:00
Damien Miller 5c3a55846a - (djm) Sync with V_3_7 branch: 
- (djm) Fix SSH1 challenge kludge
   - (djm) Bug #671: Fix builds on OpenBSD
   - (djm) Bug #676: Fix PAM stack corruption
   - (djm) Fix bad free() in PAM code
   - (djm) Don't call pam_end before pam_init
   - (djm) Enable build with old OpenSSL again
   - (djm) Trim deprecated options from INSTALL. Mention UsePAM
   - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
 2003-09-23 22:12:38 +10:00
Tim Rice 7ff4e6dbe5 [configure.ac] add --disable-etc-default-login option. ok djm 2003-09-22 19:50:14 -07:00
Ben Lindstrom da4d9cf4bf - (bal) "extration" -> "extraction" in ssh-rand-helper.c; repoted by john 
on #unixhelp@efnet
 2003-09-22 15:36:15 +00:00
Darren Tucker 9a2c4cddad - markus@cvs.openbsd.org 2003/09/19 17:43:35 
[clientloop.c sshtty.c sshtty.h]
     remove fatal callbacks from client code; ok deraadt
 2003-09-22 21:16:05 +10:00
Darren Tucker 8654d16f0f - markus@cvs.openbsd.org 2003/09/19 17:40:20 
[scp.c]
     error handling for remote-remote copy; #638; report Harald Koenig;
     ok millert, fgs, henning, deraadt
 2003-09-22 21:14:55 +10:00
Darren Tucker aaa56cb804 - markus@cvs.openbsd.org 2003/09/19 11:33:09 
[packet.c sshd.c]
     do not call packet_close on fatal; ok deraadt
 2003-09-22 21:13:59 +10:00
Darren Tucker 3dbff2a93b - markus@cvs.openbsd.org 2003/09/19 11:31:33 
[channels.c]
     do not call channel_free_all on fatal; ok deraadt
 2003-09-22 21:12:56 +10:00
Darren Tucker 3d32622171 - markus@cvs.openbsd.org 2003/09/19 11:30:39 
[ssh-keyscan.c]
     avoid fatal_cleanup, just call exit(); ok deraadt
 2003-09-22 21:11:20 +10:00
Darren Tucker 6fa8abd58b - markus@cvs.openbsd.org 2003/09/19 11:29:40 
[ssh-agent.c]
     provide a ssh-agent specific fatal() function; ok deraadt
 2003-09-22 21:10:21 +10:00
Darren Tucker 631a4a9b3e - markus@cvs.openbsd.org 2003/09/19 09:03:00 
[buffer.c]
     sign fix in buffer_dump; Jedi/Sector One; pr 3473
 2003-09-22 21:08:21 +10:00
Darren Tucker a8151da5fe - markus@cvs.openbsd.org 2003/09/19 09:02:02 
[packet.c]
     buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471
 2003-09-22 21:06:46 +10:00
Darren Tucker c0815c927e - miod@cvs.openbsd.org 2003/09/18 13:02:21 
[authfd.c bufaux.c dh.c mac.c ssh-keygen.c]
     A few signedness fixes for harmless situations; markus@ ok
 2003-09-22 21:05:50 +10:00
Darren Tucker fb16b2411e - markus@cvs.openbsd.org 2003/09/18 08:49:45 
[deattack.c misc.c session.c ssh-agent.c]
     more buffer allocation fixes; from Solar Designer; CAN-2003-0682;
     ok millert@
 2003-09-22 21:04:23 +10:00
Darren Tucker d1d41b3181 - markus@cvs.openbsd.org 2003/09/18 07:56:05 
[authfile.c]
     missing  buffer_free(&encrypted); #662; zardoz at users.sf.net
 2003-09-22 21:01:27 +10:00
Darren Tucker d2730d39a1 - markus@cvs.openbsd.org 2003/09/18 07:54:48 
[buffer.c]
     protect against double free; #660;  zardoz at users.sf.net
 2003-09-22 21:00:19 +10:00
Darren Tucker bd5361b237 - markus@cvs.openbsd.org 2003/09/18 07:52:54 
[sshconnect.c]
     missing {}; bug #656; jclonguet at free.fr
 2003-09-22 20:59:16 +10:00
Darren Tucker 220bf133b6 - (dtucker) [contrib/aix/pam.conf] Include example pam.conf for AIX from 
article by genty at austin.ibm.com, included with the author's permission.
 2003-09-22 20:41:40 +10:00
Tim Rice 480ef8ddae [configure.ac] Bug 665: move 3 new AC_DEFINES outside of AC_TRY_RUN. 
Report by distler AT golem ph utexas edu.
 2003-09-21 21:38:11 -07:00
Tim Rice 7a74c6b428 Fix typo. s/SETEIUD_BREAKS_SETUID/SETEUID_BREAKS_SETUID/ 2003-09-21 21:00:59 -07:00
Darren Tucker 42d30828a4 - (dtucker) [INSTALL] Bug #686: Document requirement for zlib 1.1.4 or 
higher.
