tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
4,143 Commits 6 Branches 20 Tags 97 MiB
Commit Graph

3707 Commits

Author SHA1 Message Date
Darren Tucker 72c025d9f0 - (dtucker) [INSTALL Makefile.in configure.ac survey.sh.in] Implement 
"make survey" and "make send-survey".  This will provide data on the
   configure parameters, platform and platform features to the development
   team, which will allow (among other things) better targetting of testing.
   It's entirely voluntary and is off be default. ok djm@
 2005-01-18 12:05:18 +11:00
Darren Tucker 5caa78b1b7 - (dtucker) [regress/rekey.sh] Touch datafile before filling with dd, since 
on some wacky platforms (eg old AIXes), dd will refuse to create an output
   file if it doesn't exist.
 2004-12-20 12:35:42 +11:00
Darren Tucker 8686ed7508 - (dtucker) [ssh-rand-helper.c] Fall back to command-based seeding if reading 
from prngd is enabled at compile time but fails at run time, eg because
   prngd is not running.  Note that if you have prngd running when OpenSSH is
   built, OpenSSL will consider itself internally seeded and rand-helper won't
   be built at all unless explicitly enabled via --with-rand-helper.  ok djm@
 2004-12-20 12:05:08 +11:00
Darren Tucker 442a383418 - (dtucker) [contrib/findssh.sh] Clean up on interrupt; from 
amarendra.godbole at ge com.
 2004-12-13 18:08:32 +11:00
Darren Tucker f0f90989fa - dtucker@cvs.openbsd.org 2004/12/11 01:48:56 
[auth-rsa.c auth2-pubkey.c authfile.c misc.c misc.h]
     Fix debug call in error path of authorized_keys processing and fix related
     warnings; ok djm@
 2004-12-11 13:39:50 +11:00
Darren Tucker 596dcfa21f - fgsch@cvs.openbsd.org 2004/12/10 03:10:42 
[sftp.c]
     - fix globbed ls for paths the same lenght as the globbed path when
       we have a unique matching.
     - fix globbed ls in case of a directory when we have a unique matching.
     - as a side effect, if the path does not exist error (used to silently
       ignore).
     - don't do extra do_lstat() if we only have one matching file.
     djm@ ok
 2004-12-11 13:37:22 +11:00
Darren Tucker 56c9598e5e - (dtucker) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2004/12/06 16:00:43
     [bufaux.c]
     use 0x00 not \0 since buf[] is a bignum
 2004-12-11 13:34:56 +11:00
Tim Rice 0f83d2907c [configure.ac] Comment some non obvious platforms in the target-specific 
case statement. Suggested and OK by dtucker@
 2004-12-08 18:29:58 -08:00
Darren Tucker 641b34c72b - (dtucker) [regress/scp.sh] Use portable-friendly $DIFFOPTs in new test. 2004-12-07 11:26:15 +11:00
Darren Tucker d028fea13a - dtucker@cvs.openbsd.org 2004/12/06 10:49:56 
[test-exec.sh]
     Check if TEST_SSH_SSHD is a full path to sshd before searching; ok markus@
 2004-12-06 23:16:29 +11:00
Darren Tucker cc0603d4b6 - dtucker@cvs.openbsd.org 2004/11/25 09:39:27 
[test-exec.sh]
     Remove obsolete RhostsAuthentication from test config; ok markus@
 2004-12-06 23:13:50 +11:00
Darren Tucker 79ec66e980 - djm@cvs.openbsd.org 2004/11/07 00:32:41 
[multiplex.sh]
     regression tests for new multiplex commands
 2004-12-06 23:12:15 +11:00
Darren Tucker 124f58ecba - djm@cvs.openbsd.org 2004/10/29 23:59:22 
[Makefile added brokenkeys.sh]
     regression test for handling of corrupt keys in authorized_keys file
 2004-12-06 23:07:37 +11:00
Darren Tucker 71b5643598 - djm@cvs.openbsd.org 2004/10/08 02:01:50 
[reexec.sh]
     shrink and tidy; ok dtucker@
 2004-12-06 23:05:52 +11:00
Darren Tucker 3206e57e93 - david@cvs.openbsd.org 2004/07/09 19:45:43 
[Makefile]
     add a missing CLEANFILES used in the re-exec test
 2004-12-06 23:04:57 +11:00
Darren Tucker ccf0779185 - dtucker@cvs.openbsd.org 2004/07/08 12:59:35 
[scp.sh]
     Regress test for bz #863 (scp double-error), requires $SUDO.  ok markus@
 2004-12-06 23:03:27 +11:00
Darren Tucker a372960fa9 - djm@cvs.openbsd.org 2004/06/26 06:16:07 
[reexec.sh]
