Damien Miller
39eda6eb6a
- djm@cvs.openbsd.org 2005/10/10 10:23:08
...
[channels.c channels.h clientloop.c serverloop.c session.c]
fix regression I introduced in 4.2: X11 forwardings initiated after
a session has exited (e.g. "(sleep 5; xterm) &") would not start.
bz #1086 reported by t8m AT centrum.cz; ok markus@ dtucker@
2005-11-05 14:52:50 +11:00
Damien Miller
3f54a9f5b7
- (djm) OpenBSD CVS Sync
...
- markus@cvs.openbsd.org 2005/10/07 11:13:57
[ssh-keygen.c]
change DSA default back to 1024, as it's defined for 1024 bits only
and this causes interop problems with other clients. moreover,
in order to improve the security of DSA you need to change more
components of DSA key generation (e.g. the internal SHA1 hash);
ok deraadt
2005-11-05 14:52:18 +11:00
Darren Tucker
d32e293c04
- (dtucker) [openbsd-compat/bsd-misc.c] Bug #1108 : fix broken strdup().
...
Reported by olavi at ipunplugged.com and antoine.brodin at laposte.net
via FreeBSD.
2005-11-02 09:07:31 +11:00
Darren Tucker
42308a4374
- (dtucker) [session.c] Bug #1045do not check /etc/nologin when PAM is
...
enabled, instead allow PAM to handle it. Note that on platforms using PAM,
the pam_nologin module should be added to sshd's session stack in order to
maintain exising behaviour. Based on patch and discussion from t8m at
centrum.cz, ok djm@
2005-10-30 15:31:55 +11:00
Damien Miller
88edf6255b
- (djm) [contrib/suse/openssh.spec contrib/suse/rc.
...
sshd contrib/suse/sysconfig.ssh] Bug #1106 : Updated SuSE spec and init
files from imorgan AT nas.nasa.gov
2005-10-30 11:55:45 +11:00
Darren Tucker
a841dceb4c
- (dtucker) [contrib/cygwin/ssh-user-config] Remove duplicate yes/no
...
prompt. Patch from vinschen at redhat.com.
2005-10-25 18:55:00 +10:00
Darren Tucker
e737455430
- (dtucker) [configure.ac] Bug #1104 : Tru64's printf family doesn't
...
understand "%lld", even though the compiler has "long long", so handle
it as a special case. Patch tested by mcaskill.scott at epa.gov.
(actually was included in previous commit)
2005-10-25 18:52:31 +10:00
Darren Tucker
537f1ed7df
- (dtucker) [configure.ac] Relocate LLONG_MAX calculation to after the
...
sizeof(long long) checks, to make fixing bug #1104 easier (no changes
yet).
2005-10-25 18:38:33 +10:00
Darren Tucker
314d89e050
- (dtucker) [configure.ac] Bug #1097 : Fix configure for cross-compiling.
...
/etc/default/login report and testing from aabaker at iee.org, corrections
from tim@.
2005-10-17 23:29:23 +10:00
Darren Tucker
9ac1a65acb
- (dtucker) [configure.ac defines.h openbsd-compat/vis.{c,h}] Sync current
...
versions from OpenBSD. ok djm@
2005-10-09 11:40:03 +10:00
Damien Miller
e04ec6fdfd
- (djm) [configure.ac] missing 'test' call for -with-Werror test
2005-10-08 16:21:19 +10:00
Darren Tucker
1e6616bb14
- (dtucker) [configure.ac] Bug #1098 : define $MAIL for HP-UX; report from
...
brian.smith at agilent com.
2005-10-08 12:07:01 +10:00
Darren Tucker
ac7e630b85
typo
2005-10-06 01:39:58 +10:00
Darren Tucker
b18f15100a
- (dtucker) [configure.ac sshd.8] Enable locked account check (a prepended
...
"*LOCKED*" string) for FreeBSD. Patch jeremie at le-hen.org and
senthilkumar_sen at hotpop.com.
2005-10-05 23:02:16 +10:00
Darren Tucker
1f85dc7034
- (dtucker) [regress/README.regress] Bug #989 : Document limitation that scp
...
is required in the system path for the multiplex test to work.
