tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,827 Commits 7 Branches 18 Tags 96 MiB
Commit Graph

3401 Commits

Author SHA1 Message Date
Darren Tucker 07705c788e - (dtucker) [auth-pam.c] Do PAM chauthtok during SSH2 keyboard-interactive 
authentication.  Partially fixes bug #423.  Feedback & ok djm@

Some background on why this is the way it is:
* Solaris 8's pam_chauthtok ignores the CHANGE_EXPIRED_AUTHTOK flag, so
  we must call do_pam_account() to figure out if the password is expired.
* AIX 5.2 does not like having pam_acct_mgmt() called twice, once from the
  authentication thread and once from the main shell child, so we cache the
  result, which must be passed from the authentication thread back to the
  monitor.
 2003-12-18 15:34:31 +11:00
Darren Tucker 454da0b3dc - (dtucker) [configure.ac] Don't use setre[ug]id on DG-UX, from Tom Orban. 2003-12-18 12:52:19 +11:00
Ben Lindstrom 563eb99711 - (bal) [openbsd-compat/bsd-misc.c] unset 'signal' defined if we are 
using a real 'signal()' (Noticed by a NeXT Compile)
 2003-12-18 00:34:06 +00:00
Darren Tucker e937be36c3 - (dtucker) [acconfig.h configure.ac uidswap.c] Bug #645: Check for 
setres[ug]id() present but not implemented (eg some Linux/glibc
   combinations).
 2003-12-17 18:53:26 +11:00
Damien Miller 8975ddf11b - markus@cvs.openbsd.org 2003/12/16 15:51:54 
[dh.c]
     use <= instead of < in dh_estimate; ok provos/hshoexer;
     do not return < DH_GRP_MIN
 2003-12-17 16:33:53 +11:00
Damien Miller 509b0107f0 - markus@cvs.openbsd.org 2003/12/16 15:49:51 
[clientloop.c clientloop.h readconf.c readconf.h scp.1 sftp.1 ssh.1]
     [ssh.c ssh_config.5]
     application layer keep alive (ServerAliveInterval ServerAliveCountMax)
     for ssh(1), similar to the sshd(8) option; ok beck@; with help from
     jmc and dtucker@
 2003-12-17 16:33:10 +11:00
Damien Miller baafb981a4 - markus@cvs.openbsd.org 2003/12/14 12:37:21 
[ssh_config.5]
     we don't support GSS KEX; from Simon Wilkinson
 2003-12-17 16:32:23 +11:00
Damien Miller d696551443 - dtucker@cvs.openbsd.org 2003/12/09 23:45:32 
[clientloop.c]
     Clear exit code when ssh -N is terminated with a SIGTERM.  ok markus@
 2003-12-17 16:31:53 +11:00
Damien Miller 12c150e7e0 - markus@cvs.openbsd.org 2003/12/09 21:53:37 
[readconf.c readconf.h scp.1 servconf.c servconf.h sftp.1 ssh.1]
     [ssh_config.5 sshconnect.c sshd.c sshd_config.5]
     rename keepalive to tcpkeepalive; the old name causes too much
     confusion; ok djm, dtucker; with help from jmc@
 2003-12-17 16:31:10 +11:00
Damien Miller 9836cf8d71 - markus@cvs.openbsd.org 2003/12/09 17:30:05 
[ssh.c]
     don't modify argv for ssh -o; similar to sshd.c 1.283
 2003-12-17 16:30:06 +11:00
Damien Miller b9997192a7 - markus@cvs.openbsd.org 2003/12/09 17:29:04 
[sshd.c]
     fix -o and HUP; ok henning@
 2003-12-17 16:29:22 +11:00
Damien Miller b5820f40bf 20031217 
- (djm) OpenBSD CVS Sync
   - markus@cvs.openbsd.org 2003/12/09 15:28:43
     [serverloop.c]
     make ClientKeepAlive work for ssh -N, too (no login shell requested).
