markus@openbsd.org 
							
						 
					 
					
						
						
						
						
							
						
						
							b8d9214d96 
							
						 
					 
					
						
						
							
							upstream: sshd: switch GSSAPI to sshbuf API; ok djm@  
						
						... 
						
						
						
						OpenBSD-Commit-ID: e48449ab4be3f006f7ba33c66241b7d652973e30 
						
						
					 
					
						2018-07-10 15:28:30 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							450bc1180d 
							
						 
					 
					
						
						
							
							- (dtucker) [auth2-gss.c gss-serv-krb5.c] Include misc.h for fwd_opts, used  
						
						... 
						
						
						
						in servconf.h. 
						
						
					 
					
						2014-07-19 06:23:18 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							c74e70eb52 
							
						 
					 
					
						
						
							
							- (dtucker) [gss-serv-krb5.c] Fall back to krb5_cc_gen_new if the Kerberos  
						
						... 
						
						
						
						implementation does not have krb5_cc_new_unique, similar to what we do
   in auth-krb5.c. 
						
						
					 
					
						2014-01-20 13:18:09 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							63ddc899d2 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2013/07/20 01:55:13  
						
						... 
						
						
						
						[auth-krb5.c gss-serv-krb5.c gss-serv.c]
     fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@ 
						
						
					 
					
						2013-07-20 13:35:45 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							ded319cca2 
							
						 
					 
					
						
						
							
							- (djm) [audit-bsm.c audit.c auth-bsdauth.c auth-chall.c auth-pam.c]  
						
						... 
						
						
						
						[auth-rsa.c auth-shadow.c auth-sia.c auth1.c auth2-chall.c]
   [auth2-gss.c auth2-kbdint.c auth2-none.c authfd.c authfile.c]
   [cipher-3des1.c cipher-aes.c cipher-bf1.c cipher-ctr.c clientloop.c]
   [dh.c dns.c entropy.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c]
   [kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c loginrec.c mac.c]
   [md5crypt.c monitor.c monitor_wrap.c readconf.c rsa.c]
   [scard-opensc.c scard.c session.c ssh-add.c ssh-agent.c ssh-dss.c]
   [ssh-keygen.c ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c]
   [sshconnect1.c sshconnect2.c sshd.c rc4.diff]
   [openbsd-compat/bsd-cray.c openbsd-compat/port-aix.c]
   [openbsd-compat/port-linux.c openbsd-compat/port-solaris.c]
   [openbsd-compat/port-uw.c]
   Lots of headers for SCO OSR6, mainly adding stdarg.h for log.h;
   compile problems reported by rac AT tenzing.org 
						
						
					 
					
						2006-09-01 15:38:36 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							d783435315 
							
						 
					 
					
						
						
							
							- deraadt@cvs.openbsd.org 2006/08/03 03:34:42  
						
						... 
						
						
						
						[OVERVIEW atomicio.c atomicio.h auth-bsdauth.c auth-chall.c auth-krb5.c]
     [auth-options.c auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
     [auth-rsa.c auth-skey.c auth.c auth.h auth1.c auth2-chall.c auth2-gss.c]
     [auth2-hostbased.c auth2-kbdint.c auth2-none.c auth2-passwd.c ]
     [auth2-pubkey.c auth2.c authfd.c authfd.h authfile.c bufaux.c bufbn.c]
     [buffer.c buffer.h canohost.c channels.c channels.h cipher-3des1.c]
     [cipher-bf1.c cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c]
     [compress.c deattack.c dh.c dispatch.c dns.c dns.h fatal.c groupaccess.c]
     [groupaccess.h gss-genr.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c]
     [kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c]
     [key.h log.c log.h mac.c match.c md-sha256.c misc.c misc.h moduli.c]
     [monitor.c monitor_fdpass.c monitor_mm.c monitor_mm.h monitor_wrap.c]
     [monitor_wrap.h msg.c nchan.c packet.c progressmeter.c readconf.c]
     [readconf.h readpass.c rsa.c scard.c scard.h scp.c servconf.c servconf.h]
     [serverloop.c session.c session.h sftp-client.c sftp-common.c]
     [sftp-common.h sftp-glob.c sftp-server.c sftp.c ssh-add.c ssh-agent.c]
     [ssh-dss.c ssh-gss.h ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rsa.c]
     [ssh.c ssh.h sshconnect.c sshconnect.h sshconnect1.c sshconnect2.c]
     [sshd.c sshlogin.c sshlogin.h sshpty.c sshpty.h sshtty.c ttymodes.c]
     [uidswap.c uidswap.h uuencode.c uuencode.h xmalloc.c xmalloc.h]
     [loginrec.c loginrec.h openbsd-compat/port-aix.c openbsd-compat/port-tun.h]
     almost entirely get rid of the culture of ".h files that include .h files"
     ok djm, sort of ok stevesk
     makes the pain stop in one easy step
     NB. portable commit contains everything *except* removing includes.h, as
     that will take a fair bit more work as we move headers that are required
     for portability workarounds to defines.h. (also, this step wasn't "easy") 
						
