Commit Graph

262 Commits

Author SHA1 Message Date
Manoj Ampalam 05d1975743
Added logic to spawn unauthenticated sshd workers to run in isolated … (#275)
Issue: All SSHD unauthenticated workers are currently running as "sshd". Any compromised worker can snoop into the process space of one other worker, steal authentication payload and elevate itself.
Fix: Added logic to spawn the unauthenticated workers under the context of run time unique security identities that will provide complete isolation between these worker processes.
2018-02-20 23:00:14 -08:00
bagajjal fcead5ed76 Fixed issue with starting sshd in debug mode with a "./" (./sshd.exe -d)
PowerShell/Win32-OpenSSH#1045
2018-02-12 11:49:33 -08:00
bagajjal b10f2232e5 fix lsa auth provider and minor bug fixes (#270)
https://github.com/PowerShell/Win32-OpenSSH/issues/1046
2018-02-02 15:45:32 -08:00
Manoj Ampalam 02d07309e2
Now logging sshd.pid at %programdata%\ssh (#269)
PowerShell/Win32-OpenSSH#982
2018-01-29 21:59:48 -08:00
Yanbing bad5548188
Test update
1. Move Start-SSHD-TestDaemon and Stop-SSHD-TestDaemon to commonUtils.psm1
2. Fix the timing issue when trying to read the log while it is still locked by the process.
3, Start the service to create the config fold if it is not there.
4. Skip authorizedkey and sshdconfig tests on win7 since the task scheduler cmdlets are not available on win7.
5. rename variables
2018-01-29 13:49:01 -08:00
Manoj Ampalam fd580e9d96
Allow remote session processes to break away from session job object
PowerShell/Win32-OpenSSH#1032
Issue: Ssh-shellhost.exe creates a job object and ties all its child processes to its lifetime. It does not allow the child processes to break away from this job. This restriction is unnecessary.
Fix: Modified job object to allow child processes to break away if they need to.
2018-01-26 15:22:23 -08:00
bagajjal b92b7c9480 fix the sshd_config and test related changes (#265)
fix the sshd_config and test related changes
2018-01-22 18:53:17 -08:00
bagajjal 973a7afc62
automated generation of cfg, logs folder and copy sshd_config (#264) 2018-01-22 16:55:42 -08:00
Yanbing 8f212f6b05
Cranked version 1.0.0.0 (#262)
Cranked version 1.0.0.0
2018-01-19 15:13:09 -08:00
bagajjal c85ba2b8c3 Separate binary path from cfg path and log path (#263)
Separate binary path from cfg path and log path, test update
2018-01-19 15:12:43 -08:00
Manoj Ampalam 88defae8c1
removed logic arround NTService\SSHD related checks (#261) 2018-01-18 10:46:52 -08:00
Manoj Ampalam 32ff0c2aed
Added support to autogen hostkeys at sshd service startup (#259)
* Added support to autogen hostkeys at sshd service startup
* Integrated latest changes to sshd_config
2018-01-17 08:52:10 -08:00
bagajjal 04c012c032 fix backspace (Control+?) in no-pty session (#257)
https://github.com/PowerShell/Win32-OpenSSH/issues/1011
2018-01-16 21:59:27 -08:00
bagajjal 1f636bd8dd removed extra ; remove m while sending color code (#255)
https://github.com/PowerShell/Win32-OpenSSH/issues/1005
2018-01-16 21:58:44 -08:00
Karl Itnic 97b74e8a10 Update socketio.c (#252)
Merged fix from https://github.com/PowerShell/openssh-portable/pull/252
2018-01-16 21:37:21 -08:00
Manoj Ampalam 5e0833f69d
Logfile add date (#260)
* add date in the log file in MM/DD/YYYY format

* changed date format in log file to bigendian ISO 8601 (YYYY-MM-DD) (#256)

The "madendian" MM/DD/YYYY format is not used outside the United States
(and rather irritating elsewhere)
2018-01-16 19:56:06 -08:00
bagajjal b62ae95cd2 add date in the log file in MM/DD/YYYY format (#253) 2018-01-16 19:48:06 -08:00
Manoj Ampalam fdd54b6334
Implement Unix styled privilege separation in Windows (#258)
OpenSSh privilege separation model - http://www.citi.umich.edu/u/provos/ssh/privsep.html 
Posix_spawn is implemented in POSIX adapter as an alternative to fork() that is heavily used in Privilege separation. 
