Tim Rice
01326ebada
[defines.h openbsd-compat/getrrsetbyname.h] Move defines for HFIXEDSZ
...
and T_SIG to getrrsetbyname.h
2004-01-26 21:40:35 -08:00
Tim Rice
2597bfd1fb
[configure.ac includes.h] add <sys/ptms.h> for grantpt() and friends.
2004-01-26 19:03:39 -08:00
Tim Rice
ba1c2b82c4
[defines.h] Add defines for HFIXEDSZ and T_SIG
2004-01-26 16:02:17 -08:00
Tim Rice
eafd8e9c55
20040126
...
[regress/test-exec.sh] RhostsAuthentication is deprecated.
2004-01-26 14:10:10 -08:00
Tim Rice
3084a6198c
Typo in regress/README.regress
2004-01-26 09:37:09 -08:00
Damien Miller
6814411b3e
- (djm) Typo in openbsd-compat/bsd-openpty.c; from wendyp AT cray.com
2004-01-24 13:50:39 +11:00
Tim Rice
fcb6220da0
[configure.ac] Remove hard coded -L/usr/local/lib and
...
-I/usr/local/include. Users can do LDFLAGS="-L/usr/local/lib" \
CPPFLAGS="-I/usr/local/include" ./configure if needed.
2004-01-23 18:35:16 -08:00
Darren Tucker
3c78c5ed2f
- (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]
...
Change AFS symbol to USE_AFS to prevent namespace collisions, do not
include kafs.h unless necessary. From deengert at anl.gov.
For consistency, all of the libkafs bits are now inside "#if defined(KRB5)
&& defined(USE_AFS)".
2004-01-23 22:03:10 +11:00
Darren Tucker
6369958301
- (dtucker) [contrib/cygwin/README] Document new ssh-host-config options.
...
Patch from vinschen at redhat.com.
2004-01-23 21:35:44 +11:00
Darren Tucker
2dcd2393f4
- (dtucker) [configure.ac] Bug #788 : Test for zlib.h presence and for
...
zlib >= 1.1.4. Partly from jbasney at ncsa.uiuc.edu. ok djm@
2004-01-23 17:13:33 +11:00
Damien Miller
84938141d4
- (djm) Bug #776 : Update contrib/redhat/openssh.spec to dynamically detect
...
Kerberos location (and thus work with Fedora Core 1);
from jason AT devrandom.org
2004-01-23 16:30:03 +11:00
Damien Miller
d352636553
- (djm) Do pam_session processing for systems with HAVE_LOGIN_CAP; from
...
ralf.hack AT pipex.net; ok dtucker@
2004-01-23 14:16:26 +11:00
Tim Rice
c900128e55
[contrib/solaris/buildpkg.sh] Allow for the possibility of
...
/usr/local being a symbolic link. Fixes problem reported by Henry Grebler.
2004-01-22 16:10:03 -08:00
Darren Tucker
7fe8b72771
- (dtucker) [session.c] Enable AFS support in conjunction with KRB5 not
...
just HEIMDAL.
Currently this will make no difference, as only Heimdal (which defines KRB5
anyway) has libkafs, however a libkafs that works with MIT may become
available. In that case it will be used too.
2004-01-22 12:48:26 +11:00
Darren Tucker
1d3ca58705
- (dtucker) [configure.ac] Use krb5-config where available for Kerberos/
...
GSSAPI detection, libs and includes. ok djm@
2004-01-22 12:05:34 +11:00
Damien Miller
f4da3bb6ca
- deraadt@cvs.openbsd.org 2004/01/11 21:55:06
...
[sshpty.c]
for pty opening, only use the openpty() path. the other stuff only needs
to be in openssh-p; markus ok
- (djm) [openbsd-compat/bsd-openpty.c] Rework old sshpty.c code into an
openpty() replacement
2004-01-21 17:07:16 +11:00
Damien Miller
e4f5a82d6e
- djm@cvs.openbsd.org 2004/01/21 03:07:59
...
[sftp.c]
initialise infile in main, rather than statically - from portable
2004-01-21 14:11:05 +11:00
Damien Miller
fb1310eded
- markus@cvs.openbsd.org 2004/01/19 21:25:15
...