						
					 
					
						2006-08-05 12:39:39 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							b8fe89c4d9 
							
						 
					 
					
						
						
							
							- (djm) [acss.c auth-krb5.c auth-options.c auth-pam.c auth-shadow.c]  
						
						... 
						
						
						
						[canohost.c channels.c cipher-acss.c defines.h dns.c gss-genr.c]
   [gss-serv-krb5.c gss-serv.c log.h loginrec.c logintest.c readconf.c]
   [servconf.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c]
   [ssh.c sshconnect.c sshd.c openbsd-compat/bindresvport.c]
   [openbsd-compat/bsd-arc4random.c openbsd-compat/bsd-misc.c]
   [openbsd-compat/getrrsetbyname.c openbsd-compat/glob.c]
   [openbsd-compat/mktemp.c openbsd-compat/port-linux.c]
   [openbsd-compat/port-tun.c openbsd-compat/readpassphrase.c]
   [openbsd-compat/setproctitle.c openbsd-compat/xmmap.c]
   make the portable tree compile again - sprinkle unistd.h and string.h
   back in. Don't redefine __unused, as it turned out to be used in
   headers on Linux, and replace its use in auth-pam.c with ARGSUSED 
						
						
					 
					
						2006-07-24 14:51:00 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							5d3ac7f7ee 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/02 18:36:47  
						
						... 
						
						
						
						[gss-serv-krb5.c gss-serv.c]
     no "servconf.h" needed here
     (gss-serv-krb5.c change not applied, portable needs the server options) 
						
						
					 
					
						2006-07-10 20:17:55 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							51096383e9 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2006/03/25 22:22:43  
						
						... 
						
						
						
						[atomicio.h auth-options.h auth.h auth2-gss.c authfd.h authfile.h]
     [bufaux.h buffer.h canohost.h channels.h cipher.h clientloop.h]
     [compat.h compress.h crc32.c crc32.h deattack.h dh.h dispatch.h]
     [dns.c dns.h getput.h groupaccess.h gss-genr.c gss-serv-krb5.c]
     [gss-serv.c hostfile.h includes.h kex.h key.h log.h mac.h match.h]
     [misc.h monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h msg.h]
     [myproposal.h packet.h pathnames.h progressmeter.h readconf.h rsa.h]
     [scard.h servconf.h serverloop.h session.h sftp-common.h sftp.h]
     [ssh-gss.h ssh.h ssh1.h ssh2.h sshconnect.h sshlogin.h sshpty.h]
     [ttymodes.h uidswap.h uuencode.h xmalloc.h]
     standardise spacing in $OpenBSD$ tags; requested by deraadt@ 
						
						
					 
					
						2006-03-26 14:30:00 +11:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							890909ec48 
							
						 
					 
					
						
						
							
							- (dtucker) [gss-serv-krb5.c] Bug  #1166 : Correct #ifdefs for gssapi_krb5.h  
						
						... 
						
						
						
						includes.  Patch from gentoo.riverrat at gmail.com. 
						