     1) send a bogus channel request if we find a channel
     2) send a bogus global request if we don't have a channel
     ok + test beck@
 2003-12-17 16:27:32 +11:00
Darren Tucker 5cd9d443ef - dtucker@cvs.openbsd.org 2003/12/09 13:52:55 
[moduli.c]
     Prevent ssh-keygen -T from outputting moduli with a generator of 0, since
     they can't be used for Diffie-Hellman.  Assistance and ok djm@
 2003-12-10 00:54:38 +11:00
Darren Tucker a615314d3b - (dtucker) [ssh-keyscan.c] Sync RCSIDs, missed in SSH_SSFDMAX change below. 2003-12-10 00:52:37 +11:00
Darren Tucker 1cbc444935 - djm@cvs.openbsd.org 2003/12/07 06:34:18 
[moduli.c]
     remove unused debugging #define templates
 2003-12-09 19:19:38 +11:00
Darren Tucker 564f19e237 - markus@cvs.openbsd.org 2003/12/08 11:00:47 
[kexgexc.c]
     print requested group size in debug; ok djm
 2003-12-09 19:18:07 +11:00
Darren Tucker 3175eb9a5a - markus@cvs.openbsd.org 2003/12/02 17:01:15 
[channels.c session.c ssh-agent.c ssh.h sshd.c]
     use SSH_LISTEN_BACKLOG (=128) in listen(2).
 2003-12-09 19:15:11 +11:00
Darren Tucker 1fb0425359 - markus@cvs.openbsd.org 2003/12/02 12:15:10 
[progressmeter.c]
     improvments from andreas@:
     * saner speed estimate for transfers that takes less than a second by
       rounding the time to 1 second.
     * when the transfer is finished calculate the actual total speed
       rather than the current speed which is given during the transfer
 2003-12-09 19:07:13 +11:00
Darren Tucker 37afa9d9a4 - djm@cvs.openbsd.org 2003/11/26 21:44:29 
[cipher-aes.c]
     fix #ifdef before #define; ok markus@
     (RCS ID sync only, Portable already had this)
 2003-12-09 19:05:42 +11:00
Darren Tucker 4c56843e44 - matthieu@cvs.openbsd.org 2003/11/25 23:10:08 
[ssh-add.1]
     ssh-add doesn't need to be a descendant of ssh-agent. Ok markus@, jmc@.
 2003-12-09 19:01:51 +11:00
Tim Rice 88368a3034 [configure.ac] Bug 770. Fix --without-rpath. 2003-12-08 12:35:59 -08:00
Damien Miller 3db2e4daf7 - (djm) Annotate OpenBSD-derived files in openbsd-compat/ with original 
source file path (in OpenBSD tree).
 2003-11-24 13:33:34 +11:00
Damien Miller e0113ccc08 - dtucker@cvs.openbsd.org 2003/11/24 00:16:35 
[ssh.1 ssh.c]
     Make ssh -k mean GSSAPIDelegateCredentials=no. Suggestion & ok markus@
 2003-11-24 13:10:09 +11:00
Damien Miller a4b33dfb6d - djm@cvs.openbsd.org 2003/11/23 23:18:45 
[ssh-keygen.c]
     consistency PATH_MAX -> MAXPATHLEN; ok markus@
     (RCS ID sync only)
   - djm@cvs.openbsd.org 2003/11/23 23:21:21
     [scp.c]
     from portable: rename clashing variable limit-> limit_rate; ok markus@
     (RCS ID sync only)
 2003-11-24 13:09:27 +11:00
Damien Miller e00074a726 - (djm) OpenBSD CVS Sync 
- djm@cvs.openbsd.org 2003/11/23 23:17:34
     [ssh-keyscan.c]
     from portable - use sysconf to detect fd limit; ok markus@
     (tidy diff by adding SSH_SSFDMAX macro to defines.h)
 2003-11-24 13:07:45 +11:00
Damien Miller 927f52783e - (djm) [canohost.c] Move IPv4inV6 mapped address normalisation to its own 
function and call it unconditionally
 2003-11-24 12:57:25 +11:00
Damien Miller 5924ceb22d - (djm) [packet.c] Shuffle #ifdef to reduce conditionally compiled code 2003-11-22 15:02:42 +11:00
Damien Miller 841b9f1aad - (djm) [sftp-int.c] Remove duplicated code from bogus sync 2003-11-22 14:48:49 +11:00
Damien Miller 4da295c051 - (djm) [scp.c] Rename limitbw -> limit_rate to match upstreamed patch 2003-11-22 14:39:04 +11:00
Darren Tucker 4e06a1d75d - (dtucker) [auth-sia.c configure.ac] Tru64 update from cmadams at hiwaay.net. 