 2003-09-22 13:28:36 +10:00
Darren Tucker 051c270f88 - (dtucker) [openbsd-compat/port-aix.c] Use correct include for xmalloc.h, 
add canohost.h to stop warning.  Based on patch from openssh-unix-dev at
   thewrittenword.com
 2003-09-22 13:05:26 +10:00
Darren Tucker fbe3b36ca9 - (dtucker) [uidswap.c] Don't test restoration of uid on Cygwin since the 
OS does not support permanently dropping privileges.  Patch from
   vinschen at redhat.com.
 2003-09-22 12:54:37 +10:00
Darren Tucker 8daf4b45ea - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config] Update 
ssh-host-config to match current defaults, bump README version.  Patch from
   vinschen at redhat.com.
 2003-09-22 12:32:00 +10:00
Darren Tucker d5e082f0d5 - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c 
openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with
   where gai_strerror is defined as "const char *".  Part of patch supplied
   by bugzilla-openssh at thewrittenword.com
 2003-09-22 12:08:23 +10:00
Darren Tucker be79af1dfe - (dtucker) [configure.ac] Bug #659: uid swapping issues on IRIX 6. 
Part of patch supplied by bugzilla-openssh at thewrittenword.com
 2003-09-22 11:58:21 +10:00
Darren Tucker 0013011529 - (dtucker) [configure.ac] Bug #693: uid swapping issues on NCR MP-RAS. 
Patch from david.haughton at ncr.com
 2003-09-22 11:40:24 +10:00
Darren Tucker ed92b21321 - (dtucker) [configure.ac] Bug #653: uid swapping issues on Tru64. 2003-09-22 11:26:16 +10:00
Darren Tucker ed9eb02326 - (dtucker) [configure.ac] Bug #657: uid swappping issues on BSDi. 2003-09-22 11:18:47 +10:00
Darren Tucker 20379a37fa - (dtucker) [configure.ac] Bug #655: uid swapping issues on Mac OS X. 
Patch from max at quendi.de.
 2003-09-22 11:07:40 +10:00
Darren Tucker 8a49dd107b Wrong filename 2003-09-22 10:59:34 +10:00
Darren Tucker 782390e62e - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-tree 
builds.  Portability corrections from tim@.
 2003-09-22 10:58:55 +10:00
Darren Tucker 4724d96ca8 - (dtucker) [acconfig.h] Updated basename test needs HAVE_BASENAME 2003-09-19 21:25:23 +10:00
Darren Tucker c11b1e8420 - (dtucker) [session.c] Bug #643: Fix size_t -> u_int and fix null deref 
when /etc/default/login doesn't exist or isn't readable.  Fixes from
   jparsons-lists at saffron.net and georg.oppenberg at deu mci com.
 2003-09-19 20:56:51 +10:00
Darren Tucker 91acbf211c - (dtucker) [openbsd-compat/port-aix.h] Bug #640: Don't include audit.h 
unless required.  Reorder to reduce warnings.
 2003-09-19 20:43:38 +10:00
Damien Miller 8040939f72 - (djm) Bug #646: Fix location of x11-ssh-askpass; Jim 2003-09-19 17:05:24 +10:00
Damien Miller 968c8d25e9 - (djm) Bug #641: Allow RedHat RPM building without GTK-2; Patch from 
jason AT devrandom.org
 2003-09-19 16:58:21 +10:00
Damien Miller f09ad861e6 - (djm) Bug #661: Remove duplicate check for basename; from 
bugzilla-openssh AT thewrittenword.com
 2003-09-19 16:41:01 +10:00
Damien Miller 677179f23a - (djm) Bug #683: Remove reference to --with-ipv4-default from INSTALL; 
djast AT cs.toronto.edu
 2003-09-19 16:30:14 +10:00
Damien Miller 5d07e6d465 20030918 
- (djm) Bug #652: Fix empty password auth
 2003-09-18 18:25:46 +10:00
Tim Rice 628c873230 [openbsd-compat/inet_ntoa.c] 20030917 "Sync with V_3_7 branch" undid 
20030916 "Missed dead header in inet_ntoa.c"
 2003-09-17 13:20:33 -07:00
Damien Miller e007cf7fa4 - (djm) Crank RPM spec file versions 2003-09-17 07:32:17 +10:00
Damien Miller 5efcecc265 - (djm) OpenBSD Sync 
- markus@cvs.openbsd.org 2003/09/16 21:02:40
     [buffer.c channels.c version.h]
     more malloc/fatal fixes; ok millert/deraadt; ghudson at MIT.EDU
 2003-09-17 07:31:14 +10:00
Damien Miller f2728099ba - (djm) Sync with V_3_7 branch 2003-09-17 07:24:25 +10:00
Ben Lindstrom e121048392 - (bal) Missed dead header in inet_ntoa. 2003-09-16 17:23:29 +00:00
Tim Rice b925b4b82f [configure.ac] Fix portability issues. 2003-09-15 22:40:49 -07:00
Ben Lindstrom f2b4e4e07e - deraadt@cvs.openbsd.org 2003/09/16 03:03:47 
[buffer.c]
     do not expand buffer before attempting to reallocate it; markus ok
 2003-09-16 03:31:03 +00:00
Darren Tucker 16eec18a09 Fix line width 2003-09-16 13:24:50 +10:00
Darren Tucker e1a790d0d1 - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: Retrieve 
PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it
   (eg Solaris, Reliant Unix).  Patch from Robert.Dahlem at siemens.com.  ok djm@
 2003-09-16 11:52:19 +10:00
Darren Tucker 7b6cb5c5ef - (dtucker) [regress/Makefile] AIX's make doesn't like " +=", so replace 
with vanilla "=".