     don't change the name of the copied sshd for the reexec fallback test,
     makes life simpler for portable
 2004-12-06 23:00:27 +11:00
Darren Tucker 22cc741096 - dtucker@cvs.openbsd.org 2004/12/06 11:41:03 
[auth-rsa.c auth2-pubkey.c authfile.c misc.c misc.h ssh.h sshd.8]
     Discard over-length authorized_keys entries rather than complaining when
     they don't decode.  bz #884, with & ok djm@
 2004-12-06 22:47:41 +11:00
Darren Tucker 16e254d179 - jaredy@cvs.openbsd.org 2004/12/05 23:55:07 
[sftp.1]
     - explain that patterns can be used as arguments in get/put/ls/etc
       commands (prodded by Michael Knudsen)
     - describe ls flags as a list
     - other minor improvements
     ok jmc, djm
 2004-12-06 22:46:45 +11:00
Darren Tucker e2f189a841 - djm@cvs.openbsd.org 2004/11/29 07:41:24 
[sftp-client.h sftp.c]
     Some small fixes from moritz@jodeit.org. ok deraadt@
 2004-12-06 22:45:53 +11:00
Darren Tucker 0133a727ac - jmc@cvs.openbsd.org 2004/11/29 00:05:17 
[sftp.1]
     missing full stop;
 2004-12-06 22:44:32 +11:00
Darren Tucker cd516efea1 - (dtucker) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2004/11/25 22:22:14
     [sftp-client.c sftp.c]
     leak; from mpech
 2004-12-06 22:43:43 +11:00
Darren Tucker ba2abb3699 - (dtucker) [TODO WARNING.RNG] Update to reflect current reality. ok djm@ 2004-12-06 22:40:10 +11:00
Darren Tucker c13866719f - (dtucker) [auth1.c auth2.c] If the user successfully authenticates but is 
subsequently denied by the PAM auth stack, send the PAM message to the
   user via packet_disconnect (Protocol 1) or userauth_banner (Protocol 2).
   ok djm@
 2004-12-03 14:33:47 +11:00
Darren Tucker 9c6bf325c0 - jmc@cvs.openbsd.org 2004/11/07 17:57:30 
[ssh.c]
     usage():
     - add -O
     - sync -S w/ manpage
     - remove -h
 2004-12-03 14:10:19 +11:00
Darren Tucker e04644c162 - (dtucker) OpenBSD CVS Sync 
- jmc@cvs.openbsd.org 2004/11/07 17:42:36
     [ssh.1]
     options sort, and whitespace;
 2004-12-03 14:08:45 +11:00
Darren Tucker 16bcc1c92e - (dtucker) [INSTALL Makefile.in configure.ac] Add --with-libedit configure 
option and supporting makefile bits and documentation.
 2004-11-07 20:14:34 +11:00
Darren Tucker 7ebfc10884 - djm@cvs.openbsd.org 2004/11/07 00:01:46 
[clientloop.c clientloop.h ssh.1 ssh.c]
     add basic control of a running multiplex master connection; including the
     ability to check its status and request it to exit; ok markus@
 2004-11-07 20:06:19 +11:00
Darren Tucker 2d963d8721 - djm@cvs.openbsd.org 2004/11/05 12:19:56 
[sftp.c]
     command editing and history support via libedit; ok markus@
     thanks to hshoexer@ and many testers on tech@ too
 2004-11-07 20:04:10 +11:00
Darren Tucker 08d04faf24 - djm@cvs.openbsd.org 2004/10/29 23:57:05 
[key.c]
     use new buffer API to avoid fatal errors on corrupt keys in authorized_keys
     files; ok markus@
 2004-11-05 20:42:28 +11:00
Darren Tucker 50dbe8314b - djm@cvs.openbsd.org 2004/10/29 23:56:17 
[bufaux.c bufaux.h buffer.c buffer.h]
     introduce a new buffer API that returns an error rather than fatal()ing
     when presented with bad data; ok markus@
 2004-11-05 20:41:24 +11:00
Darren Tucker ce327b62ac - djm@cvs.openbsd.org 2004/10/29 22:53:56 
[clientloop.c misc.h readpass.c ssh-agent.c]
     factor out common permission-asking code to separate function; ok markus@
 2004-11-05 20:38:03 +11:00
Darren Tucker 5d78de6283 - djm@cvs.openbsd.org 2004/10/29 21:47:15 
[channels.c channels.h clientloop.c]
     fix some window size change bugs for multiplexed connections: windows sizes
     were not being updated if they had changed after ~^Z suspends and SIGWINCH
     was not being processed unless the first connection had requested a tty;
     ok markus
 2004-11-05 20:35:44 +11:00
Darren Tucker b2694f0e8a - markus@cvs.openbsd.org 2004/10/20 11:48:53 
[packet.c ssh1.h]
     disconnect for invalid (out of range) message types.
