Commit Graph

2936 Commits

Author SHA1 Message Date
Damien Miller 341c6e687c - (djm) Bug #423: reorder setting of PAM_TTY and calling of PAM session
management (now done in do_setusercontext). Largely from
   michael_steffens AT hp.com
2003-09-02 23:18:52 +10:00
Damien Miller f4b6f10ded - (djm) Don't initialise pam_conv structures inline. Avoids HP/UX compiler
error. Part of Bug #423, patch from  michael_steffens AT hp.com
2003-09-02 23:12:06 +10:00
Damien Miller 0b56b45d6f fix date 2003-09-02 23:09:41 +10:00
Damien Miller 982d326045 - markus@cvs.openbsd.org 2003/09/01 20:44:54
[auth2-gss.c]
     fix leak
2003-09-02 22:59:01 +10:00
Damien Miller fb10e9abe8 - markus@cvs.openbsd.org 2003/09/01 18:15:50
[readconf.c readconf.h servconf.c servconf.h ssh.c]
     remove unused kerberos code; ok henning@
2003-09-02 22:58:22 +10:00
Damien Miller 46aa3b9139 - markus@cvs.openbsd.org 2003/09/01 13:52:18
[ssh.h]
     rm whitespace
2003-09-02 22:57:54 +10:00
Damien Miller 84d03efdf7 - markus@cvs.openbsd.org 2003/09/01 12:50:46
[readconf.c]
     rm gssapidelegatecreds alias; never supported before
2003-09-02 22:57:27 +10:00
Damien Miller 9b7b03b270 - markus@cvs.openbsd.org 2003/09/01 09:50:04
[sshd_config.5]
     gss kex is not supported; sxw@inf.ed.ac.uk
2003-09-02 22:57:05 +10:00
Damien Miller 134350c20c - markus@cvs.openbsd.org 2003/08/31 13:31:57
[gss-serv.c]
     whitspace KNF
2003-09-02 22:56:42 +10:00
Damien Miller a0c4ad21b6 - markus@cvs.openbsd.org 2003/08/31 13:30:18
[gss-serv.c]
     correct string termination in parse_ename(); sxw@inf.ed.ac.uk
2003-09-02 22:56:18 +10:00
Damien Miller 324948b320 - markus@cvs.openbsd.org 2003/08/31 13:29:05
[session.c]
     call ssh_gssapi_storecreds conditionally from do_exec();
     with sxw@inf.ed.ac.uk
2003-09-02 22:55:45 +10:00
Damien Miller b5829f56eb - markus@cvs.openbsd.org 2003/08/31 12:14:22
[progressmeter.c]
     do write to buf[-1]
2003-09-02 22:53:32 +10:00
Damien Miller 17af176302 - markus@cvs.openbsd.org 2003/08/31 10:26:04
[progressmeter.c]
     pass file_size + 1 to snprintf: fixes printing of truncated
     file names; fix based on patch/report from sturm@;
2003-09-02 22:53:01 +10:00
Damien Miller fbdeecef92 - markus@cvs.openbsd.org 2003/08/29 10:04:36
[channels.c nchan.c]
     be less chatty; debug -> debug2, cleanup; ok henning@
2003-09-02 22:52:31 +10:00
Damien Miller 7630ee2fa6 - markus@cvs.openbsd.org 2003/08/29 10:03:15
[compat.c compat.h]
     SSH_BUG_K5USER is unused; ok henning@
2003-09-02 22:52:00 +10:00
Damien Miller 1a0c0b9621 - markus@cvs.openbsd.org 2003/08/28 12:54:34
[auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c]
     [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5]
     [sshconnect1.c sshd.c sshd_config sshd_config.5]
     remove kerberos support from ssh1, since it has been replaced with GSSAPI;
     but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
2003-09-02 22:51:17 +10:00
Damien Miller 55c47edc81 - (djm) OpenBSD CVS Sync
- deraadt@cvs.openbsd.org 2003/08/24 17:36:51
     [auth2-gss.c]
     64 bit cleanups; markus ok
2003-09-02 22:14:07 +10:00
Ben Lindstrom 4d5dffce9f ChangeLog fix pointed out by Darren. Yes, we should not use $Id$ when
describing those changes. <chuckle>
2003-08-30 00:11:56 +00:00
Ben Lindstrom 515d0f9a1e - (bal) openbsd-compat/ clean up. Considate headers, add in $Id$ on our
files, and added missing license to header.
