Darren Tucker
ce321d8a30
- djm@cvs.openbsd.org 2005/09/13 23:40:07
...
[sshd.c ssh.c misc.h sftp.c ssh-keygen.c ssh-keysign.c sftp-server.c
scp.c misc.c ssh-keyscan.c ssh-add.c ssh-agent.c]
ensure that stdio fds are attached; ok deraadt@
2005-10-03 18:11:24 +10:00
Darren Tucker
d89dbf29ff
- markus@cvs.openbsd.org 2005/09/09 19:18:05
...
[clientloop.c]
typo; from mark at mcs.vuw.ac.nz, bug #1082
2005-10-03 18:05:26 +10:00
Darren Tucker
d3d0fa1558
- markus@cvs.openbsd.org 2005/09/07 08:53:53
...
[channels.c]
enforce chanid != NULL; ok djm
2005-10-03 18:03:05 +10:00
Darren Tucker
d4f04ae247
- (dtucker) [monitor.c] Bug #1087 : Send loginmsg to preauth privsep
...
child during PAM account check without clearing it. This restores the
post-login warnings such as LDAP password expiry. Patch from Tomas Mraz
with help from several others.
2005-09-30 10:23:21 +10:00
Darren Tucker
6e4221129e
- (dtucker) [openbsd-compat/openbsd-compat.h] Bug #1096 : Add prototype
...
for strtoll. Patch from o.flebbe at science-computing.de.
2005-09-30 09:55:49 +10:00
Darren Tucker
372c8fbe9b
- (dtucker) [monitor_wrap.c] Remove duplicate definition of loginmsg
...
introduced during sync.
2005-09-29 22:01:10 +10:00
Darren Tucker
7b1e695846
- (dtucker) [auth-pam.c] Bug #1028 : send final non-query messages from
...
PAM via keyboard-interactive. Patch tested by the folks at Vintela.
2005-09-28 22:33:27 +10:00
Darren Tucker
46e7ba5d53
- (dtucker) [entropy.c] Use u_char for receiving RNG seed for consistency
2005-09-28 08:26:30 +10:00
Darren Tucker
c6f8219e0d
- (dtucker) [entropy.c entropy.h sshd.c] Pass RNG seed to the reexec'ed
...
process when sshd relies on ssh-random-helper. Should result in faster
logins on systems without a real random device or prngd. ok djm@
2005-09-27 22:46:32 +10:00
Darren Tucker
f1377bdeed
- (dtucker) [entropy.c] Remove unnecessary tests for getuid and geteuid
...
calls, since they can't possibly fail. ok djm@
2005-09-27 19:50:25 +10:00
Darren Tucker
d3eff2bfa5
- (dtucker) [auth2.c] Move start_pam() calls out of if-else block to remove
...
duplicate call. ok djm@
2005-09-24 12:43:51 +10:00
Darren Tucker
82171c6607
- (dtucker) [configure.ac] Fix help for --with-opensc; patch from skeleten at
...
shillest.net.
2005-09-22 20:19:54 +10:00
Darren Tucker
c373a56343
- (dtucker) [configure.ac] Use -R linker flag for libedit too; patch from
...
skeleten at shillest.net.
2005-09-22 20:15:08 +10:00
Tim Rice
542f62b9d2
remove acconfig.h
2005-09-19 09:36:55 -07:00
Tim Rice
7df8d39a5f
- (tim) [aclocal.m4 configure.ac] Delete acconfig.h and add templates to
...
AC_DEFINE and AC_DEFINE_UNQUOTED to quiet autoconf 2.59 warning messages.
2005-09-19 09:33:39 -07:00
Tim Rice
fd9e9e3ba6
- (tim) [configure.ac] Bug 1078. Fix --without-kerberos5. Reported by
...
Mike Frysinger.
2005-09-12 17:36:10 -07:00
Tim Rice
784d4f538f
Last commit skipped defines.h
...
- (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to
OpenServer 6 and add osr5bigcrypt support so when someone migrates
passwords between UnixWare and OpenServer they will still work. OK dtucker@
2005-09-08 22:04:59 -07:00
Tim Rice
64ead485ac
- (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to
...