 2004-11-05 20:27:54 +11:00
Darren Tucker 1dee8683fb - djm@cvs.openbsd.org 2004/10/07 10:12:36 
[ssh-agent.c]
     don't unlink agent socket when bind() fails, spotted by rich AT
     rich-paul.net, ok markus@
 2004-11-05 20:26:49 +11:00
Darren Tucker 636ca90247 - djm@cvs.openbsd.org 2004/10/07 10:10:24 
[scp.1 sftp.1 ssh.1 ssh_config.5]
     document KbdInteractiveDevices; ok markus@
 2004-11-05 20:22:00 +11:00
Darren Tucker 3269b13817 - djm@cvs.openbsd.org 2004/09/25 03:45:14 
[sshd.c]
     these printf args are no longer double; ok deraadt@ markus@
 2004-11-05 20:20:59 +11:00
Darren Tucker 39207a46b4 - djm@cvs.openbsd.org 2004/09/23 13:00:04 
[ssh.c]
     correctly honour -n in multiplex client mode; spotted by sturm@ ok markus@
 2004-11-05 20:19:51 +11:00
Darren Tucker f30e1acc62 - deraadt@cvs.openbsd.org 2004/09/15 18:46:04 
[scp.c]
     scratch that do { } while (0) wrapper in this case
 2004-11-05 20:10:02 +11:00
Darren Tucker 178fa66a64 - mickey@cvs.openbsd.org 2004/09/15 18:42:27 
[sshd.c]
     use less doubles in daemons; markus@ ok
 2004-11-05 20:09:09 +11:00
Darren Tucker 7cc5c23817 - jaredy@cvs.openbsd.org 2004/09/15 03:25:41 
[sshd_config.5]
     mention PrintLastLog only prints last login time for interactive
     sessions, like PrintMotd mentions.
     From Michael Knudsen, with wording changed slightly to match the
     PrintMotd description.
     ok djm
 2004-11-05 20:06:59 +11:00
Darren Tucker e9bf98412e - deraadt@cvs.openbsd.org 2004/09/15 00:46:01 
[ssh.c]
     /* fallthrough */ is something a programmer understands.  But
     /* FALLTHROUGH */ is also understood by lint, so that is better.
 2004-11-05 20:05:32 +11:00
Darren Tucker 07336dae94 - djm@cvs.openbsd.org 2004/09/07 23:41:30 
[clientloop.c ssh.c]
     cleanup multiplex control socket on SIGHUP too, spotted by sturm@
     ok markus@ deraadt@
 2004-11-05 20:02:16 +11:00
Darren Tucker 4e4fe0052c - jmc@cvs.openbsd.org 2004/08/30 21:22:49 
[ssh-add.1 ssh.1]
     .Xsession -> .xsession;
     originally from a pr from f at obiit dot org, but missed by myself;
     ok markus@ matthieu@
 2004-11-05 20:01:03 +11:00
Darren Tucker c016134588 - markus@cvs.openbsd.org 2004/08/30 09:18:08 
[LICENCE]
     s/keygen/keyscan/
 2004-11-05 20:00:03 +11:00
Darren Tucker a56f191ef1 - (dtucker) [configure.ac includes.h] Bug #947: Fix compile error on HP-UX 
10.x by testing for conflicts in shadow.h and undef'ing _INCLUDE__STDC__
   only if a conflict is detected.
 2004-11-02 20:30:54 +11:00
Darren Tucker 35beaddc7e - (dtucker) [uidswap.c] Don't test dropping of gids for the root user or 
on Cygwin.  Cygwin parts from vinschen at redhat com; ok djm@
 2004-10-19 16:33:33 +10:00
Damien Miller 0e035d816a that was "ok dtucker@" 2004-10-16 18:53:28 +10:00
Damien Miller daffc6a115 - (djm) [auth-pam.c] snprintf->strl*, fix server message length calculations 2004-10-16 18:52:44 +10:00
Darren Tucker dbc2296e2c - (dtucker) [monitor_mm.c openbsd-compat/xmmap.c] Bug #940: cast constants 
to void * to appease picky compilers (eg Tru64's "cc -std1").
 2004-10-06 23:15:44 +10:00
Darren Tucker b7d55e3eb5 - (dtucker) [README.privsep] Bug #939: update info about HP-UX Trusted Mode 
and other PAM platforms.
 2004-10-06 20:09:32 +10:00
Darren Tucker 59f79c4014 - (dtucker) [configure.ac] Set AC_PACKAGE_NAME. ok djm@ 2004-09-30 21:17:08 +10:00
Darren Tucker 4127f559ad - (dtucker) [openbsd-compat/bsd-snprintf.c] Previous change was off by one, 
which could have caused the justification to be wrong.  ok djm@
 2004-09-23 21:35:09 +10:00
Darren Tucker 5d596139d4 - (dtucker) [contrib/cygwin/ssh-host-config] Update to match current Cygwin 
install process.  Patch from vinschen at redhat.com.