Additional state info is added to sshd to accommodate distinguishing the various modes (privileged monitor, unprivileged child, authenticated child).
Required service state (like config and host keys) is transmitted over pipes from monitor to child processes.
Changes to installation scripts and tests to accomodate new architectural changes
2018-01-15 13:57:31 -08:00
bagajjal 8906783fa4
remove LsaNtStatusToWinError as onecore doesn't support this API (#249) 2017-12-07 12:50:16 -08:00
bagajjal 507fe3283a Support custom LSA auth provider (#246)
Support custom LSA auth provider
2017-12-07 11:12:29 -08:00
bagajjal ef55537c8b
Merge pull request #226 from PowerShell/mitigate_AltGR_#902
Fix non-US keyboard related issue and scp x86 debug build error
2017-12-05 12:58:47 -08:00
Yanbing 04a3e5ee68
Cranked version 0.0.24.0 (#248)
Cranked version 0.0.24.0
2017-12-04 13:03:54 -08:00
bagajjal 5e86ef04c8 sshd service shouldn't call sshd_main() while exiting (#247)
PowerShell/Win32-OpenSSH#957
2017-12-04 10:45:20 -08:00
Yanbing b7ee9e98e8 try loading advapi32.dll on machine where sspicli.dll does not presents (#244)
PowerShell/Win32-OpenSSH#965
2017-11-28 21:04:23 -08:00
Manoj Ampalam 6861ecaa41
Fixed service banary paths (#243)
PowerShell/Win32-OpenSSH#963
2017-11-28 21:03:10 -08:00
Yanbing 32efc3b06c
download previous pester version before the latest one got fixed. (#245) 2017-11-28 19:06:26 -08:00
bagajjal bcf9c5336f SFTP fix to download a very large file in chunks #863 (#227)
PowerShell/Win32-OpenSSH#863
2017-11-20 23:25:01 -08:00
Yanbing 495119e23f
Remove two properties from projects (#240) 2017-11-17 13:07:54 -08:00
Manoj Ampalam 549d532c09 Ported upstream changes 2017-11-16 14:08:23 -08:00
Yanbing 3f106fe653
Address code review feedback of PR 238 (#239)
Address feedback of PR 238
2017-11-15 13:10:54 -08:00
Yanbing a4cbd07812
Enable build for arm and arm64 (#238)
Enable build for arm and arm64
2017-11-14 17:22:02 -08:00
bagajjal 4fc40c0959 rename variable to NoLibressl 2017-11-07 16:07:16 -08:00
bagajjal 494faf24dd Enable libressl as default and to disable use the switch 2017-11-07 13:57:08 -08:00
Manoj Ampalam 4edff78b9d
Fixed issue in POSIX layer that could truncate write streams (#235)
PowerShell/Win32-OpenSSH#908
2017-11-06 21:38:14 -08:00
Manoj Ampalam c546971ca8
Fixed issue with ssh redirected stdin
PowerShell/Win32-OpenSSH#929
Issue: ReadThread prematurely returns on read io error. This results in APC never getting set and hence the corresponding fd is never set on select resulting the hang seen in issue 929.
Also removed the static instances storing sync io status, since there could be multiple sync fds operating at the same time. Moved the sync io status to w32_io object itself.
2017-11-03 13:16:23 -07:00
bagajjal dce738c33a fix the error code when we fail to open file (#232)
https://github.com/PowerShell/Win32-OpenSSH/issues/934
2017-11-02 22:37:50 -07:00
Yanbing 65751db59c
Cranked version 0.0.23.0 (#233)
Cranked version 0.0.23.0
2017-11-02 13:01:00 -07:00
bagajjal 28b486e0b0 fix the project files to refer to libcrypto.dll instead of libcrypto-41.dll (#231)
https://github.com/PowerShell/Win32-OpenSSH/issues/933
2017-10-31 11:44:10 -07:00
Shawn Iverson b2daa97b71 Fix misspelling in agent.c (#230) 2017-10-30 15:58:35 -07:00
bagajjal b3862103e4 support unicode characters from the ssh.exe (#228) 2017-10-30 15:50:08 -07:00
bagajjal beae9cad31 fix#902 and scp x86 debug build error 2017-10-20 10:21:17 -07:00
Yanbing d4069f2055 Cranked version 0.0.22.0 (#225)
Cranked version 0.0.22.0
2017-10-17 14:01:15 -07:00
Manoj Ampalam 21ebb53a30 Multiple fixes (#224)
PowerShell/Win32-OpenSSH#894
Added logic to profile path retrieval to consider environment variables in path read from registry
PowerShell/Win32-OpenSSH#883
Added flags to support libssh2 SFTP. These are No-Ops for now. We may support them later if needed. Added PowerShell/Win32-OpenSSH#915 to keep track of TODO work item
2017-10-17 12:29:13 -07:00
bagajjal 9555bd9e87 Fix the memset issue related to default cmd option (#223)
Fix the memset issue related to default cmd option
2017-10-16 19:03:02 -07:00
bagajjal 97959981f6 More fix of sftp scp file permission and test cases (#222)
More fix of sftp scp file permission and test cases
2017-10-16 14:46:37 -07:00
bagajjal c9c715e707 Fix sftp scp file permission (#212)
PowerShell/Win32-OpenSSH#884
Convert the mode properly to file permissions.