Use permanently_set_uid for SIA, only define DISABLE_FD_PASSING when SIA
   is enabled, rely on SIA to check for locked accounts if enabled.  ok djm@
 2003-11-22 14:25:15 +11:00
Darren Tucker d76341616d - (dtucker) [auth-passwd.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h] 
Move AIX specific password authentication code to port-aix.c, call
   authenticate() until reenter flag is clear.
 2003-11-22 14:16:56 +11:00
Darren Tucker 240fdfa909 - (dtucker) [channels.c] Make AIX write limit code clearer. Suggested by djm@ 2003-11-22 14:10:02 +11:00
Damien Miller a8e06cef35 - djm@cvs.openbsd.org 2003/11/21 11:57:03 
[everything]
     unexpand and delete whitespace at EOL; ok markus@
     (done locally and RCS IDs synced)
 2003-11-21 23:48:55 +11:00
Damien Miller 8c5e91c03f - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/11/20 11:39:28
     [progressmeter.c]
     fix rounding errors; from andreas@
 2003-11-21 23:09:10 +11:00
Damien Miller f96d18362d - djm@cvs.openbsd.org 2003/11/18 10:53:07 
[monitor.c]
     unbreak fake authloop for non-existent users (my screwup). Spotted and
     tested by dtucker@; ok markus@
 2003-11-18 22:01:48 +11:00
Damien Miller 4bb1dd3166 - (djm) OpenBSD CVS Sync 
- dtucker@cvs.openbsd.org 2003/11/18 00:40:05
     [serverloop.c]
     Correct check for authctxt->valid.  ok djm@
 2003-11-18 22:01:25 +11:00
Darren Tucker 8a1624c42d - (dtucker) [auth-pam.c] Only use pam_putenv if our platform has it. ok djm@ 2003-11-18 12:45:35 +11:00
Darren Tucker 18df00cc77 - (dtucker) [auth-pam.c] Convert chauthtok_conv into a generic tty_conv, 
and use it for do_pam_session.  Fixes problems like pam_motd not displaying
   anything.  ok djm@
 2003-11-18 12:42:07 +11:00
Damien Miller 6aef38f5ac - (djm) Fix early exit for root auth success when UsePAM=yes and 
PermitRootLogin=no
 2003-11-18 10:45:20 +11:00
Damien Miller 0425d40194 - markus@cvs.openbsd.org 2003/11/17 11:06:07 
[auth2-gss.c gss-genr.c gss-serv.c monitor.c monitor.h monitor_wrap.c]
     [monitor_wrap.h sshconnect2.c ssh-gss.h]
     replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson;
     test + ok jakob.