 2004-09-21 21:35:55 +10:00
Darren Tucker 50fbb45dbd - (dtucker) [openbsd-compat/bsd-snprintf.c] Check for max length too. 
ok djm@
 2004-09-21 21:32:12 +10:00
Darren Tucker 623d92f0b2 - (dtucker) [configure.ac] Fix incorrect quoting and tests for cross-compile. 
Partly by & ok djm@.
 2004-09-12 22:36:15 +10:00
Damien Miller 2aa6d3cfce - (djm) [ssh.c sshd.c version.h] Don't divulge portable version in protocol 
banner. Suggested by deraadt@, ok mouring@, dtucker@
 2004-09-12 16:53:04 +10:00
Damien Miller b0aae333fd - (djm) [loginrec.c] xmalloc 2004-09-12 15:26:00 +10:00
Damien Miller 6b0279c084 - (djm) [loginrec.c] __func__ifiy 2004-09-12 15:25:17 +10:00
Damien Miller 8899ed3b62 - (djm) [loginrec.c] Start KNF and tidy up of this long-neglected file. 
No change in resultant binary
 2004-09-12 15:18:55 +10:00
Darren Tucker 5614d8f8c4 - (dtucker) [auth-krb5.c] Bug #922: Pass KRB5CCNAME to PAM. From deengert 
at anl.gov, ok djm@
 2004-09-11 23:32:09 +10:00
Darren Tucker a0c2b394b4 - (dtucker) [configure.ac] Bug #321: Add cross-compile support to configure. 
Parts by chua at ayrnetworks.com, astrand at lysator.liu.se and me.  ok djm@
 2004-09-11 23:26:37 +10:00
Darren Tucker a2a3ed0010 - (dtucker) [session.c] Bug #927: make .hushlogin silent again. ok djm@ 2004-09-11 23:09:53 +10:00
Darren Tucker 77fc29eeb3 - (dtucker) [auth-pam.c auth.h auth2-none.c auth2.c monitor.c monitor_wrap.c] 
Bug #892: Send messages from failing PAM account modules to the client via
   SSH2_MSG_USERAUTH_BANNER messages.  Note that this will not happen with
   SSH2 kbdint authentication, which need to be dealt with separately.  ok djm@
 2004-09-11 23:07:03 +10:00
Damien Miller 4765679649 - (djm) [auth2-kbdint.c auth2-none.c auth2-passwd.c auth2-pubkey.c] 
Make cygwin code more consistent with that which surrounds it
 2004-09-11 22:42:09 +10:00
Darren Tucker 0a7e3c6c89 - (dtucker) [auth-pam.c] Relocate sshpam_store_conv(), no code change. 2004-09-11 22:28:01 +10:00
Darren Tucker 69687f4b65 - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #890: Send output from 
failing PAM session modules to user then exit, similar to the way
   /etc/nologin is handled.  ok djm@
 2004-09-11 22:17:26 +10:00
Damien Miller 928a19ad9e - (djm) [ssh-agent.c] unifdef some cygwin code; ok dtucker@ 2004-09-11 15:18:05 +10:00
Darren Tucker 25a1234ef7 - (dtucker) [Makefile.in contrib/ssh-copy-id] Bug #894: Improve portability 
of shell constructs.  Patch from cjwatson at debian.org.
 2004-08-30 21:33:02 +10:00
Darren Tucker 476b7ecfe4 - (dtucker) [regress/Makefile] Clean scp-ssh-wrapper.scp too. Patch from 
vinschen at redhat.com.
 2004-08-30 21:13:49 +10:00
Darren Tucker 14c372d49d - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.{c,h}] Bug #915: only 
copy required environment variables on Cygwin.  Patch from vinschen at
   redhat.com, ok djm@
 2004-08-30 20:42:08 +10:00
Darren Tucker 5a88d00349 - (dtucker) [openbsd-compat/port-aix.c] Bug #712: Explicitly check for 
accounts with authentication configs that sshd can't support (ie
   SYSTEM=NONE and AUTH1=something).
 2004-08-29 21:43:33 +10:00
Darren Tucker cf59d31761 - (dtucker) [configure.ac] Replace non-portable echo \n with extra echo. 2004-08-29 21:18:09 +10:00
Darren Tucker b17035fb7f - (dtucker) [regress/agent-ptrace.sh] Skip ptrace test on OSF1/DUnix/Tru64 
too; patch from cmadams at hiwaay.net.
 2004-08-29 20:33:07 +10:00
Darren Tucker 2a502ff310 - (dtucker) [Makefile.in] Get regress/Makefile symlink right for out-of-tree 
builds too, from vinschen at redhat.com.