OpenServer 6 and add osr5bigcrypt support so when someone migrates
passwords between UnixWare and OpenServer they will still work. OK dtucker@
2005-09-08 21:56:33 -07:00
Damien Miller
c8ab8ceacb
- (djm) Update RPM spec file versions
2005-09-01 19:10:48 +10:00
Tim Rice
66fd217e8e
- (tim) [configure.ac auth.c defines.h session.c openbsd-compat/port-uw.c
...
openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] libiaf cleanup. Disable
libiaf bits for OpenServer6. Free memory allocated by ia_get_logpwd().
Feedback and OK dtucker@
2005-08-31 09:59:49 -07:00
Darren Tucker
d0a47cd243
- (dtucker) [README] Update release note URL to 4.2
2005-09-01 00:05:56 +10:00
Damien Miller
ae37959bfb
- markus@cvs.openbsd.org 2005/08/31 09:28:42
...
[version.h]
4.2
2005-08-31 19:47:07 +10:00
Damien Miller
da9984fc3a
- (djm) OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2005/08/30 22:08:05
[gss-serv.c sshconnect2.c]
destroy credentials if krb5_kuserok() call fails. Stops credentials being
delegated to users who are not authorised for GSSAPIAuthentication when
GSSAPIDeletegateCredentials=yes and another authentication mechanism
succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
2005-08-31 19:46:26 +10:00
Damien Miller
ca9ce95bdd
correct bug number
2005-08-31 19:42:20 +10:00
Tim Rice
eb456545fd
- (tim) [configure.ac] Back out last change. It needs to be done differently.
2005-08-30 07:12:02 -07:00
Tim Rice
2016865b95
- (tim) [configure.ac] ia_openinfo() seems broken on OSR6. Limit UW long
...
password support to 7.x for now.
2005-08-29 17:17:37 -07:00
Tim Rice
2291c00ab2
- (tim) [CREDITS LICENCE auth.c configure.ac defines.h includes.h session.c
...
openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h
openbsd-compat/xcrypt.c] New files [openssh/openbsd-compat/port-uw.c
openssh/openbsd-compat/port-uw.h] Support long passwords (> 8-char)
on UnixWare 7 from Dhiraj Gulati and Ahsan Rashid. Cleanup and testing
by tim@. Feedback and OK dtucker@
2005-08-26 13:15:19 -07:00
Tim Rice
8cc2ad68cd
- (tim) [defines.h] PATH_MAX bits for OpenServer OK dtucker@
2005-08-23 17:18:21 -07:00
Tim Rice
3db1e3fc68
- (tim) [configure.ac ] Not all gcc's support -Wsign-compare
2005-08-23 17:11:26 -07:00
Darren Tucker
114572f7ee
- (dtucker) [regress/test-exec.sh] Do not prepend an extra "/" to a fully-
...
qualified sshd pathname since some systems (eg Cygwin) may consider "/foo"
and "//foo" to be different. Spotted by vinschen at redhat.com.
2005-08-23 23:32:05 +10:00
Darren Tucker
93e7e8f345
- (dtucker) [configure.ac defines.h includes.h sftp.c] Add support for
...
LynxOS, patch from Olli Savia (ops at iki.fi). ok djm@
2005-08-23 08:06:55 +10:00
Damien Miller
1d10976c16
- (djm) [ttymodes.c] bugzilla #1054 : Fix encoding of _POSIX_VDISABLE,
...
from Jacob Nevins; ok dtucker@
2005-08-16 21:32:09 +10:00
Tim Rice
c1819c831f
- (tim) [configure.ac] corrections to libedit tests. Report and patches
...
by skeleten AT shillest.net
2005-08-15 17:48:40 -07:00
Tim Rice
027e8b10f5
- (tim) wrap el_end() in #ifdef USE_LIBEDIT
2005-08-15 14:52:50 -07:00
Damien Miller
0e2c102858
- jaredy@cvs.openbsd.org 2005/08/08 13:22:48
...