2003-08-29 16:59:52 +00:00
Darren Tucker 43a0dc6653 - (dtucker) [auth.c] Do not check for locked accounts when PAM is enabled. 2003-08-26 14:22:12 +10:00
Darren Tucker 2fae867806 - (dtucker) [contrib/aix/inventory.sh] Add public domain notice. ok mouring@
(the original author)
2003-08-26 13:43:12 +10:00
Darren Tucker 6ad50438ed - (dtucker) [Makefile.in] Remove auth2-krb5. 2003-08-26 12:22:04 +10:00
Darren Tucker 08bbb2f69d - djm@cvs.openbsd.org 2003/08/25 10:33:33
[sshconnect2.c]
     fprintf->logit to silence login banner with "ssh -q"; ok markus@
2003-08-26 12:14:05 +10:00
Darren Tucker 7858726e8a - fgsch@cvs.openbsd.org 2003/08/25 08:13:09
[sftp-int.c]
     fix div by zero when listing for filename lengths longer than width.
     markus@ ok.
2003-08-26 12:12:56 +10:00
Darren Tucker 600ad8de76 - deraadt@cvs.openbsd.org 2003/08/24 17:36:52
[monitor.c monitor_wrap.c sshconnect2.c]
     64 bit cleanups; markus ok
2003-08-26 12:10:48 +10:00
Darren Tucker 6b191a234c - markus@cvs.openbsd.org 2003/08/22 20:55:06
[LICENCE]
     add Simon Wilkinson
2003-08-26 12:09:53 +10:00
Darren Tucker 1e66a39e40 - markus@cvs.openbsd.org 2003/08/22 13:22:27
[auth2.c] (auth2-krb5.c removed)
     nuke "kerberos-2@ssh.com"
2003-08-26 12:08:15 +10:00
Darren Tucker be1a901f99 - markus@cvs.openbsd.org 2003/08/22 13:20:03
[sshconnect2.c]
     remove support for "kerberos-2@ssh.com"
2003-08-26 12:04:31 +10:00
Darren Tucker 49aaf4ad52 - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h
configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
   sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
2003-08-26 11:58:16 +10:00
Darren Tucker 0efd155c3c - markus@cvs.openbsd.org 2003/08/22 10:56:09
[auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c
     gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c
     readconf.h servconf.c servconf.h session.c session.h ssh-gss.h
     ssh_config.5 sshconnect2.c sshd_config sshd_config.5]
     support GSS API user authentication; patches from Simon Wilkinson,
     stripped down and tested by Jakob and myself.
2003-08-26 11:49:55 +10:00
Damien Miller 30912f7259 - (djm) Bug #629: Mark ssh_config option "pamauthenticationviakbdint"
as deprecated. Remove mention from README.privsep. Patch from
   aet AT cc.hut.fi
2003-08-26 10:48:14 +10:00
Darren Tucker 36ca53a5a0 - (dtucker) [README buildbff.sh inventory.sh] (all in contrib/aix)
Update package builder: correctly handle config variables, use lsuser
   rather than /etc/passwd, fix typos, add Id's.