 2004-08-29 19:52:32 +10:00
Darren Tucker 0521dcb22e - (dtucker) [regress/scp.sh] Make this work on Cygwin too, which doesn't like 
files ending in .exe that aren't binaries; patch from vinschen at redhat.com.
 2004-08-29 19:39:09 +10:00
Darren Tucker 07d30e4579 - (dtucker) [regress/dynamic-forward.sh] Allow time for connections to be torn 
down, needed on some platforms, should be harmless on others.  Patch from
   jason at devrandom.org.
 2004-08-29 17:14:31 +10:00
Darren Tucker 2a81adc35c - (dtucker) [regress/multiplex.sh] Skip test on platforms that do not 
support FD passing since multiplex requires it.  Noted by tim@
 2004-08-29 17:09:34 +10:00
Darren Tucker 48d99d36bb - (dtucker) [configure.ac] Include sys/stream.h in sys/ptms.h header check, 
fixes configure warning on Solaris reported by wknox at mitre.org.
 2004-08-29 17:04:50 +10:00
Darren Tucker 0f56ed16b8 - djm@cvs.openbsd.org 2004/08/28 01:01:48 
[sshd.c]
     don't erroneously close stdin for !reexec case, from Dave Johnson;
     ok markus@
 2004-08-29 16:38:41 +10:00
Darren Tucker db69390817 - markus@cvs.openbsd.org 2004/08/26 16:00:55 
[ssh.1 sshd.8]
     get rid of references to rhosts authentication; with jmc@
 2004-08-29 16:37:24 +10:00
Darren Tucker 34620d6f71 - dtucker@cvs.openbsd.org 2004/08/23 14:29:23 
[ssh-keysign.c]
     Remove duplicate getuid(), suggested by & ok markus@
 2004-08-29 16:32:59 +10:00
Darren Tucker 27a8f6b056 - dtucker@cvs.openbsd.org 2004/08/23 14:26:38 
[ssh-keysign.c ssh.c]
     Use permanently_set_uid() in ssh and ssh-keysign for consistency, matches
     change in Portable; ok markus@ (CVS ID sync only)
 2004-08-29 16:31:28 +10:00
Darren Tucker e6ed83976b - djm@cvs.openbsd.org 2004/08/23 11:48:47 
[channels.c]
     typo, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
 2004-08-29 16:29:44 +10:00
Darren Tucker f4b43712c1 - djm@cvs.openbsd.org 2004/08/23 11:48:09 
[authfile.c]
     fix error path, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
 2004-08-29 16:28:39 +10:00
Darren Tucker f00e51d1f2 - (dtucker) [openbsd-compat/getrrsetbyname.c] Prevent getrrsetbyname from 
failing with NOMEMORY if no sigs are returned and malloc(0) returns NULL.
   From Martin.Kraemer at Fujitsu-Siemens.com; ok djm@
 2004-08-29 16:12:29 +10:00
Darren Tucker 11bdc01cfe Add filename to ChangeLog entry 2004-08-28 16:17:35 +10:00
Darren Tucker f0c2aeaf3d - (dtucker) [openbsd-compat/mktemp.c] Remove superfluous Cygwin #ifdef; from 
vinschen at redhat.com.
 2004-08-28 15:46:57 +10:00
Damien Miller b0419f26d0 - (djm) [loginrec.c] Typo and bad args in error messages; Spotted by 
Martin.Kraemer AT Fujitsu-Siemens.com
 2004-08-23 21:53:28 +10:00
Damien Miller 7daf044aa2 - (djm) [ssh-rand-helper.c] Typo. Found by 
Martin.Kraemer AT Fujitsu-Siemens.com
 2004-08-23 21:52:08 +10:00
Damien Miller e17cc75fe3 - (djm) Release 3.9p1 2004-08-17 22:50:40 +10:00
Damien Miller d545285ec1 - (djm) Crank RPM spec version numbers 2004-08-17 22:49:12 +10:00
Damien Miller 87c9cca391 - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2004/08/16 08:17:01
     [version.h]
     3.9
 2004-08-17 22:47:41 +10:00
Darren Tucker bad5f2d329 - (dtucker) [regress/README.regress] Note compatibility issues with GNU head. 2004-08-17 22:31:32 +10:00
Darren Tucker 21dd0897d5 - (dtucker) [acconfig.h auth-pam.c configure.ac] Set real uid to non-root 
to convince Solaris PAM to honour password complexity rules.  ok djm@
 2004-08-16 23:12:05 +10:00
Darren Tucker 0cbc3c6509 - (dtucker) [Makefile.in] Fix typo. 2004-08-15 21:01:37 +10:00
Damien Miller 8140959de0 - (djm) [loginrec.c] Check that seek succeeded here too; ok dtucker 2004-08-15 19:12:52 +10:00
Damien Miller 36f4965020 - (djm) [acconfig.h configure.ac openbsd-compat/Makefile.in 
openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-misc.c
   openbsd-compat/bsd-misc.h openbsd-compat/openbsd-compat.h] Use smarter
   closefrom() replacement from sudo; ok dtucker@
 2004-08-15 18:40:59 +10:00
Darren Tucker 25f60a7ee7 - (dtucker) [Makefile.in ssh-keysign.c ssh.c] Use permanently_set_uid() since 
it does the right thing on all platforms.  ok djm@
 2004-08-15 17:23:34 +10:00
Darren Tucker 397a2f2612 - (dtucker) [loginrec.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h] 
Plug AIX login recording into login_write so logins will be recorded for
   all auth types.
