Commit Graph

173 Commits

Author SHA1 Message Date
Darren Tucker 5f88d3440e - (dtucker) [acconfig.h configure.ac dns.c openbsd-compat/getrrsetbyname.c
openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always
   compiled in but disabled in config.
2003-10-15 16:57:57 +10:00
Darren Tucker 89df7a3eca - (dtucker) [configure.ac] Bug #710: Check for dlsym() in libdl on
Reliant Unix.  Based on patch from Robert.Dahlem at siemens.com.
2003-10-07 20:35:57 +10:00
Darren Tucker 3b2a06c0d7 - (dtucker) [configure.ac] Bug #715: Set BROKEN_SETREUID and BROKEN_SETREGID
on Reliant Unix.  Patch from Robert.Dahlem at siemens.com.
2003-10-07 18:37:11 +10:00
Darren Tucker 2e8c0cc752 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoul.c]
Bug #670: add strtoul() to openbsd-compat for platforms lacking it.  ok djm@
2003-10-07 17:49:56 +10:00
Darren Tucker 0ccb59b85c - (dtucker) [configure.ac] Don't set DISABLE_SHADOW when configuring
--with-pam.  ok djm@
2003-10-02 16:26:34 +10:00
Darren Tucker b88fcc755d - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove
DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam.  Patch from
   michael_steffens at hp.com, ok djm@
2003-09-25 20:18:33 +10:00
Darren Tucker beaf6790e1 - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6. 2003-09-24 20:03:48 +10:00
Damien Miller 5c3a55846a - (djm) Sync with V_3_7 branch:
- (djm) Fix SSH1 challenge kludge
   - (djm) Bug #671: Fix builds on OpenBSD
   - (djm) Bug #676: Fix PAM stack corruption
   - (djm) Fix bad free() in PAM code
   - (djm) Don't call pam_end before pam_init
   - (djm) Enable build with old OpenSSL again
   - (djm) Trim deprecated options from INSTALL. Mention UsePAM
   - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
2003-09-23 22:12:38 +10:00
Tim Rice 7ff4e6dbe5 [configure.ac] add --disable-etc-default-login option. ok djm 2003-09-22 19:50:14 -07:00
Tim Rice 480ef8ddae [configure.ac] Bug 665: move 3 new AC_DEFINES outside of AC_TRY_RUN.
Report by distler AT golem ph utexas edu.
2003-09-21 21:38:11 -07:00
Tim Rice 7a74c6b428 Fix typo. s/SETEIUD_BREAKS_SETUID/SETEUID_BREAKS_SETUID/ 2003-09-21 21:00:59 -07:00
Darren Tucker d5e082f0d5 - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c
openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with
   where gai_strerror is defined as "const char *".  Part of patch supplied
   by bugzilla-openssh at thewrittenword.com
2003-09-22 12:08:23 +10:00
Darren Tucker be79af1dfe - (dtucker) [configure.ac] Bug #659: uid swapping issues on IRIX 6.
Part of patch supplied by bugzilla-openssh at thewrittenword.com
2003-09-22 11:58:21 +10:00
Darren Tucker 0013011529 - (dtucker) [configure.ac] Bug #693: uid swapping issues on NCR MP-RAS.
Patch from david.haughton at ncr.com
2003-09-22 11:40:24 +10:00
Darren Tucker ed92b21321 - (dtucker) [configure.ac] Bug #653: uid swapping issues on Tru64. 2003-09-22 11:26:16 +10:00
Darren Tucker ed9eb02326 - (dtucker) [configure.ac] Bug #657: uid swappping issues on BSDi. 2003-09-22 11:18:47 +10:00
Darren Tucker 20379a37fa - (dtucker) [configure.ac] Bug #655: uid swapping issues on Mac OS X.
Patch from max at quendi.de.
2003-09-22 11:07:40 +10:00
Damien Miller f09ad861e6 - (djm) Bug #661: Remove duplicate check for basename; from
bugzilla-openssh AT thewrittenword.com
2003-09-19 16:41:01 +10:00
Tim Rice b925b4b82f [configure.ac] Fix portability issues. 2003-09-15 22:40:49 -07:00
Darren Tucker e1a790d0d1 - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: Retrieve
PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it
   (eg Solaris, Reliant Unix).  Patch from Robert.Dahlem at siemens.com.  ok djm@
2003-09-16 11:52:19 +10:00
Tim Rice ae477e922e [configure.ac] define WITH_ABBREV_NO_TTY for SCO. Report by Roger Cornelius. 2003-09-12 18:15:15 -07:00
Tim Rice d546a84ef6 [configure.ac] Prefer setuid/setgid on UnixWare and Open Server. 2003-09-11 22:24:36 -07:00
Tim Rice 1e1ef64566 [configure.ac] Move libgen tests to before libwrap to unbreak
UnixWare 2.03 using --with-tcp-wrappers.
2003-09-11 22:19:31 -07:00
Darren Tucker c82afd5c88 - (dtucker) [configure.ac] Bug #588, #615: Move other libgen tests to after
the dirname test, to allow a broken dirname to be detected correctly.
   Based partially on patch supplied by alex.kiernan at thus.net.  ok djm@
2003-09-11 14:42:55 +10:00
Darren Tucker b2427c82bb - (dtucker) [configure.ac] Part of bug #615: tcsendbreak might be a macro. 2003-09-10 15:22:44 +10:00
Darren Tucker 9f7ffc5a17 - (dtucker) [configure.ac] Bug #636: Add support for Cray's new X1 machine.
Patch from wendyp at cray.com.
2003-09-10 11:39:05 +10:00
Tim Rice b284e16c10 [configure.ac acconfig.h openbsd-compat/getrrsetbyname.c] test for
HEADER.ad in arpa/nameser.h
2003-09-08 14:35:16 -07:00
Tim Rice 0ac16a4492 [configure.ac openbsd-compat/getrrsetbyname.c] wrap _getshort and
_getlong in #ifndef
2003-09-08 06:33:33 -07:00
Darren Tucker 167bd9cfef - (dtucker) [CREDITS Makefile.in configure.ac mdoc2man.awk mdoc2man.pl]
Replace mdoc2man.pl with mdoc2man.awk, provided by Peter Stuge.
2003-09-07 12:34:54 +10:00
Darren Tucker 9f18be63ab - (dtucker) [acconfig.h configure.ac uidswap.c] Prefer setuid/setgid on AIX. 2003-09-06 16:44:39 +10:00
Darren Tucker 49aaf4ad52 - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h
configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
   sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
2003-08-26 11:58:16 +10:00
Darren Tucker 3c8e1e1bbf - (dtucker) [configure.ac] Bug #533, #551: define BROKEN_GETADDRINFO on
Tru64, solves getnameinfo and "bad addr or host" errors.  ok djm@
2003-08-25 13:27:40 +10:00
Darren Tucker e41bba5847 - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny
any access to locked accounts.  ok djm@
2003-08-25 11:51:19 +10:00
Darren Tucker 70a3d55b4a - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement
and after normal openpty test.
2003-08-21 17:58:29 +10:00
Darren Tucker f38ea77c03 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
Add a tcsendbreak function for platforms that don't have one, based on the
   one from OpenBSD.