2003-08-25 15:01:04 +10:00
Darren Tucker 3c8e1e1bbf - (dtucker) [configure.ac] Bug #533, #551: define BROKEN_GETADDRINFO on
Tru64, solves getnameinfo and "bad addr or host" errors.  ok djm@
2003-08-25 13:27:40 +10:00
Damien Miller 1f499fd368 - (djm) Bug #564: Perform PAM account checks for all authentications when
UsePAM=yes; ok dtucker
2003-08-25 13:08:49 +10:00
Darren Tucker e41bba5847 - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny
any access to locked accounts.  ok djm@
2003-08-25 11:51:19 +10:00
Ben Lindstrom 5ade9abc37 - (bal) redo how we handle 'mysignal()'. Move it to
openbsd-compat/bsd-misc.c, s/mysignal/signal/ and #define signal to
   be our 'mysignal' by default.  OK djm@
2003-08-25 01:16:21 +00:00
Ben Lindstrom af4a6c3a56 - (bal) openbsd-compat/ OpenBSD updates. Mostly licensing, ansifications
and minor fixes.
2003-08-25 01:10:51 +00:00
Damien Miller 331b6af8fa - (djm) Bug #621: Select OpenSC keys by usage attributes. Patch from
larsch@trustcenter.de
2003-08-25 10:58:26 +10:00
Darren Tucker 49d32566c2 - (dtucker) [contrib/cygwin/ssh-user-config] Put keys in authorized_keys
rather that authorized_keys2.  Patch from vinschen@redhat.com.
2003-08-22 18:43:48 +10:00
Damien Miller 59d3d5b8b4 - (djm) s/get_progname/ssh_get_progname/g to avoid conflict with Heimdal
-lbroken; ok dtucker
2003-08-22 09:34:41 +10:00
Darren Tucker 70a3d55b4a - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement
and after normal openpty test.
2003-08-21 17:58:29 +10:00
Darren Tucker 8e3653d2f3 - (dtucker) [defines.h] Put CMSG_DATA, CMSG_FIRSTHDR with other CMSG* macros,
change CMSG_DATA to use __CMSG_ALIGN (and thus work properly), reformat for
   consistency.
2003-08-21 16:49:41 +10:00
Darren Tucker f4220e6cef - markus@cvs.openbsd.org 2003/08/14 16:08:58
[ssh-keygen.c]
     exit after primetest, ok djm@
2003-08-21 16:44:07 +10:00
Darren Tucker f38ea77c03 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
Add a tcsendbreak function for platforms that don't have one, based on the
   one from OpenBSD.

Any more of these and I'll split them out into bsd-termio.[ch].
2003-08-13 20:48:07 +10:00
Darren Tucker 1c52ee3e6f - markus@cvs.openbsd.org 2003/08/13 09:07:10
[readconf.c ssh.c]
     socks4->socks, since with support both 4 and 5; dtucker@zip.com.au
2003-08-13 20:38:36 +10:00
Darren Tucker ec960f2c93 - markus@cvs.openbsd.org 2003/08/13 08:46:31
[auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
     ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
     remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
     fgsch@, miod@, henning@, jakob@ and others
2003-08-13 20:37:05 +10:00
Darren Tucker 3bdbd848ea - markus@cvs.openbsd.org 2003/08/13 08:33:02
[session.c]
     use more portable tcsendbreak(3) and ignore break_length;
     ok deraadt, millert
2003-08-13 20:31:05 +10:00
Darren Tucker d85efee437 - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge. 2003-08-13 20:28:14 +10:00
Darren Tucker bc8c8f36fb - (dtucker) [openbsd-compat/xcrypt.c] Remove Cygwin #ifdef block (duplicate
in bsd-cygwin_util.h).
2003-08-11 23:00:33 +10:00
Darren Tucker ec0943a96c - (dtucker) OpenBSD CVS Sync
(thanks to Simon Wilkinson for help with this -dt)
   - markus@cvs.openbsd.org 2003/07/16 15:02:06
     [auth-krb5.c]
     mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
     otherwise the kerberos credentinal is stored in a memory cache
     in the privileged sshd. ok jabob@, hin@ (some time ago)
2003-08-11 22:55:36 +10:00