						
					 
					
						2006-03-04 08:59:39 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							5f916c8f6c 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2005/10/13 19:08:08  
						
						... 
						
						
						
						[gss-serv-krb5.c gss-serv.c]
     unused declarations; ok deraadt@
     (id sync only for gss-serv-krb5.c) 
						
						
					 
					
						2005-11-05 15:05:28 +11:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							893c602ef0 
							
						 
					 
					
						
						
							
							- (dtucker) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Remove  
						
						... 
						
						
						
						calls to krb5_init_ets, which has not been required since krb-1.1.x and
   most Kerberos versions no longer export in their public API.  From sxw
   at inf.ed.ac.uk, ok djm@ 
						
						
					 
					
						2005-07-07 20:33:36 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							a916d143a1 
							
						 
					 
					
						
						
							
							- [auth-krb5.c auth.h gss-serv-krb5.c] Move KRB5CCNAME generation for the MIT  
						
						... 
						
						
						
						Kerberos code path into a common function and expand mkstemp template to be
   consistent with the rest of OpenSSH.  From sxw at inf.ed.ac.uk, ok djm@ 
						
						
					 
					
						2005-07-07 11:50:20 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							066969339d 
							
						 
					 
					
						
						
							
							- (dtucker) [auth-krb5.c gss-serv-krb5.c openbsd-compat/xmmap.c]  
						
						... 
						
						
						
						Explicitly set umask for mkstemp; ok djm@ 
						
						
					 
					
						2004-08-14 23:55:37 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							10a445b9e5 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2004/07/21 10:36:23  
						
						... 
						
						
						
						[gss-serv-krb5.c]
     fix function declaration 
						
						
					 
					
						2004-07-21 20:49:39 +10:00 
						 
				 
			
				
					
						
							
							
								Ben Lindstrom 
							
						 
					 
					
						
						
						
						
							
						
						
							a8104b5c92 
							
						 
					 
					
						
						
							
							- (bal) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Check to see  
						
						... 
						
						
						
						if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X)
   are starting to restrict it as internal since it is not needed by
    developers any more. (Patch based on Apple tree)
- (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since
    krb5 on MacOS/X conflicts.  There may be a better solution, but this will
    work for now. 
						
						
					 
					
						2004-04-07 04:16:11 +00:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							0d27ed1c19 
							
						 
					 
					
						
						
							
							- (dtucker) [configure.ac gss-serv-krb5.c ssh-gss.h] Define GSSAPI when found  
						
						... 
						
						
						
						with krb5-config, hunt down gssapi.h and friends.  Based partially on patch
   from deengert at anl.gov.
For the MIT Kerberos bug against krb5-config related to this see:
http://krbdev.mit.edu/rt/Ticket/Display.html?id=2240  
						
						
					 
					
						2004-02-24 10:37:33 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							34255b9f4c 
							
						 
					 
					
						
						
							
							- (djm) Bug  #698 : Specify FILE: for KRB5CCNAME; patch from  
						
						... 
						
						
						
						stadal@suse.cz  and simon@sxw.org.uk  
					
						2004-02-17 20:33:52 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							a8e06cef35 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2003/11/21 11:57:03  
						
						... 
						
						
						
						[everything]
     unexpand and delete whitespace at EOL; ok markus@
     (done locally and RCS IDs synced) 
						
						
					 
					
						2003-11-21 23:48:55 +11:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							49aaf4ad52 
							
						 
					 
					
						
						
							
							- (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h  
						
						... 
						
						
						
						configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
   sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson. 
						
						
					 
					
						2003-08-26 11:58:16 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							0efd155c3c 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2003/08/22 10:56:09  
						
						... 
						
						
						
						[auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c
     gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c
     readconf.h servconf.c servconf.h session.c session.h ssh-gss.h
     ssh_config.5 sshconnect2.c sshd_config sshd_config.5]
     support GSS API user authentication; patches from Simon Wilkinson,
     stripped down and tested by Jakob and myself. 
						
						
					 
					
						2003-08-26 11:49:55 +10:00