2005-10-03 20:14:18 +10:00
Darren Tucker
b0b12296f9
- dtucker@cvs.openbsd.org 2005/10/03 07:44:42
...
[canohost.c]
Relocate check_ip_options call to prevent logging of garbage for
connections with IP options set. bz#1092 from David Leonard,
"looks good" deraadt@
2005-10-03 18:23:44 +10:00
Darren Tucker
28e8e59b35
- jaredy@cvs.openbsd.org 2005/09/30 20:34:26
...
[ssh-keyscan.1]
deploy .An -nosplit; ok jmc
2005-10-03 18:20:28 +10:00
Darren Tucker
45b0142643
- djm@cvs.openbsd.org 2005/09/21 23:37:11
...
[sshd.c]
change label at markus@'s request
2005-10-03 18:20:00 +10:00
Darren Tucker
e2dd2d5baa
- djm@cvs.openbsd.org 2005/09/21 23:36:54
...
[sshd_config.5]
aquire -> acquire, from stevesk@
2005-10-03 18:19:06 +10:00
Darren Tucker
1e4308e6fa
- djm@cvs.openbsd.org 2005/09/19 23:31:31
...
[ssh.1]
spelling nit from stevesk@
2005-10-03 18:18:40 +10:00
Darren Tucker
895d698515
- jmc@cvs.openbsd.org 2005/09/19 15:42:44
...
[ssh.c]
update -D usage here too;
2005-10-03 18:18:05 +10:00
Darren Tucker
05d4dfe38f
- jmc@cvs.openbsd.org 2005/09/19 15:38:27
...
[ssh.1]
some more .Bk/.Ek to avoid ugly line split;
2005-10-03 18:17:38 +10:00
Darren Tucker
8813bbbca9
- djm@cvs.openbsd.org 2005/09/19 11:48:10
...
[gss-serv.c]
typo
2005-10-03 18:17:02 +10:00
Darren Tucker
a2cdbda2de
- djm@cvs.openbsd.org 2005/09/19 11:47:09
...
[sshd.c]
stop connection abort on rekey with delayed compression enabled when
post-auth privsep is disabled (e.g. when root is logged in); ok dtucker@
2005-10-03 18:16:02 +10:00
Darren Tucker
c8d6421a64
- djm@cvs.openbsd.org 2005/09/19 11:37:34
...
[ssh_config.5 ssh.1]
mention ability to specify bind_address for DynamicForward and -D options;
bz#1077 spotted by Haruyama Seigo
2005-10-03 18:13:42 +10:00
Darren Tucker
ce321d8a30
- djm@cvs.openbsd.org 2005/09/13 23:40:07
...
[sshd.c ssh.c misc.h sftp.c ssh-keygen.c ssh-keysign.c sftp-server.c
scp.c misc.c ssh-keyscan.c ssh-add.c ssh-agent.c]
ensure that stdio fds are attached; ok deraadt@
2005-10-03 18:11:24 +10:00
Darren Tucker
d89dbf29ff
- markus@cvs.openbsd.org 2005/09/09 19:18:05
...
[clientloop.c]
typo; from mark at mcs.vuw.ac.nz, bug #1082
2005-10-03 18:05:26 +10:00
Darren Tucker
d3d0fa1558
- markus@cvs.openbsd.org 2005/09/07 08:53:53
...
[channels.c]
enforce chanid != NULL; ok djm
2005-10-03 18:03:05 +10:00
Darren Tucker
d4f04ae247
- (dtucker) [monitor.c] Bug #1087 : Send loginmsg to preauth privsep
...
child during PAM account check without clearing it. This restores the
post-login warnings such as LDAP password expiry. Patch from Tomas Mraz
with help from several others.
2005-09-30 10:23:21 +10:00
Darren Tucker
6e4221129e
- (dtucker) [openbsd-compat/openbsd-compat.h] Bug #1096 : Add prototype
...
for strtoll. Patch from o.flebbe at science-computing.de.
2005-09-30 09:55:49 +10:00
Darren Tucker
372c8fbe9b
- (dtucker) [monitor_wrap.c] Remove duplicate definition of loginmsg
...
introduced during sync.