Hopefully everybody's "make" will be happy with that.
 2003-09-14 13:16:55 +10:00
Darren Tucker b12d16fd00 - (dtucker) [Makefile regress/Makefile] Fix portability issues preventing 
the regression tests from running with Solaris' make.  Patch from Brian
   Poole (raj at cerias.purdue.edu).

Further info:  Solaris' /usr/ccs/bin/make
* requires a space before "+=" (but not "=")
* does not like @for

The bit that relies on a trailing "/" on $OBJ so "rm ${OBJ}$$F works in the
current dir if OBJ isn't set is my fault.  Nasty but it works.
 2003-09-14 11:40:35 +10:00
Darren Tucker c58c2eedb0 - (dtucker) [auth-pam.c] Use SSHD_PAM_SERVICE for PAM service name, patch 
from cjwatson at debian.org.
 2003-09-13 22:02:05 +10:00
Tim Rice ae477e922e [configure.ac] define WITH_ABBREV_NO_TTY for SCO. Report by Roger Cornelius. 2003-09-12 18:15:15 -07:00
Darren Tucker 2270c7e8aa - (dtucker) [auth-passwd.c] On AIX, call setauthdb() before loginsuccess(), 
required to correctly reset failed login count when using a password
   registry other than "files" (eg LDAP, see bug #543).
 2003-09-13 10:41:56 +10:00
Darren Tucker dc7e65646f - (dtucker) [regress/agent-timeout.sh] Timeout of 5 sec is borderline for 
slower hosts, increase to 10 sec.
 2003-09-13 09:46:03 +10:00
Tim Rice e660ede8c0 [regress/yes-head.sh] shell portability fix. 2003-09-12 13:21:14 -07:00
Tim Rice ec28ca16b1 [Makefile.in] only mkdir regress if it does not exist. 2003-09-12 13:02:16 -07:00
Tim Rice b7efb630f6 [regress/agent-ptrace.sh] sh doesn't like "if ! shell_function; then". 2003-09-12 11:20:32 -07:00
Tim Rice 23ee359b08 [regress/agent-ptrace.sh regress/dynamic-forward.sh 
regress/sftp-cmds.sh regress/stderr-after-eof.sh regress/test-exec.sh]
no longer depends on which(1). patch by dtucker@
 2003-09-11 22:32:17 -07:00
Tim Rice d546a84ef6 [configure.ac] Prefer setuid/setgid on UnixWare and Open Server. 2003-09-11 22:24:36 -07:00
Tim Rice 1e1ef64566 [configure.ac] Move libgen tests to before libwrap to unbreak 
UnixWare 2.03 using --with-tcp-wrappers.
 2003-09-11 22:19:31 -07:00
Darren Tucker c82afd5c88 - (dtucker) [configure.ac] Bug #588, #615: Move other libgen tests to after 
the dirname test, to allow a broken dirname to be detected correctly.
   Based partially on patch supplied by alex.kiernan at thus.net.  ok djm@
 2003-09-11 14:42:55 +10:00
Darren Tucker 9a959ea1b5 - (dtucker) [regressh/yes-head.sh] Some platforms (eg Solaris) don't have 
"yes".
 2003-09-10 20:17:40 +10:00
Darren Tucker b2427c82bb - (dtucker) [configure.ac] Part of bug #615: tcsendbreak might be a macro. 2003-09-10 15:22:44 +10:00
Darren Tucker 9f7ffc5a17 - (dtucker) [configure.ac] Bug #636: Add support for Cray's new X1 machine. 
Patch from wendyp at cray.com.
 2003-09-10 11:39:05 +10:00
Tim Rice 1eb40cf514 [regress/sftp-badcmds.sh regress/sftp-cmds.sh] Fix errors like 
UX:rm: ERROR: Cannot remove '.' or '..'
 2003-09-09 08:35:20 -07:00
Tim Rice 5543947d7f [regress/agent-timeout.sh] s/TIMEOUT/SSHAGENT_TIMEOUT/ Fixes conflict 
with shell read-only variable.
 2003-09-09 08:27:40 -07:00
Tim Rice 8b2157d86a [regress/Makefile] Fixes for building outside of a read-only source tree. 2003-09-09 06:07:10 -07:00
Tim Rice 2e0e38e310 [ssh-keygen.c] s/PATH_MAX/MAXPATHLEN/ ok mouring@ 2003-09-08 16:11:33 -07:00
Tim Rice b284e16c10 [configure.ac acconfig.h openbsd-compat/getrrsetbyname.c] test for 
HEADER.ad in arpa/nameser.h
 2003-09-08 14:35:16 -07:00
Tim Rice 0ac16a4492 [configure.ac openbsd-compat/getrrsetbyname.c] wrap _getshort and 
_getlong in #ifndef
 2003-09-08 06:33:33 -07:00
Darren Tucker 167bd9cfef - (dtucker) [CREDITS Makefile.in configure.ac mdoc2man.awk mdoc2man.pl] 
Replace mdoc2man.pl with mdoc2man.awk, provided by Peter Stuge.