[sftp.c]
sftp prompt enhancements:
- in non-interactive mode, do not print an empty prompt at the end
before finishing
- print newline after EOF in editline mode
- call el_end() in editline mode
ok dtucker djm
2005-08-12 22:16:22 +10:00
Damien Miller
8e489484a1
oops, that last commit was:
...
Report from Janusz Mucka; ok djm@
2005-08-12 22:11:58 +10:00
Damien Miller
203c70579e
- dtucker@cvs.openbsd.org 2005/08/06 10:03:12
...
[servconf.c]
Unbreak sshd ListenAddress for bare IPv6 addresses.
2005-08-12 22:11:37 +10:00
Damien Miller
43f6db64ff
- djm@cvs.openbsd.org 2005/07/30 02:03:47
...
[readconf.c]
listen_hosts initialisation here too; spotted greg AT y2005.nest.cx
2005-08-12 22:11:18 +10:00
Damien Miller
be1045dc58
- djm@cvs.openbsd.org 2005/07/30 01:26:16
...
[ssh.c]
fix -D listen_host initialisation, so it picks up gateway_ports setting
correctly
2005-08-12 22:10:56 +10:00
Damien Miller
b5c012577e
- markus@cvs.openbsd.org 2005/07/28 17:36:22
...
[packet.c]
missing packet_init_compression(); from solar
2005-08-12 22:10:28 +10:00
Darren Tucker
73f671a090
- (dtucker) [LICENCE configure.ac defines.h openbsd-compat/realpath.c]
...
Sync current (thread-safe) version of realpath.c from OpenBSD (which is
in turn based on FreeBSD's). ok djm@
2005-08-10 21:52:36 +10:00
Darren Tucker
c7572b2661
- (dtucker) [configure.ac] Test libedit library and headers for compatibility.
...
Report from skeleten AT shillest.net, ok djm@
2005-08-10 20:34:15 +10:00
Tim Rice
8bc6b900ed
- (tim) [configure.ac] Allow --with-audit=no. OK dtucker@
...
Report by skeleten AT shillest.net
2005-08-09 10:09:53 -07:00
Darren Tucker
9825697d3c
- (dtucker) [openbsd-compat/fake-rfc2553.h] MAX_INT -> INT_MAX since the
...
latter is specified in the standard.
2005-08-03 15:36:21 +10:00
Darren Tucker
212cfc4b48
- (dtucker) [openbsd-compat/fake-rfc2553.h] Check for EAI_* defines
...
individually and use a value less likely to collide with real values from
netdb.h. Fixes compile warnings on FreeBSD 5.3. ok djm@
2005-08-03 10:57:15 +10:00
Darren Tucker
7da23cb5d3
- (dtucker) [configure.ac] Add a --with-Werror option to configure for
...
adding -Werror to CFLAGS when all of the configure tests are done. ok djm@
2005-08-03 00:20:15 +10:00
Darren Tucker
dd352b675b
- (dtucker) [configure.ac] Enable -Wuninitialized by default when compiling
...
with gcc. ok djm@
2005-08-02 17:21:29 +10:00
Darren Tucker
4085853915
- dtucker@cvs.openbsd.org 2005/07/27 10:39:03
...
[scp.c hostfile.c sftp-client.c]
Silence bogus -Wuninitialized warnings; ok djm@
2005-08-02 17:07:07 +10:00
Damien Miller
9786e6e2a0
- markus@cvs.openbsd.org 2005/07/25 11:59:40
...
[kex.c kex.h myproposal.h packet.c packet.h servconf.c session.c]
[sshconnect2.c sshd.c sshd_config sshd_config.5]
add a new compression method that delays compression until the user
has been authenticated successfully and set compression to 'delayed'
for sshd.
this breaks older openssh clients (< 3.5) if they insist on
compression, so you have to re-enable compression in sshd_config.
ok djm@
2005-07-26 21:54:56 +10:00
Damien Miller
47655ee03a
- (djm) OpenBSD CVS Sync
...
- otto@cvs.openbsd.org 2005/07/19 15:32:26
[auth-passwd.c]
auth_usercheck(3) can return NULL, so check for that. Report from
mpech@. ok markus@
2005-07-26 21:54:11 +10:00