If mode has "read" permission then we set the file permission to "read & execute"
If mode has "write" permission then we set the file permission to "Write & Modify"
Inherit the file permissions from the parent folder when sftp / scp creates the file on windows.
sftp - put & get.
scp - from local to remote windows machine.
2017-10-16 13:00:40 -07:00
bagajjal 9c95d8e2bb allowing users to configure the default shell through windows registry (#215) 2017-10-16 10:45:11 -07:00
Manoj Ampalam 7a4a10a224 Secured permissions on logs folder and underlying logs (#221) 2017-10-12 22:46:26 -07:00
Yanbing 96235ad333 Added support (optional) for building for OneCore 2017-10-11 08:49:11 -07:00
Manoj Ampalam 72093244f9 Added test cases for certificate authentication (#216) 2017-10-03 12:21:08 -07:00
Yanbing cd35668972 Cranked Version 0.0.21.0 (#214)
Cranked Version 0.0.21.0
2017-10-02 14:37:34 -07:00
Manoj Ampalam a348597468 Support SSH certificates (#213)
support certificate authentication
2017-10-02 12:39:12 -07:00
Yanbing e649e8f926 Fix for issue 888, 880 (#211)
fix for PowerShell/Win32-OpenSSH#888
Add systemid as FullAccessNeeded
fix for PowerShell/Win32-OpenSSH#880
2017-09-28 14:55:40 -07:00
Yanbing afb81c082d Some updates on shell-host.c (#210)
PowerShell/Win32-OpenSSH#893
Create pipe using default buffer size
Update buffer size when read and write file
change to use _wcsnicmp
printed out error when create pipe
added release of the memory
2017-09-27 14:32:30 -07:00
bagajjal 8747626b6a Multiple terminal related fixes
Fix the bugs -
PowerShell/Win32-OpenSSH#845
PowerShell/Win32-OpenSSH#865
PowerShell/Win32-OpenSSH#885
PowerShell/Win32-OpenSSH#886
Refer to the below URL
https://github.com/mintty/mintty/wiki/Keycodes#Editing_keys.md
2017-09-27 12:16:41 -07:00
Manoj Ampalam b327f0c48a Fix to Issue 698 and other misc changes (#208)
Fix to PowerShell/Win32-OpenSSH#698 - Create job object, add ssh-shellhost and ensure all its child process and tied to its lifetime.
Other changes include changes to debug* statements in posix adapter that may cause recursion/stack overflow issues.
2017-09-21 22:00:39 -07:00
bagajjal c8c6b0b04e fix scp build issue, fix new warning msg in posixcompat (#209) 2017-09-21 21:12:01 -07:00
Yanbing 18b1e5935b multiple fixes for win7 (#206)
1. fix some exception when appverifier is enabled on win7 (https://gitthub.com/PowerShell/Win32-OpenSSH/issues/872)
2. enable sshdconfig tests on win7(https://github.com/PowerShell/Win32-OpenSSH/issues/873)
3. fix for https://github.com/PowerShell/Win32-OpenSSH/issues/874 ( ReadFile does not return on win7 when no content in console )
4. Remove logging to console in Readthread because write hangs here since write thread already closed (https://github.com/PowerShell/Win32-OpenSSH/issues/879)
5. fix VCTargetsPath
2017-09-15 21:25:42 -07:00
Manoj Ampalam 879318721c Enabled Control Flow Guard on all binaries 2017-09-14 09:09:17 -07:00
Yanbing 3b517afc77 Cranked Version 0.0.20.0 (#205) 2017-09-05 13:42:39 -07:00
bagajjal 6e7210d3c1 fix the CRLF issue, review comments related to allow/deny user/groups#861
* fix the CRLF issue
* fixing the allow/deny group review comments
2017-09-05 12:41:46 -07:00
bagajjal a38dfedb68 removed code to fix forwardslash issue as it depends on the keyboard type (#201)
PowerShell/Win32-OpenSSH#858
2017-09-05 11:47:42 -07:00
bagajjal ab2aefff6d Fix allow/deny groups #816 (#203)
Fixing allow groups, deny groups. (PowerShell/Win32-OpenSSH#816)
Convert users, groups read from sshd_config to lowercase.