 2004-08-15 00:09:11 +10:00
Darren Tucker 3d50c9bda6 - (dtucker) [includes.h] Undef _INCLUDE__STDC__ on HP-UX, otherwise 
prot.h and shadow.h provide conflicting declarations of getspnam.  ok djm@
 2004-08-15 00:01:48 +10:00
Darren Tucker 066969339d - (dtucker) [auth-krb5.c gss-serv-krb5.c openbsd-compat/xmmap.c] 
Explicitly set umask for mkstemp; ok djm@
 2004-08-14 23:55:37 +10:00
Darren Tucker 137e9c97e0 - dtucker@cvs.openbsd.org 2004/08/13 11:09:24 
[servconf.c]
     Fix line numbers off-by-one in error messages, from tortay at cc.in2p3.fr
     ok markus@, djm@
 2004-08-13 21:30:24 +10:00
Darren Tucker 1ef0bc0b0a - djm@cvs.openbsd.org 2004/08/13 02:51:48 
[monitor_fdpass.c]
     extra check for no message case; ok markus, deraadt, hshoexer, henning
 2004-08-13 21:29:02 +10:00
Darren Tucker 6e37037fea - jmc@cvs.openbsd.org 2004/08/13 00:01:43 
[ssh-keygen.1]
     kill whitespace at eol;
 2004-08-13 21:23:25 +10:00
Darren Tucker 0b42e6d95b - jakob@cvs.openbsd.org 2004/08/12 21:41:13 
[ssh-keygen.1 ssh.1]
     improve SSHFP documentation; ok deraadt@
 2004-08-13 21:22:40 +10:00
Darren Tucker bcf279783a - djm@cvs.openbsd.org 2004/08/12 09:18:24 
[sshlogin.c]
     typo in error message, spotted by moritz AT jodeit.org (Id sync only)
 2004-08-13 21:21:47 +10:00
Darren Tucker fe6649da0c - avsm@cvs.openbsd.org 2004/08/11 21:44:32 
[authfd.c scp.c ssh-keyscan.c]
     use atomicio instead of homegrown equivalents or read/write.
     markus@ ok
 2004-08-13 21:19:37 +10:00
Darren Tucker c7a6fc41bf - avsm@cvs.openbsd.org 2004/08/11 21:43:05 
[channels.c channels.h clientloop.c misc.c misc.h serverloop.c ssh-agent.c]
     some signed/unsigned int comparison cleanups; markus@ ok
 2004-08-13 21:18:00 +10:00
Darren Tucker 03669a363e - (dtucker) [openbsd-compat/bsd-misc.c] Typo in #ifdef; from vinschen at 
redhat.com
 2004-08-13 18:37:21 +10:00
Darren Tucker eb57862e7c - (dtucker) [sshd.c] Clear loginmsg in postauth monitor, prevents doubling 
messages generated before the postauth privsep split.