 2003-09-07 12:34:54 +10:00
Darren Tucker 7c600f24a4 - (dtucker) [acconfig.h] Typo. 2003-09-07 11:37:27 +10:00
Darren Tucker 3393c5c36e - (dtucker) openbsd-compat/xcrypt.c] #elsif -> #elif 2003-09-07 09:43:42 +10:00
Darren Tucker e7f7580cab - (dtucker) [regress/sftp-cmds.sh] Skip quoted file test on Cygwin. 2003-09-07 09:32:58 +10:00
Darren Tucker e1e26a6c15 - (dtucker) [regress/sftp-batch.sh] Make temporary batch file name more 
distinctive, so "rm ${BATCH}.*" doesn't match the script itself.
 2003-09-07 09:31:02 +10:00
Darren Tucker d199b6d69b - (dtucker) [dynamic-forward.sh forwarding.sh sftp-batch.sh (all regress/)] 
Add ${EXEEXT}: required to work on Cygwin.
 2003-09-07 09:28:03 +10:00
Darren Tucker 57ac36ffb4 - (dtucker) [agent-ptrace.sh dynamic-forward.sh (all regress/)] 
Put "which" inside quotes.
 2003-09-07 09:22:21 +10:00
Darren Tucker 9f18be63ab - (dtucker) [acconfig.h configure.ac uidswap.c] Prefer setuid/setgid on AIX. 2003-09-06 16:44:39 +10:00
Darren Tucker b2db4e83a3 - (dtucker) [Makefile.in] Add distclean target for regress/, fix clean target. 2003-09-05 11:35:52 +10:00
Darren Tucker 77d07e927d - [Makefile.in regress/agent-ptrace] Fix minor regress issues on Cygwin. 2003-09-04 22:06:16 +10:00
Darren Tucker 118576556b - [Makefile.in regress/agent-getpeereid.sh] config.h is now in $BUILDDIR 
not $OBJ.
 2003-09-04 18:04:16 +10:00
Darren Tucker 9d9d44811b - [regress/README.regress] Add a basic readme. 2003-09-04 15:39:54 +10:00
Darren Tucker ebc3c13d40 - [regress/Makefile] Remove BSDisms. 2003-09-04 15:37:58 +10:00
Darren Tucker 6d3921f64b - [regress/test-exec.sh] Use sudo, search for "whoami" equivalent, always 
use Strictmodes no, wait longer for sshd startup.
 2003-09-04 15:35:48 +10:00
Darren Tucker bd05609dff - [regress/ssh-com-sftp.sh] Remove dependency on /dev/stdin. 2003-09-04 15:26:57 +10:00
Darren Tucker 4735115e4d - [regress/sftp-cmds.sh] Use portable "test" option. 2003-09-04 15:24:50 +10:00
Darren Tucker a241d87e94 - [regress/dynamic-forward.sh] Some "which" programs output on stderr. 2003-09-04 15:22:01 +10:00
Darren Tucker 53c55f4179 - [regress/agent.sh regress/proto-version.sh regress/ssh-com.sh 
regress/test-exec.sh] Handle different was of echoing without newlines.
 2003-09-04 15:16:56 +10:00
Darren Tucker 58f89bc14d - [regress/agent-ptrace.sh regress/agent-timeout.sh] 
"grep -q" -> "grep >/dev/null"
 2003-09-04 15:07:59 +10:00
Darren Tucker e15b0dd011 - [regress/sftp.sh] Remove dependency on /dev/stdin. 2003-09-04 15:00:55 +10:00
Darren Tucker c2c4223ed0 - [regress/sftp-badcmds.sh regress/sftp-cmds.sh regress/sftp.sh 
regress/ssh-com-client.sh regress/ssh-com-sftp.sh regress/stderr-data.sh
     regress/transfer.sh] Use ${EXEEXT} where appropriate.
 2003-09-04 14:54:39 +10:00
Darren Tucker c376a88c10 - [regress/stderr-after-eof.sh] Search for a usable checksum program. 2003-09-04 14:32:02 +10:00
Darren Tucker 933e4f1c27 - [regress/sftp-cmds.sh] Ensure file used for test are readable. 2003-09-04 14:26:31 +10:00
Darren Tucker 60de9f1851 - [regress/rekey.sh] Remove dependence on /dev/zero (not all platforms have 
it).  The sparse file will take less disk space too.
 2003-09-04 14:02:56 +10:00
Darren Tucker 871f7408ab - [regress/reconfigure/sh] Make path to sshd fully qualified if required. 2003-09-04 13:59:48 +10:00
Darren Tucker 5569759bce - [regress/agent-ptrace.sh] Skip tests if platform doesn't support it or 
gdb cannot be found.
 2003-09-04 13:55:25 +10:00
Darren Tucker 2297ac41ca - [regress/agent-getpeereid.sh] Skip test on platforms that don't support 
getpeereid.
 2003-09-04 13:49:30 +10:00
Darren Tucker 150a81c745 - (dtucker) Portablize regression tests. Parts contributed by Roumen 
Petrov, David M. Williams and Corinna Vinschen.
   - [Makefile.in] Add "make tests" target and "make clean" hooks.