2017-09-01 14:53:12 -07:00
annulus e8a303673e OpenSSHUtils ProfilePath parsing issues (#192)
1. ignore the historical (.bak) profile entries from the registry
2. do not match against different profiles that share the beginning of their path
2017-09-01 10:29:02 -07:00
Ben Hillis 7f64fc729a SendKeyStrokeEx should set wRepeatCount = 1
https://github.com/PowerShell/Win32-OpenSSH/issues/853
2017-08-31 14:11:54 -07:00
Manoj Ampalam 4a5fe9ea92 Ported changes to support Windows 2017-08-28 09:49:42 -07:00
Manoj Ampalam 19d40e6668 Ported changes to support Windows 2017-08-28 00:32:51 -07:00
Manoj Ampalam 8666d7b71b cranked version to 0.0.19.0 2017-08-18 12:29:56 -07:00
bagajjal 5cbb8c9e52 Fix ctrl sequences (#196)
PowerShell/Win32-OpenSSH#850 - Fixed alt+shift+? control sequence at ssh client and ssh server side.
PowerShell/Win32-OpenSSH#849 - Fixed ctrl sequences (ctrl+pageup/ctrl+home, etc)...
2017-08-18 12:21:26 -07:00
Manoj Ampalam f8371cf5c6 Fix (#195)
PowerShell/Win32-OpenSSH#846
2017-08-17 12:31:35 -07:00
Manoj Ampalam fdb2b110b7 Fix (#194)
Issue is within msv1_0.dll (NTLM SSP provider). Working around by doing a fake login that populates internal state within msv1_0.dll so further S4U logons work as expected.
PowerShell/Win32-OpenSSH#727
2017-08-17 12:12:09 -07:00
bagajjal b6dc082e1d fix the page up / page down, #842 (#193)
https://github.com/PowerShell/Win32-OpenSSH/issues/842
2017-08-17 11:57:29 -07:00
Yanbing 3a092cbb5d Enable Appverifier tests (#191)
1. Enable Appverifier tests and  fix of #839 and #841
2. Enabled Postmortem Debugging
2017-08-07 14:45:43 -07:00
Yanbing 3c90af89a2 Updates needed for running test on windows inbox (#189)
Test updates needed for running test on windows inbox
2017-08-02 17:16:06 -07:00
Manoj Ampalam 70231622a2 Fixed -noOpenSSL build variant
https://github.com/PowerShell/Win32-OpenSSH/issues/833
2017-08-01 14:24:49 -07:00
bagajjal 98f9a7d9ab fixing TERM to xterm-256color and fixing sizeof(PATH_MAX) 2017-08-01 12:36:23 -07:00
Rui Lopes da48ae4da0 properly redirect sc.exe stderr to $null (#187)
Signed-off-by: Rui Lopes <rgl@ruilopes.com>
2017-07-28 15:36:01 -07:00
Yanbing bb9e5b27f2 Fix build when there are spaces in the path (#188)
Fix build when there are spaces in the path
2017-07-27 18:24:19 -07:00
Yanbing 7e72454ec2 Crank verstion 18 (#186)
Crank verstion 18
2017-07-19 15:35:19 -07:00
Yanbing b1a6fbca5e Issue13 (#184)
Replace with secure APIs in win32compat
2017-07-19 15:28:35 -07:00
bagajjal eb8cf61ccf SETTING term=XTERM (#185)
https://github.com/PowerShell/Win32-OpenSSH/issues/252
2017-07-18 20:00:13 -07:00
bagajjal 69ede6fef2 Terminal fixes (#182)
Terminal code cleanup and control sequence handling..
PowerShell/Win32-OpenSSH#799
Picking the user32/kernel32 from the systemdirectory.