 2003-11-17 22:18:21 +11:00
Damien Miller c756e9b56e - (djm) Export environment variables from authentication subprocess to 
parent. Part of Bug #717
 2003-11-17 21:41:42 +11:00
Damien Miller 9bdba70350 - (djm) Bug #632: Don't call pam_end indirectly from within kbd-int 
conversation function
 2003-11-17 21:27:55 +11:00
Damien Miller 51bf11fcc9 - djm@cvs.openbsd.org 2003/11/17 09:45:39 
[msg.c msg.h sshconnect2.c ssh-keysign.c]
     return error on msg send/receive failure (rather than fatal); ok markus@
 2003-11-17 21:20:47 +11:00
Damien Miller 91c6aa4468 - markus@cvs.openbsd.org 2003/11/14 13:19:09 
[sshconnect2.c]
     cleanup and minor fixes for the client code; from Simon Wilkinson
 2003-11-17 21:20:18 +11:00
Damien Miller fe44847cb8 - jmc@cvs.openbsd.org 2003/11/12 20:14:51 
[ssh_config.5]
     make verb agree with subject, and kill some whitespace;
 2003-11-17 21:19:49 +11:00
Damien Miller 150b55745b - jakob@cvs.openbsd.org 2003/11/12 16:39:58 
[dns.c dns.h readconf.c ssh_config.5 sshconnect.c]
     update SSHFP validation. ok markus@
 2003-11-17 21:19:29 +11:00
Damien Miller c1f2792bd0 - dtucker@cvs.openbsd.org 2003/11/12 10:12:15 
[scp.c]
     When called with -q, pass -q to ssh; suppresses SSH2 banner.  ok markus@
 2003-11-17 21:19:05 +11:00
Damien Miller f58b58ced1 - jakob@cvs.openbsd.org 2003/11/10 16:23:41 
[bufaux.c bufaux.h cipher.c cipher.h hostfile.c hostfile.h key.c]
     [key.h sftp-common.c sftp-common.h sftp-server.c sshconnect.c sshd.c]
     [ssh-dss.c ssh-rsa.c uuencode.c uuencode.h]
     constify. ok markus@ & djm@
 2003-11-17 21:18:23 +11:00
Damien Miller 939cd38122 - jmc@cvs.openbsd.org 2003/11/08 19:17:29 
[sftp-int.c]
     typos from Jonathon Gray;
 2003-11-17 21:17:24 +11:00
Damien Miller a9fcd3ada2 - jakob@cvs.openbsd.org 2003/11/08 16:02:40 
[auth1.c]
     remove unused variable (pw). ok djm@
     (id sync only - still used in portable)
 2003-11-17 21:16:55 +11:00
Damien Miller 3e3b5145e5 - djm@cvs.openbsd.org 2003/11/04 08:54:09 
[auth1.c auth2.c auth2-pubkey.c auth.h auth-krb5.c auth-passwd.c]
     [auth-rhosts.c auth-rh-rsa.c auth-rsa.c monitor.c serverloop.c]
     [session.c]
     standardise arguments to auth methods - they should all take authctxt.
     check authctxt->valid rather then pw != NULL; ok markus@
 2003-11-17 21:13:40 +11:00
Damien Miller 8f746ec970 - jakob@cvs.openbsd.org 2003/11/03 09:37:32 
[sshconnect.c]
     do not free static type pointer in warn_changed_key()
 2003-11-17 21:11:15 +11:00
Damien Miller 5a38897dbb - jakob@cvs.openbsd.org 2003/11/03 09:09:41 
[sshconnect.c]
     move changed key warning into warn_changed_key(). ok markus@
 2003-11-17 21:10:47 +11:00
Damien Miller 3e8f41e6ac - (djm) OpenBSD CVS Sync 
- djm@cvs.openbsd.org 2003/11/03 09:03:37
     [auth-chall.c]
     make this a little more idiot-proof; ok markus@
     (includes portable-specific changes)
 2003-11-17 21:09:50 +11:00
Darren Tucker 203c40b513 - (dtucker) [regress/agent-ptrace.sh] Test for GDB output from Solaris and 
HP-UX, skip test on AIX.
 2003-11-15 12:13:16 +11:00
Darren Tucker ae52b7ca59 - (dtucker) [auth-pam.c] Add newline to accumulated PAM_TEXT_INFO and 
PAM_ERROR_MSG messages.