 2003-09-04 13:41:06 +10:00
Damien Miller c2b9827695 - jmc@cvs.openbsd.org 2003/09/02 18:50:06 
[sftp.1 ssh_config.5]
     escape punctuation;
     ok deraadt@
 2003-09-03 12:13:30 +10:00
Damien Miller f117f877b1 - markus@cvs.openbsd.org 2003/09/02 16:40:29 
[version.h]
     enter 3.7
 2003-09-03 12:12:54 +10:00
Damien Miller a256c650ac - markus@cvs.openbsd.org 2003/08/28 12:54:34 
[auth.h]
     remove kerberos support from ssh1, since it has been replaced with GSSAPI;
     but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
 2003-09-03 12:11:30 +10:00
Damien Miller 856f0be669 - markus@cvs.openbsd.org 2003/08/26 09:58:43 
[auth-passwd.c auth.c auth.h auth1.c auth2-none.c auth2-passwd.c]
     [auth2.c monitor.c]
     fix passwd auth for 'username leaks via timing'; with djm@, original
     patches from solar
 2003-09-03 07:32:45 +10:00
Damien Miller 39638b6aeb - (djm) Fix openbsd-compat/ again - remove references to strl(cpy|cat).h 2003-09-02 23:33:42 +10:00
Damien Miller 341c6e687c - (djm) Bug #423: reorder setting of PAM_TTY and calling of PAM session 
management (now done in do_setusercontext). Largely from
   michael_steffens AT hp.com
 2003-09-02 23:18:52 +10:00
Damien Miller f4b6f10ded - (djm) Don't initialise pam_conv structures inline. Avoids HP/UX compiler 
error. Part of Bug #423, patch from  michael_steffens AT hp.com
 2003-09-02 23:12:06 +10:00
Damien Miller 0b56b45d6f fix date 2003-09-02 23:09:41 +10:00
Damien Miller 982d326045 - markus@cvs.openbsd.org 2003/09/01 20:44:54 
[auth2-gss.c]
     fix leak
 2003-09-02 22:59:01 +10:00
Damien Miller fb10e9abe8 - markus@cvs.openbsd.org 2003/09/01 18:15:50 
[readconf.c readconf.h servconf.c servconf.h ssh.c]
     remove unused kerberos code; ok henning@
 2003-09-02 22:58:22 +10:00
Damien Miller 46aa3b9139 - markus@cvs.openbsd.org 2003/09/01 13:52:18 
[ssh.h]
     rm whitespace
 2003-09-02 22:57:54 +10:00
Damien Miller 84d03efdf7 - markus@cvs.openbsd.org 2003/09/01 12:50:46 
[readconf.c]
     rm gssapidelegatecreds alias; never supported before
 2003-09-02 22:57:27 +10:00
Damien Miller 9b7b03b270 - markus@cvs.openbsd.org 2003/09/01 09:50:04 
[sshd_config.5]
     gss kex is not supported; sxw@inf.ed.ac.uk
 2003-09-02 22:57:05 +10:00
Damien Miller 134350c20c - markus@cvs.openbsd.org 2003/08/31 13:31:57 
[gss-serv.c]
     whitspace KNF
 2003-09-02 22:56:42 +10:00
Damien Miller a0c4ad21b6 - markus@cvs.openbsd.org 2003/08/31 13:30:18 
[gss-serv.c]
     correct string termination in parse_ename(); sxw@inf.ed.ac.uk
 2003-09-02 22:56:18 +10:00
Damien Miller 324948b320 - markus@cvs.openbsd.org 2003/08/31 13:29:05 
[session.c]
     call ssh_gssapi_storecreds conditionally from do_exec();
     with sxw@inf.ed.ac.uk
 2003-09-02 22:55:45 +10:00
Damien Miller b5829f56eb - markus@cvs.openbsd.org 2003/08/31 12:14:22 
[progressmeter.c]
     do write to buf[-1]
 2003-09-02 22:53:32 +10:00
Damien Miller 17af176302 - markus@cvs.openbsd.org 2003/08/31 10:26:04 
[progressmeter.c]
     pass file_size + 1 to snprintf: fixes printing of truncated
     file names; fix based on patch/report from sturm@;
 2003-09-02 22:53:01 +10:00
Damien Miller fbdeecef92 - markus@cvs.openbsd.org 2003/08/29 10:04:36 
[channels.c nchan.c]
     be less chatty; debug -> debug2, cleanup; ok henning@
 2003-09-02 22:52:31 +10:00
Damien Miller 7630ee2fa6 - markus@cvs.openbsd.org 2003/08/29 10:03:15 
[compat.c compat.h]
     SSH_BUG_K5USER is unused; ok henning@
 2003-09-02 22:52:00 +10:00
Damien Miller 1a0c0b9621 - markus@cvs.openbsd.org 2003/08/28 12:54:34 
[auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c]
     [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5]
     [sshconnect1.c sshd.c sshd_config sshd_config.5]
     remove kerberos support from ssh1, since it has been replaced with GSSAPI;
     but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
 2003-09-02 22:51:17 +10:00
Damien Miller 55c47edc81 - (djm) OpenBSD CVS Sync 
- deraadt@cvs.openbsd.org 2003/08/24 17:36:51
     [auth2-gss.c]
     64 bit cleanups; markus ok
 2003-09-02 22:14:07 +10:00
Ben Lindstrom 4d5dffce9f ChangeLog fix pointed out by Darren. Yes, we should not use $Id$ when 
describing those changes. <chuckle>
 2003-08-30 00:11:56 +00:00
Ben Lindstrom 515d0f9a1e - (bal) openbsd-compat/ clean up. Considate headers, add in $Id$ on our 
files, and added missing license to header.