 2004-08-12 23:08:14 +10:00
Darren Tucker 133b757357 - djm@cvs.openbsd.org 2004/08/11 12:01:16 
[sshlogin.c]
     make store_lastlog_message() static to appease -Wall; ok markus
 2004-08-12 22:50:03 +10:00
Darren Tucker 9c5049a40f - djm@cvs.openbsd.org 2004/08/11 11:59:22 
[sshlogin.c]
     check that lseek went were we told it to; ok markus@
     (Id sync only, but similar changes are needed in loginrec.c)
 2004-08-12 22:49:00 +10:00
Darren Tucker d8835934c4 - dtucker@cvs.openbsd.org 2004/08/11 11:50:09 
[sshd.c]
     Don't try to close startup_pipe if it's not open; ok djm@
 2004-08-12 22:42:29 +10:00
Darren Tucker 9fbac71905 - dtucker@cvs.openbsd.org 2004/08/11 11:09:54 
[servconf.c]
     Fix minor leak; "looks right" deraadt@
 2004-08-12 22:41:44 +10:00
Darren Tucker 9a2bd1116b - djm@cvs.openbsd.org 2004/08/04 10:37:52 
[dh.c]
     return group14 when no primes found - fixes hang on empty /etc/moduli;
     ok markus@
 2004-08-12 22:40:59 +10:00
Darren Tucker 5cb30ad2ec - markus@cvs.openbsd.org 2004/07/28 09:40:29 
[auth.c auth1.c auth2.c cipher.c cipher.h key.c session.c ssh.c
     sshconnect1.c]
     more s/illegal/invalid/
 2004-08-12 22:40:24 +10:00
Darren Tucker 6832b83744 - markus@cvs.openbsd.org 2004/07/28 08:56:22 
[sshd.c]
     call setsid() _before_ re-exec
 2004-08-12 22:36:51 +10:00
Darren Tucker 8ae66a5032 - (dtucker) [sshd.c] Remove duplicate variable imported during sync. 2004-08-12 22:16:55 +10:00
Damien Miller 0670c7396f - djm@cvs.openbsd.org 2004/07/21 11:51:29 
[canohost.c]
     bz#902: cache remote port so we don't fatal() in auth_log when remote
     connection goes away quickly. from peak AT argo.troja.mff.cuni.cz;
     ok markus@
 2004-07-21 21:53:34 +10:00
Damien Miller 2d2ed3d633 - (djm) [auth-pam.c] Portable parts of bz#899: Don't display invalid 
usernames in setproctitle from peak AT argo.troja.mff.cuni.cz;
 2004-07-21 20:54:47 +10:00
Damien Miller 10a445b9e5 - djm@cvs.openbsd.org 2004/07/21 10:36:23 
[gss-serv-krb5.c]
     fix function declaration
 2004-07-21 20:49:39 +10:00
Damien Miller 30d1f84911 - djm@cvs.openbsd.org 2004/07/21 10:33:31 
[auth1.c auth2.c]
     bz#899: Don't display invalid usernames in setproctitle
 2004-07-21 20:48:53 +10:00
Damien Miller a22f2d761b - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2004/07/21 08:56:12
     [auth.c]
     s/Illegal user/Invalid user/; many requests; ok djm, millert, niklas,
     miod, ...
 2004-07-21 20:48:24 +10:00
Damien Miller b5a21440a8 - (djm) [regress/README.regress] Remove caveat regarding TCP wrappers, now 
that sshd is fixed to behave better; suggested by tim
 2004-07-21 20:44:05 +10:00
Damien Miller 8fe0105be4 - (djm) [contrib/redhat/sshd.pam] bz #903: Remove redundant entries; from 
peak AT argo.troja.mff.cuni.cz
 2004-07-21 11:01:41 +10:00
Damien Miller 23a7027e48 - (djm) [log.c] bz #111: Escape more control characters when sending data 
to syslog; from peak AT argo.troja.mff.cuni.cz
 2004-07-21 10:52:13 +10:00
Tim Rice 816bd0d087 - (tim) [configure.ac] updwtmpx() on OpenServer seems to add duplicate entry. 
Report by rac AT tenzing.org
 2004-07-19 10:19:26 -07:00
Damien Miller a6fb77fd6c - (djm) [auth-pam.c] Avoid use of xstrdup and friends in conversation function, 
instead return PAM_CONV_ERR, avoiding another path to fatal(); ok dtucker@
 2004-07-19 09:39:11 +10:00
Damien Miller 65df174574 - (djm) [openbsd-compat/bsd-arc4random.c] Discard early keystream, like OpenBSD 
ok dtucker@
 2004-07-19 09:30:38 +10:00
Darren Tucker 0999174755 - dtucker@cvs.openbsd.org 2004/07/17 05:31:41 
[monitor.c monitor_wrap.c session.c session.h sshd.c sshlogin.c]
     Move "Last logged in at.." message generation to the monitor, right
     before recording the new login.  Fixes missing lastlog message when
     /var/log/lastlog is not world-readable and incorrect datestamp when
     multiple sessions are used (bz #463);  much assistance & ok markus@
 2004-07-17 17:05:14 +10:00
Darren Tucker 3ca4508201 - brad@cvs.openbsd.org 2004/07/12 23:34:25 
[ssh-keyscan.1]
     Fix incorrect macro, .I -> .Em
     From: Eric S. Raymond <esr at thyrsus dot com>
     ok jmc@
 2004-07-17 16:13:15 +10:00
Darren Tucker fc9597034b - deraadt@cvs.openbsd.org 2004/07/11 17:48:47 
[channels.c cipher.c clientloop.c clientloop.h compat.h moduli.c
     readconf.c nchan.c pathnames.h progressmeter.c readconf.h servconf.c
     session.c sftp-client.c sftp.c ssh-agent.1 ssh-keygen.c ssh.c ssh1.h
     sshd.c ttymodes.h]
     spaces
 2004-07-17 16:12:08 +10:00
Darren Tucker ba6de952a0 - (dtucker) [logintest.c scp.c sftp-server.c sftp.c ssh-add.c ssh-agent.c 
ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c ssh.c sshd.c
   openbsd-compat/bsd-misc.c] Move "char *__progname" to bsd-misc.c.  Reduces
   diff vs OpenBSD; ok mouring@, tested by tim@ too.