 2003-11-13 19:52:31 +11:00
Darren Tucker 798ca84d60 - (dtucker) [README ssh-host-config ssh-user-config Makefile] (All 
contrib/cygwin).  Major update from vinschen at redhat.com.
   - Makefile provides a `cygwin-postinstall' target to run right after
     `make install'.
   - Better support for Windows 2003 Server.
   - Try to get permissions as correct as possible.
   - New command line options to allow full automated host configuration.
   - Create configs from skeletons in /etc/defaults/etc.
   - Use /bin/bash, allows reading user input with readline support.
   - Remove really old configs from /usr/local.
 2003-11-13 11:28:49 +11:00
Darren Tucker 0947ddff72 - (dtucker) [auth-pam.c] Append newlines to lines output by the 
pam_chauthtok_conv().
 2003-11-13 11:21:31 +11:00
Damien Miller 418a386f2b - (djm) Clarify UsePAM consequences a little more 2003-11-06 20:27:51 +11:00
Darren Tucker be8a771af1 - (dtucker) [regress/agent-ptrace.sh] Use numeric uid and gid. 2003-11-03 22:52:52 +11:00
Darren Tucker 655a5e0987 - markus@cvs.openbsd.org 2003/11/02 11:01:03 
[auth2-gss.c compat.c compat.h sshconnect2.c]
     remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk
 2003-11-03 20:09:03 +11:00
Darren Tucker 6db8f936ae - markus@cvs.openbsd.org 2003/10/28 09:08:06 
[misc.c]
     error->debug for getsockopt+TCP_NODELAY; several requests
 2003-11-03 20:07:14 +11:00
Darren Tucker 56afe145e0 - avsm@cvs.openbsd.org 2003/10/26 16:57:43 
[sshconnect2.c]
     rename 'supported' static var in userauth_gssapi() to 'gss_supported'
     to avoid shadowing the global version.  markus@ ok
 2003-11-03 20:06:14 +11:00
Darren Tucker 8cc39788cb - markus@cvs.openbsd.org 2003/10/21 09:50:06 
[auth2-gss.c]
     make sure the doid is larger than 2
 2003-11-03 20:05:03 +11:00
Darren Tucker a47c9bcda6 - markus@cvs.openbsd.org 2003/10/15 09:48:45 
[monitor_wrap.c]
     check pmonitor != NULL
 2003-11-03 20:03:25 +11:00
Darren Tucker 7c582db74b - (dtucker) [contrib/cygwin/ssh-host-config] Ensure entries in /etc/services 
are created correctly with CRLF line terminations.  Patch from vinschen at
   redhat.com.
 2003-11-03 18:59:29 +11:00
Darren Tucker ea4c670eb8 - (dtucker) [regress/agent-ptrace.sh] Skip agent-test unless SUDO is set, 
make agent setgid during test.
 2003-10-21 22:27:08 +10:00
Darren Tucker 0d37b5ca7b - (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords 
directly.  Noted by Darren.Moffat at sun.com.
 2003-10-21 12:41:14 +10:00
Darren Tucker 9568ad96ad - (dtucker) [INSTALL] Note that --with-md5 is now required on platforms with 
MD5 passwords even if PAM support is enabled.  From steev at detritus.net.
 2003-10-17 16:32:11 +10:00
Tim Rice 6b1f8a3cf5 [regress/banner.sh] portability fix. 2003-10-15 09:22:39 -07:00
Darren Tucker c6020651ba - (dtucker) [auth.c] Check for disabled password expiry on HP-UX Trusted Mode. 2003-10-15 17:48:20 +10:00
Darren Tucker 5f88d3440e - (dtucker) [acconfig.h configure.ac dns.c openbsd-compat/getrrsetbyname.c 
openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always
   compiled in but disabled in config.