 2003-08-29 16:59:52 +00:00
Darren Tucker 43a0dc6653 - (dtucker) [auth.c] Do not check for locked accounts when PAM is enabled. 2003-08-26 14:22:12 +10:00
Darren Tucker 2fae867806 - (dtucker) [contrib/aix/inventory.sh] Add public domain notice. ok mouring@ 
(the original author)
 2003-08-26 13:43:12 +10:00
Darren Tucker 6ad50438ed - (dtucker) [Makefile.in] Remove auth2-krb5. 2003-08-26 12:22:04 +10:00
Darren Tucker 08bbb2f69d - djm@cvs.openbsd.org 2003/08/25 10:33:33 
[sshconnect2.c]
     fprintf->logit to silence login banner with "ssh -q"; ok markus@
 2003-08-26 12:14:05 +10:00
Darren Tucker 7858726e8a - fgsch@cvs.openbsd.org 2003/08/25 08:13:09 
[sftp-int.c]
     fix div by zero when listing for filename lengths longer than width.
     markus@ ok.
 2003-08-26 12:12:56 +10:00
Darren Tucker 600ad8de76 - deraadt@cvs.openbsd.org 2003/08/24 17:36:52 
[monitor.c monitor_wrap.c sshconnect2.c]
     64 bit cleanups; markus ok
 2003-08-26 12:10:48 +10:00
Darren Tucker 6b191a234c - markus@cvs.openbsd.org 2003/08/22 20:55:06 
[LICENCE]
     add Simon Wilkinson
 2003-08-26 12:09:53 +10:00
Darren Tucker 1e66a39e40 - markus@cvs.openbsd.org 2003/08/22 13:22:27 
[auth2.c] (auth2-krb5.c removed)
     nuke "kerberos-2@ssh.com"
 2003-08-26 12:08:15 +10:00
Darren Tucker be1a901f99 - markus@cvs.openbsd.org 2003/08/22 13:20:03 
[sshconnect2.c]
     remove support for "kerberos-2@ssh.com"
 2003-08-26 12:04:31 +10:00
Darren Tucker 49aaf4ad52 - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h 
configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
   sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
 2003-08-26 11:58:16 +10:00
Darren Tucker 0efd155c3c - markus@cvs.openbsd.org 2003/08/22 10:56:09 
[auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c
     gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c
     readconf.h servconf.c servconf.h session.c session.h ssh-gss.h
     ssh_config.5 sshconnect2.c sshd_config sshd_config.5]
     support GSS API user authentication; patches from Simon Wilkinson,
     stripped down and tested by Jakob and myself.
 2003-08-26 11:49:55 +10:00
Damien Miller 30912f7259 - (djm) Bug #629: Mark ssh_config option "pamauthenticationviakbdint" 
as deprecated. Remove mention from README.privsep. Patch from
   aet AT cc.hut.fi
 2003-08-26 10:48:14 +10:00
Darren Tucker 36ca53a5a0 - (dtucker) [README buildbff.sh inventory.sh] (all in contrib/aix) 
Update package builder: correctly handle config variables, use lsuser
   rather than /etc/passwd, fix typos, add Id's.
 2003-08-25 15:01:04 +10:00
Darren Tucker 3c8e1e1bbf - (dtucker) [configure.ac] Bug #533, #551: define BROKEN_GETADDRINFO on 
Tru64, solves getnameinfo and "bad addr or host" errors.  ok djm@
 2003-08-25 13:27:40 +10:00
Damien Miller 1f499fd368 - (djm) Bug #564: Perform PAM account checks for all authentications when 
UsePAM=yes; ok dtucker
 2003-08-25 13:08:49 +10:00
Darren Tucker e41bba5847 - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny 
any access to locked accounts.  ok djm@
 2003-08-25 11:51:19 +10:00
Ben Lindstrom 5ade9abc37 - (bal) redo how we handle 'mysignal()'. Move it to 
openbsd-compat/bsd-misc.c, s/mysignal/signal/ and #define signal to
   be our 'mysignal' by default.  OK djm@
 2003-08-25 01:16:21 +00:00
Ben Lindstrom af4a6c3a56 - (bal) openbsd-compat/ OpenBSD updates. Mostly licensing, ansifications 
and minor fixes.
 2003-08-25 01:10:51 +00:00
Damien Miller 331b6af8fa - (djm) Bug #621: Select OpenSC keys by usage attributes. Patch from 
larsch@trustcenter.de
 2003-08-25 10:58:26 +10:00
Darren Tucker 49d32566c2 - (dtucker) [contrib/cygwin/ssh-user-config] Put keys in authorized_keys 
rather that authorized_keys2.  Patch from vinschen@redhat.com.