Any more of these and I'll split them out into bsd-termio.[ch].
2003-08-13 20:48:07 +10:00
Darren Tucker 6aaa58c470 - (dtucker) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/07/22 13:35:22
     [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c
     monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1
     ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h]
     remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
     test+ok henning@
 - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support.
 - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files.

I hope I got this right....
2003-08-02 22:24:49 +10:00
Darren Tucker acb98497fb - (dtucker) [configure.ac] Back out change for bug #620. 2003-07-23 14:33:10 +10:00
Darren Tucker 700e4380ce Typo: BROKEN_ADDRINFO -> BROKEN_GETADDRINFO 2003-07-19 21:28:31 +10:00
Darren Tucker 394b8c8db3 - (dtucker) [configure.ac] Bug #620: Define BROKEN_GETADDRINFO for
Solaris/x86.  Patch from jrhett at isite.net.
2003-07-19 19:49:45 +10:00
Darren Tucker fc3454ee67 - (dtucker) Bug #543: [configure.ac port-aix.c port-aix.h]
Call setauthdb() before loginfailed(), which may load password registry-
   specific functions.  Based on patch by cawlfiel@us.ibm.com.
2003-07-14 16:41:55 +10:00
Darren Tucker 5c6a91a39d - (dtucker) [acconfig.h configure.ac port-aix.c] Older AIXes don't declare
loginfailed at all, so assume 3-arg loginfailed if not declared.
2003-07-14 16:21:44 +10:00
Darren Tucker a0c0b63112 - (dtucker) [acconfig.h auth-passwd.c configure.ac session.c port-aix.[ch]]
Include AIX headers for authentication functions and make calls match
   prototypes.  Test for and handle 3-args and 4-arg variants of loginfailed.
2003-07-08 20:52:12 +10:00
Darren Tucker f1159b5b29 - (dtucker) [configure.ac] Bug #600: Check that getrusage is declared before
searching libraries for it.  Fixes build errors on NCR MP-RAS.
2003-07-07 19:44:01 +10:00
Damien Miller 200d0a7bf5 - (djm) Search for support functions necessary to build our
getrrsetbyname() replacement. Patch from Roumen Petrov
2003-06-30 19:21:36 +10:00
Darren Tucker 6eb9304782 - (dtucker) [configure.ac] Add sanity test after system-dependant compiler
flag modifications.
2003-06-29 21:30:41 +10:00
Darren Tucker a3020db6b4 - (dtucker) [configure.ac] Bug #570: Have ./configure --enable-FEATURE
actually enable the feature, for those normally disabled.  Patch by
   openssh (at) roumenpetrov.info.
2003-06-28 12:54:33 +10:00
Darren Tucker a0472e095d - (dtucker) Have configure refer the user to config.log and
contrib/findssl.sh for OpenSSL header/library mismatches.
2003-06-24 20:22:09 +10:00
Damien Miller 5fe46a45c8 - (djm) Implement paranoid priv dropping checks, based on:
"SetUID demystified" - Hao Chen, David Wagner and Drew Dean
   Proceedings of USENIX Security Symposium 2002
2003-06-05 09:53:31 +10:00
Damien Miller 35276253a6 - (djm) Replace setproctitle replacement with code derived from
UCB sendmail
2003-06-03 10:14:28 +10:00
Darren Tucker 2972d6c045 - (dtucker) Define SSHD_ACQUIRES_CTTY for NCR MP-RAS and Reliant Unix.
I'm pretty sure these are required.  I also want to add -D_XOPEN_SOURCE=1
-D_XOPEN_SOURCE_EXTENDED=1 to CPPFLAGS for MP-RAS but I haven't had confirmation
that it will not break anything else.
2003-05-30 17:43:42 +10:00