 2004-07-17 14:07:42 +10:00
Darren Tucker 5d423f4ece - (dtucker) [auth-pam.c] Check for zero from waitpid() too, which allows 
the monitor to properly clean up the PAM thread (Debian bug #252676).
 2004-07-11 16:54:08 +10:00
Tim Rice 3b376f08fb - (tim) [contrib/cygwin/README] add minires-devel requirement. Patch from 
vinschen AT redhat.com
 2004-07-09 10:45:26 -07:00
Darren Tucker e1f17055ed - dtucker@cvs.openbsd.org 2004/07/08 12:47:21 
[scp.c]
     Prevent scp from skipping the file following a double-error.
     bz #863, ok markus@
 2004-07-08 23:11:44 +10:00
Darren Tucker 042e2e8cbb - dtucker@cvs.openbsd.org 2004/07/03 11:02:25 
[monitor_wrap.c]
     Put s/key functions inside #ifdef SKEY same as monitor.c,
     from des@freebsd via bz #330, ok markus@
 2004-07-08 23:09:42 +10:00
Darren Tucker cd99fa0648 - dtucker@cvs.openbsd.org 2004/07/03 05:11:33 
[sshlogin.c] (RCSID sync only, the corresponding code is not in Portable)
     Use '\0' not 0 for string; ok djm@, deraadt@
 2004-07-08 23:08:26 +10:00
Darren Tucker d062da53c7 - (dtucker) [mdoc2man.awk] Teach it to ignore .Bk -words, reported by 
strube at physik3.gwdg.de a long time ago.
 2004-07-02 18:43:09 +10:00
Tim Rice a5757f0f28 - (tim) [buildpkg.sh.in] Add $REV to bump the package revision within 
the same version. Handle the case where someone uses --with-privsep-user=
   and the user name does not match the group name. ok dtucker@
 2004-07-01 20:41:15 -07:00
Darren Tucker 1f7e40864f - (dtucker) [auth-pam.c] Bug #559 (last piece): Pass DISALLOW_NULL_AUTHTOK 
to pam_authenticate for challenge-response auth too.  Originally from
   fcusack at fcusack.com, ok djm@
 2004-07-01 14:00:14 +10:00
Darren Tucker e2ba9c2e83 - (dtucker) [auth-pam.c] Bug #705: Make arguments match PAM specs, fixes 
warnings on compliant platforms.  From paul.a.bolton at bt.com.  ok djm@
 2004-07-01 12:38:14 +10:00
Darren Tucker 0a44d1ecf3 - (dtucker) [session.c] Call display_loginmsg again after do_pam_session. 
Ensures messages from PAM modules are displayed when privsep=no.

Note: I did not want to just move display_loginmsg since that would change
existing behaviour (order of expiry warnings, "Last Login", motd) to less
like the native tools.
 2004-07-01 09:48:29 +10:00
Damien Miller a6b1d169e6 - djm@cvs.openbsd.org 2004/06/30 08:36:59 
[session.c]
     unbreak TTY break, diagnosed by darren AT dazwin.com; ok markus@
 2004-06-30 22:41:07 +10:00
Damien Miller 386c6a2c70 - avsm@cvs.openbsd.org 2004/06/26 20:07:16 
[sshd.c]
     initialise some fd variables to -1, djm@ ok
 2004-06-30 22:40:20 +10:00
Damien Miller 26213e556b - jmc@cvs.openbsd.org 2004/06/26 09:14:40 
[sshd_config.5]
     new sentence, new line;
 2004-06-30 22:39:34 +10:00
Damien Miller 2234bac999 - jmc@cvs.openbsd.org 2004/06/26 09:11:14 
[ssh_config.5]
     punctuation and grammar fixes. also, keep the options in order.
 2004-06-30 22:38:52 +10:00
Damien Miller 5d1ecebcb5 - OpenBSD CVS Sync 
- jmc@cvs.openbsd.org 2004/06/26 09:03:21
     [ssh.1]
     - remove double word
     - rearrange .Bk to keep SYNOPSIS nice
     - -M before -m in options description
 2004-06-30 22:37:57 +10:00
Darren Tucker 59e06026d7 - (dtucker) [auth-pam.c] Check for buggy PAM modules that return a NULL 
appdata_ptr to the conversation function.  ok djm@

By rights we should free the messages too, but if this happens then one
of the modules has already proven itself to be buggy so can we trust
the messages?
 2004-06-30 20:34:31 +10:00