 2003-08-22 18:43:48 +10:00
Damien Miller 59d3d5b8b4 - (djm) s/get_progname/ssh_get_progname/g to avoid conflict with Heimdal 
-lbroken; ok dtucker
 2003-08-22 09:34:41 +10:00
Darren Tucker 70a3d55b4a - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement 
and after normal openpty test.
 2003-08-21 17:58:29 +10:00
Darren Tucker 8e3653d2f3 - (dtucker) [defines.h] Put CMSG_DATA, CMSG_FIRSTHDR with other CMSG* macros, 
change CMSG_DATA to use __CMSG_ALIGN (and thus work properly), reformat for
   consistency.
 2003-08-21 16:49:41 +10:00
Darren Tucker f4220e6cef - markus@cvs.openbsd.org 2003/08/14 16:08:58 
[ssh-keygen.c]
     exit after primetest, ok djm@
 2003-08-21 16:44:07 +10:00
Darren Tucker f38ea77c03 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] 
Add a tcsendbreak function for platforms that don't have one, based on the
   one from OpenBSD.

Any more of these and I'll split them out into bsd-termio.[ch].
 2003-08-13 20:48:07 +10:00
Darren Tucker 1c52ee3e6f - markus@cvs.openbsd.org 2003/08/13 09:07:10 
[readconf.c ssh.c]
     socks4->socks, since with support both 4 and 5; dtucker@zip.com.au
 2003-08-13 20:38:36 +10:00
Darren Tucker ec960f2c93 - markus@cvs.openbsd.org 2003/08/13 08:46:31 
[auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
     ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
     remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
     fgsch@, miod@, henning@, jakob@ and others
 2003-08-13 20:37:05 +10:00
Darren Tucker 3bdbd848ea - markus@cvs.openbsd.org 2003/08/13 08:33:02 
[session.c]
     use more portable tcsendbreak(3) and ignore break_length;
     ok deraadt, millert
 2003-08-13 20:31:05 +10:00
Darren Tucker d85efee437 - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge. 2003-08-13 20:28:14 +10:00
Darren Tucker bc8c8f36fb - (dtucker) [openbsd-compat/xcrypt.c] Remove Cygwin #ifdef block (duplicate 
in bsd-cygwin_util.h).
 2003-08-11 23:00:33 +10:00
Darren Tucker ec0943a96c - (dtucker) OpenBSD CVS Sync 
(thanks to Simon Wilkinson for help with this -dt)
   - markus@cvs.openbsd.org 2003/07/16 15:02:06
     [auth-krb5.c]
     mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
     otherwise the kerberos credentinal is stored in a memory cache
     in the privileged sshd. ok jabob@, hin@ (some time ago)
 2003-08-11 22:55:36 +10:00
Darren Tucker f38db7f5da - (dtucker) [auth-pam.c] Don't set PAM_TTY if tty is null. ok djm@ 2003-08-08 13:43:37 +10:00
Darren Tucker 65914f1eb3 - (dtucker) [openbsd-compat/fake-rfc2553.h] Older Linuxes have AI_PASSIVE and 
AI_CANONNAME in netdb.h but not AI_NUMERICHOST, so check each definition
   separately before defining them.
 2003-08-08 12:15:11 +10:00
Darren Tucker 80649c5fa6 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.h] Move Cygwin 
specific defines and includes to bsd-cygwin_util.h.  Fixes build error too.
 2003-08-07 16:28:16 +10:00
Darren Tucker 854d7fd439 - (dtucker) [openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h] 
Remove incorrect filenames from comments (file names are in Id tags).
 2003-08-07 16:23:43 +10:00
Darren Tucker f315224d7c - (dtucker) [defines.h] Bug #336: Add CMSG_DATA and CMSG_FIRSTHDR macros if 
not already defined (eg Linux with some versions of libc5), based on those
   from OpenBSD.
 2003-08-07 15:58:28 +10:00
Darren Tucker 89f4cf0d29 - (dtucker) [canohost.c] Bug #336: Only check ip options if IP_OPTIONS is 
defined (fixes compile error on really old Linuxes).
 2003-08-07 13:29:04 +10:00
Darren Tucker b9d3f41ceb - (dtucker) [session.c] Have session_break_req not attempt to send a break 
if TIOCSBRK and TIOCCBRK are not defined (eg Cygwin).
 2003-08-07 13:24:24 +10:00
Darren Tucker bdf571b0dc - (dtucker) [openbsd-compat/bsd-misc.c] Fix cut-and-paste bug in tcgetpgrp. 2003-08-03 00:36:16 +10:00
Darren Tucker db732b14d7 - markus@cvs.openbsd.org 2003/07/31 22:34:03 
[progressmeter.c]
    print rate similar old version; round instead truncate;
    (included in previous progressmeter.c commit)
 2003-08-03 00:07:35 +10:00
Darren Tucker 85f04c6fd5 - avsm@cvs.openbsd.org 2003/07/31 15:50:16 
[atomicio.c]
     correct comment: atomicio takes vwrite, not write; deraadt@ ok
 2003-08-03 00:05:58 +10:00
Darren Tucker 4b60966863 - markus@cvs.openbsd.org 2003/07/31 09:21:02 
[auth2-none.c]
     check whether passwd auth is allowd, similar to proto 1; rob@pitman.co.za
     ok henning
 2003-08-03 00:05:01 +10:00
Darren Tucker 40311f2feb Add imported progressmeter.c changes to Changelog 2003-08-03 00:00:47 +10:00
Darren Tucker b2f9d4161a - (dtucker) [Makefile.in moduli.c moduli.h] Add new files and to Makefile. 