[auth2-hostbased.c auth2-pubkey.c serverloop.c ssh-keysign.c sshconnect2.c]
fix mem leaks; some fixes from Pete Flugstad; tested dtucker@
2004-01-21 11:02:50 +11:00
Damien Miller
a04ad496f6
- markus@cvs.openbsd.org 2004/01/19 09:24:21
...
[channels.c]
fake consumption for half closed channels since the peer is waiting for
window adjust messages; bugzilla #790 Matthew Dillon; test + ok dtucker@
reproduce with sh -c 'ulimit -f 10; ssh host -n od /bsd | cat > foo'
2004-01-21 11:02:09 +11:00
Damien Miller
f84fed6f71
- markus@cvs.openbsd.org 2004/01/13 19:45:15
...
[compress.c]
cast for portability; millert@
2004-01-21 11:01:23 +11:00
Damien Miller
8f341f8b8b
- markus@cvs.openbsd.org 2004/01/13 19:23:15
...
[compress.c session.c]
-Wall; ok henning
2004-01-21 11:00:46 +11:00
Damien Miller
86a396857d
- jmc@cvs.openbsd.org 2004/01/13 12:17:33
...
[sftp.1]
remove unnecessary Ic's;
kill whitespace at EOL;
ok djm@
2004-01-21 11:00:04 +11:00
Damien Miller
44f75c14f6
- djm@cvs.openbsd.org 2004/01/13 09:25:05
...
[sftp-int.c sftp.1 sftp.c]
Tidy sftp batchmode handling, eliminate junk to stderr (bugzilla #754 ) and
enable use of "-b -" to accept batchfile from stdin; ok markus@
2004-01-21 10:58:47 +11:00
Darren Tucker
a8df9248ce
- (dtucker) [auth-pam.c] Add minor debugging.
2004-01-15 00:15:07 +11:00
Darren Tucker
7ae0962798
- (dtucker) [auth-pam.c] Reset signal handler in pthread_cancel too, add
...
test for case where cleanup has already run.
2004-01-14 23:07:56 +11:00
Darren Tucker
749bc95bd8
- (dtucker) [auth-pam.c] Have monitor die if PAM authentication thread exits
...
unexpectedly. with & ok djm@
2004-01-14 22:14:04 +11:00
Darren Tucker
1b27c8fbcb
- (dtucker) [auth-pam.c] Relocate struct pam_ctxt and prototypes. No
...
functional changes.
This is in preparation for a change to catch the authentication thread
exitting unexpectedly, to split functional and cosmetic changes.
2004-01-13 22:35:58 +11:00
Darren Tucker
fd0894adae
- (dtucker) [configure.ac] Remove extra (typo) comma.
2004-01-09 00:19:25 +11:00
Darren Tucker
0234e8607f
- (dtucker) [auth-pam.c defines.h] Bug #783 : move __unused to defines.h and
...
only define if not already. From des at freebsd.org.
2004-01-08 23:32:04 +11:00
Darren Tucker
409cb328c1
- (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]
...
Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@
2004-01-05 22:36:51 +11:00
Darren Tucker
e918318f2b
- (dtucker) [contrib/ssh-copy-id] Bug #781 : exit if ssh fails. Patch from
...
cjwatson at debian.org.
2004-01-05 08:16:34 +11:00
Damien Miller
3c80d4a7b7
- (djm) OSX/Darwin needs BIND_8_COMPAT to build getrrsetbyname. Report from
...
jakob@
2004-01-02 18:02:44 +11:00
Damien Miller
0f47c53742
- (djm) OSX/Darwin put the PAM headers in a different place, detect this.
...
Report from jakob@
2004-01-02 18:01:30 +11:00
Damien Miller
c8ec16651e
- (djm) Remove useless DNS support configure summary message. from jakob@
2004-01-02 17:53:04 +11:00
Damien Miller
7a2ea78cc4
- (djm) OSX/Darwin needs BIND_8_COMPAT to build getrrsetbyname. Report from
...
jakob@
2004-01-02 17:52:10 +11:00
Darren Tucker
2a6b029f99
- (dtucker) [configure.ac] Only test setresuid and setresgid if they exist.