PowerShell/Win32-OpenSSH#814
Console settings are not restored properly
PowerShell/Win32-OpenSSH#813
Fix the clearscreen issue while connecting to non-windows (UNIX/LINUX) servers.
PowerShell/Win32-OpenSSH#807
vi arrow keys are not working
PowerShell/Win32-OpenSSH#806
Fix the nopty unix ssh session.
PowerShell/Win32-OpenSSH#805
Fix emacs issue
PowerShell/Win32-OpenSSH#802
2017-07-18 12:31:30 -07:00
Yanbing 7a8933744e Remove secedit dependency (#179) 2017-07-10 13:25:08 -07:00
Manoj Ampalam 0c8f8473d5 Ported changed due to merge from openssh/master 2017-07-08 23:21:35 -07:00
Darwin 6919392432 Fixed sid translation issue when ACLs already contain SIDS (#180) 2017-07-06 14:34:17 -07:00
Manoj Ampalam 31bcbea0de Fixed "ssh-add -D" regression caused due recent ssh-agent changes
https://github.com/PowerShell/Win32-OpenSSH/issues/798
2017-07-05 23:10:30 -07:00
bagajjal 69258a6e02 added new keystroke mapping (#177) 2017-06-30 13:51:55 -07:00
Yanbing f4bee790fd Crank version 17 (#176)
1. Crank version 17 
2. minor update on build script to workaround win7 environment
2017-06-30 12:24:17 -07:00
bagajjal cd6ac9dc31 Multiple fixes (#172)
PowerShell/Win32-OpenSSH#596 - shellhost should pickup cmd.exe from %windir%\system32
PowerShell/Win32-OpenSSH#789 - SFTP - remove comspec
PowerShell/Win32-OpenSSH#779 - AuthorizedKeysFile in sshd_config is not working
PowerShell/Win32-OpenSSH#776 - SFTP ls command to show rwx permissions for user
2017-06-29 12:48:13 -07:00
Yanbing 18d67701b5 Remove VS installation as build requirement (#175) 2017-06-27 22:28:42 -07:00
Yanbing eb0ab1b522 test scripts update to run on win7 (#174)
PowerShell/Win32-OpenSSH#721
PowerShell/Win32-OpenSSH#771
PowerShell/Win32-OpenSSH#785
PowerShell/Win32-OpenSSH#786
2017-06-26 21:58:29 -07:00
Manoj Ampalam f8f5e45f02 Decouple key-agent and privileged-agent use in sshd (#173)
PowerShell/Win32-OpenSSH#766
PowerShell/Win32-OpenSSH#783
2017-06-26 21:57:24 -07:00
Yanbing ad17ff1b74 Update OpenSSHUtils Module to handle Localized User accounts (#171)
PowerShell/Win32-OpenSSH#771
2017-06-19 11:29:21 -07:00
Yanbing 3ca9c069e2 Crank version (#170)
Crank version
2017-06-15 13:45:05 -07:00
Yanbing b323223b1f add libcrypto-41.dll in payload (#169) 2017-06-15 13:23:23 -07:00
bagajjal 067a352c81 fixed the download issue of the log files (#167)
https://github.com/PowerShell/Win32-OpenSSH/issues/531
2017-06-15 12:27:31 -07:00
bagajjal 98eca17c65 terminal support for the accepting unicode input (#162)
Support the unicode characters as input to the ssh client.
PowerShell/Win32-OpenSSH#711
Remove the bAnsi related code changes to the ssh-shellhost.c as that code never executes..
Fixed "long pressing key issue for the slow ssh connections"
PowerShell/Win32-OpenSSH#701
fixed warning message in the latestw_all recent commits.
Fixed the issue with ssh failures in the latestw_all recent commits.
2017-06-13 21:25:01 -07:00
Manoj Ampalam 04ce306973 removed unwanted CreateFile flags 2017-06-13 12:09:36 -07:00
Yanbing a98f0259bb fix issue 764 (#165)
1. fix issue 764 (https://github.com/PowerShell/Win32-OpenSSH/issues/764)
2. move the add type to the script level so it only been added once
3. fix indents
4. make FilePath position 0.
5. add OpenSSHUtiles.psm1 in the build and package
2017-06-13 10:37:17 -07:00
Manoj Ampalam dd88d8d5d4 Move to LibreSSL, Fixed issues arising from compiling Windows specific code at warling level 3 2017-06-13 10:33:47 -07:00