Should have added with this sync:
   - djm@cvs.openbsd.org 2003/07/28 09:49:56
     [ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
 2003-08-02 23:51:38 +10:00
Darren Tucker 2e9c9cf702 - (dtucker) [openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] 
Add a tcgetpgrp function.
 2003-08-02 23:31:42 +10:00
Darren Tucker 06ef75bf0c - markus@cvs.openbsd.org 2003/07/29 18:24:00 
[LICENCE progressmeter.c]
     replace 4 clause BSD licensed progressmeter code with a replacement
     from Nils Nordman and myself; ok deraadt@
     (copied from OpenBSD an re-applied portable changes)
 2003-08-02 23:28:38 +10:00
Darren Tucker 019cefeaad - djm@cvs.openbsd.org 2003/07/28 09:49:56 
[ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
 2003-08-02 22:40:07 +10:00
Darren Tucker c20c60bc99 - markus@cvs.openbsd.org 2003/07/23 07:42:43 
[sshd_config]
     remove AFS; itojun@
 2003-08-02 22:31:45 +10:00
Darren Tucker 6aaa58c470 - (dtucker) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/07/22 13:35:22
     [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c
     monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1
     ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h]
     remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
     test+ok henning@
 - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support.
 - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files.

I hope I got this right....
 2003-08-02 22:24:49 +10:00
Darren Tucker 4c29dd9f44 - (dtucker) [monitor.h monitor_wrap.h] Remove excess ident tags. 2003-08-02 20:37:03 +10:00
Damien Miller 7f2d795e3f - (djm) [auth-pam.c] Don't use crappy APIs like sprintf. Thanks bal 2003-07-30 14:53:11 +10:00
Darren Tucker fbba5a0501 - (dtucker) [openbsd-compat/xcrypt.c] Fix typo: DISABLED_SHADOW -> 
DISABLE_SHADOW.  Fixes HP-UX compile error.
 2003-07-26 19:38:30 +10:00
Ben Lindstrom 0410e32f47 - (bal) [auth-passwd.c openbsd-compat/Makefile.in openbsd-compat/xcrypt.c 
openbsd-compat/xcrypt.h] Split off encryption into xcrypt() interface,
    and isolate shadow password functions.  Tested in Solaris, but should
    not break other platforms too badly (except maybe HP =).  Also brings
    auth-passwd.c into full sync with OpenBSD tree.
 2003-07-24 06:52:13 +00:00
Darren Tucker acb98497fb - (dtucker) [configure.ac] Back out change for bug #620. 2003-07-23 14:33:10 +10:00
Darren Tucker cca1bdb8a8 - djm@cvs.openbsd.org 2003/07/19 00:46:31 
[regress/sftp-cmds.sh]
     regress test for sftp arguments with escaped quotes; ok markus
 2003-07-19 20:11:54 +10:00
Darren Tucker 554d5b544a - djm@cvs.openbsd.org 2003/07/19 00:45:53 
[sftp-int.c]
     fix sftp filename parsing for arguments with escaped quotes. bz #517;
     ok markus
 2003-07-19 20:09:21 +10:00
Darren Tucker 03a29baf35 - deraadt@cvs.openbsd.org 2003/07/18 01:54:25 
[scp.c]
     userid is unsigned, but well, force it anyways; andrushock@korovino.net
 2003-07-19 20:07:45 +10:00
Darren Tucker 538d180395 - markus@cvs.openbsd.org 2003/07/16 10:36:28 
[sshtty.c]
     clear IUCLC in enter_raw_mode; from rob@pitman.co.za; ok deraadt@, fgs@
 2003-07-19 19:56:18 +10:00
Darren Tucker e98dfa323e - markus@cvs.openbsd.org 2003/07/16 10:34:53 
[ssh.c sshd.c]
     don't exit on multiple -v or -d; ok deraadt@
 2003-07-19 19:54:31 +10:00
Darren Tucker fe0078ae49 - markus@cvs.openbsd.org 2003/07/14 12:36:37 
[sshd.c]
     remove undocumented -V option. would be only useful if openssh is used
     as ssh v1 server for ssh.com's ssh v2.
 2003-07-19 19:52:28 +10:00
Darren Tucker 394b8c8db3 - (dtucker) [configure.ac] Bug #620: Define BROKEN_GETADDRINFO for 
Solaris/x86.  Patch from jrhett at isite.net.
 2003-07-19 19:49:45 +10:00
Darren Tucker 1a721156b0 - markus@cvs.openbsd.org 2003/07/10 20:05:55 
[sftp.c]
     sync usage with manpage, add missing -R
 2003-07-14 17:32:29 +10:00
Darren Tucker 81a0b371f4 - markus@cvs.openbsd.org 2003/07/10 14:42:28 
[packet.c]
     the 2^(blocksize*2) rekeying limit is too expensive for 3DES,
     blowfish, etc, so enforce a 1GB limit for small blocksizes.
 2003-07-14 17:31:06 +10:00