2003-12-31 14:59:17 +11:00
Darren Tucker
ea2870619d
- dtucker@cvs.openbsd.org 2003/12/31 00:24:50
...
[auth2-passwd.c]
Ignore password change request during password auth (which we currently
don't support) and discard proposed new password. corrections/ok markus@
2003-12-31 11:43:24 +11:00
Darren Tucker
0b3b97512f
- millert@cvs.openbsd.org 2003/12/29 16:39:50
...
[sshd_config]
KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK
2003-12-31 11:38:32 +11:00
Darren Tucker
22ef508754
- jakob@cvs.openbsd.org 2003/12/23 16:12:10
...
[servconf.c servconf.h session.c sshd_config]
implement KerberosGetAFSToken server option. ok markus@, beck@
2003-12-31 11:37:34 +11:00
Darren Tucker
a32e19c637
- markus@cvs.openbsd.org 2003/12/22 20:29:55
...
[cipher-3des1.c]
EVP_CIPHER_CTX_cleanup() for the des contexts; pruiksma@freesurf.fr
2003-12-31 11:36:00 +11:00
Darren Tucker
06930c70ad
- djm@cvs.openbsd.org 2003/12/22 09:16:58
...
[moduli.c ssh-keygen.1 ssh-keygen.c]
tidy up moduli generation debugging, add -v (verbose/debug) option to
ssh-keygen; ok markus@
2003-12-31 11:34:51 +11:00
Darren Tucker
3715be3cd3
- (dtucker) [defines.h] Bug #458 : Define SIZE_T_MAX as UINT_MAX if we
...
typedef size_t ourselves.
2003-12-19 10:58:43 +11:00
Darren Tucker
c376c8647e
Enable commented-out "if (compat20)" test. (Should not have been committed.)
2003-12-18 16:08:59 +11:00
Darren Tucker
07705c788e
- (dtucker) [auth-pam.c] Do PAM chauthtok during SSH2 keyboard-interactive
...
authentication. Partially fixes bug #423 . Feedback & ok djm@
Some background on why this is the way it is:
* Solaris 8's pam_chauthtok ignores the CHANGE_EXPIRED_AUTHTOK flag, so
we must call do_pam_account() to figure out if the password is expired.
* AIX 5.2 does not like having pam_acct_mgmt() called twice, once from the
authentication thread and once from the main shell child, so we cache the
result, which must be passed from the authentication thread back to the
monitor.
2003-12-18 15:34:31 +11:00
Darren Tucker
454da0b3dc
- (dtucker) [configure.ac] Don't use setre[ug]id on DG-UX, from Tom Orban.
2003-12-18 12:52:19 +11:00
Ben Lindstrom
563eb99711
- (bal) [openbsd-compat/bsd-misc.c] unset 'signal' defined if we are
...
using a real 'signal()' (Noticed by a NeXT Compile)
2003-12-18 00:34:06 +00:00
Darren Tucker
e937be36c3
- (dtucker) [acconfig.h configure.ac uidswap.c] Bug #645 : Check for
...
setres[ug]id() present but not implemented (eg some Linux/glibc
combinations).
2003-12-17 18:53:26 +11:00
Damien Miller
8975ddf11b
- markus@cvs.openbsd.org 2003/12/16 15:51:54
...
[dh.c]
use <= instead of < in dh_estimate; ok provos/hshoexer;
do not return < DH_GRP_MIN
2003-12-17 16:33:53 +11:00
Damien Miller
509b0107f0
- markus@cvs.openbsd.org 2003/12/16 15:49:51
...
[clientloop.c clientloop.h readconf.c readconf.h scp.1 sftp.1 ssh.1]
[ssh.c ssh_config.5]
application layer keep alive (ServerAliveInterval ServerAliveCountMax)
for ssh(1), similar to the sshd(8) option; ok beck@; with help from
jmc and dtucker@
2003-12-17 16:33:10 +11:00
Damien Miller
baafb981a4
- markus@cvs.openbsd.org 2003/12/14 12:37:21
...
[ssh_config.5]
we don't support GSS KEX; from Simon Wilkinson
2003-12-17 16:32:23 +11:00