2005-09-29 22:01:10 +10:00
Darren Tucker
7b1e695846
- (dtucker) [auth-pam.c] Bug #1028 : send final non-query messages from
...
PAM via keyboard-interactive. Patch tested by the folks at Vintela.
2005-09-28 22:33:27 +10:00
Darren Tucker
46e7ba5d53
- (dtucker) [entropy.c] Use u_char for receiving RNG seed for consistency
2005-09-28 08:26:30 +10:00
Darren Tucker
c6f8219e0d
- (dtucker) [entropy.c entropy.h sshd.c] Pass RNG seed to the reexec'ed
...
process when sshd relies on ssh-random-helper. Should result in faster
logins on systems without a real random device or prngd. ok djm@
2005-09-27 22:46:32 +10:00
Darren Tucker
f1377bdeed
- (dtucker) [entropy.c] Remove unnecessary tests for getuid and geteuid
...
calls, since they can't possibly fail. ok djm@
2005-09-27 19:50:25 +10:00
Darren Tucker
d3eff2bfa5
- (dtucker) [auth2.c] Move start_pam() calls out of if-else block to remove
...
duplicate call. ok djm@
2005-09-24 12:43:51 +10:00
Darren Tucker
82171c6607
- (dtucker) [configure.ac] Fix help for --with-opensc; patch from skeleten at
...
shillest.net.
2005-09-22 20:19:54 +10:00
Darren Tucker
c373a56343
- (dtucker) [configure.ac] Use -R linker flag for libedit too; patch from
...
skeleten at shillest.net.
2005-09-22 20:15:08 +10:00
Tim Rice
542f62b9d2
remove acconfig.h
2005-09-19 09:36:55 -07:00
Tim Rice
7df8d39a5f
- (tim) [aclocal.m4 configure.ac] Delete acconfig.h and add templates to
...
AC_DEFINE and AC_DEFINE_UNQUOTED to quiet autoconf 2.59 warning messages.
2005-09-19 09:33:39 -07:00
Tim Rice
fd9e9e3ba6
- (tim) [configure.ac] Bug 1078. Fix --without-kerberos5. Reported by
...
Mike Frysinger.
2005-09-12 17:36:10 -07:00
Tim Rice
784d4f538f
Last commit skipped defines.h
...
- (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to
OpenServer 6 and add osr5bigcrypt support so when someone migrates
passwords between UnixWare and OpenServer they will still work. OK dtucker@
2005-09-08 22:04:59 -07:00
Tim Rice
64ead485ac
- (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to
...
OpenServer 6 and add osr5bigcrypt support so when someone migrates
passwords between UnixWare and OpenServer they will still work. OK dtucker@
2005-09-08 21:56:33 -07:00
Damien Miller
c8ab8ceacb
- (djm) Update RPM spec file versions
2005-09-01 19:10:48 +10:00
Tim Rice
66fd217e8e
- (tim) [configure.ac auth.c defines.h session.c openbsd-compat/port-uw.c
...
openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] libiaf cleanup. Disable
libiaf bits for OpenServer6. Free memory allocated by ia_get_logpwd().
Feedback and OK dtucker@
2005-08-31 09:59:49 -07:00
Darren Tucker
d0a47cd243
- (dtucker) [README] Update release note URL to 4.2
2005-09-01 00:05:56 +10:00
Damien Miller
ae37959bfb
- markus@cvs.openbsd.org 2005/08/31 09:28:42
...
[version.h]
4.2
2005-08-31 19:47:07 +10:00
Damien Miller
da9984fc3a
- (djm) OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2005/08/30 22:08:05
[gss-serv.c sshconnect2.c]
destroy credentials if krb5_kuserok() call fails. Stops credentials being
delegated to users who are not authorised for GSSAPIAuthentication when
GSSAPIDeletegateCredentials=yes and another authentication mechanism
succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
2005-08-31 19:46:26 +10:00
Damien Miller
ca9ce95bdd
correct bug number
2005-08-31 19:42:20 +10:00
Tim Rice
eb456545fd
- (tim) [configure.ac] Back out last change. It needs to be done differently.
2005-08-30 07:12:02 -07:00