 2003-10-15 16:57:57 +10:00
Darren Tucker 072a7b178c - markus@cvs.openbsd.org 2003/10/14 19:54:39 
[session.c ssh-agent.c]
     10X for mkdtemp; djm@
 2003-10-15 16:10:25 +10:00
Darren Tucker 64b77bcb4b - jakob@cvs.openbsd.org 2003/10/14 19:43:23 
[README.dns]
     update

Resynced with OpenBSD too: DNSFP support is now always compiled in
so the configure support (and documentation thereof) can go away.
 2003-10-15 16:07:53 +10:00
Darren Tucker dda19d63ff - jakob@cvs.openbsd.org 2003/10/14 19:42:10 
[dns.c dns.h readconf.c ssh-keygen.c sshconnect.c]
     include SSHFP lookup code (not enabled by default). ok markus@
 2003-10-15 16:00:47 +10:00
Darren Tucker b370ca9313 - markus@cvs.openbsd.org 2003/10/13 08:22:25 
[scp.1 sftp.1]
     don't refer to options related to forwarding; ok jmc@
 2003-10-15 15:59:26 +10:00
Darren Tucker f132c67e8e - jmc@cvs.openbsd.org 2003/10/12 13:12:13 
[ssh_config.5]
     note that EnableSSHKeySign should be in the non-hostspecific section;
     remove unnecessary .Pp;
     ok markus@
 2003-10-15 15:58:18 +10:00
Darren Tucker 7eb3de0dfb - markus@cvs.openbsd.org 2003/10/11 11:36:23 
[monitor_wrap.c]
     return NULL for missing banner; ok djm@
 2003-10-15 15:56:58 +10:00
Darren Tucker d05b601895 - markus@cvs.openbsd.org 2003/10/11 08:26:43 
[sshconnect2.c]
     search keys in reverse order; fixes #684
 2003-10-15 15:55:59 +10:00
Darren Tucker 0a118da00e - markus@cvs.openbsd.org 2003/10/11 08:24:08 
[readconf.c readconf.h ssh.1 ssh.c ssh_config.5]
     remote x11 clients are now untrusted by default, uses xauth(8) to generate
     untrusted cookies; ForwardX11Trusted=yes restores old behaviour.
     ok deraadt; feedback and ok djm/fries
 2003-10-15 15:54:32 +10:00
Darren Tucker a044f47679 - markus@cvs.openbsd.org 2003/10/08 15:21:24 
[readconf.c ssh_config.5]
     default GSS API to no in client, too; ok jakob, deraadt@
 2003-10-15 15:52:03 +10:00
Darren Tucker 1f20394e92 - jmc@cvs.openbsd.org 2003/10/08 08:27:36 
[scp.1 scp.c sftp-server.8 sftp.1 sftp.c ssh.1 sshd.8]
     scp and sftp: add options list and sort options. options list requested
     by deraadt@
     sshd: use same format as ssh
     ssh: remove wrong option from list
     sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)
     ok deraadt@ markus@
 2003-10-15 15:50:42 +10:00
Darren Tucker 6c0c0705e3 - (dtucker) [sshd_config.5] UsePAM defaults to "no". ok djm@ 2003-10-09 14:13:53 +10:00
Darren Tucker 0240ff786e - djm@cvs.openbsd.org 2003/10/07 07:04:52 
[regress/sftp-cmds.sh]
     more sftp quoting regress tests; ok markus
 2003-10-08 17:52:10 +10:00
Darren Tucker dc001a5ee3 - dtucker@cvs.openbsd.org 2003/10/07 01:52:13 
[regress/Makefile regress/banner.sh]
     Test SSH2 banner.  ok markus@
 2003-10-08 17:47:19 +10:00
Darren Tucker 796448276c - deraadt@cvs.openbsd.org 2003/10/07 21:58:28 
[sshconnect2.c]
     set ptr to NULL after free
 2003-10-08 17:37:58 +10:00
Darren Tucker 64dbccc2a5 - djm@cvs.openbsd.org 2003/10/07 07:04:16 
[sftp-int.c]
     sftp quoting fix from admorten AT umich.edu; ok markus@
 2003-10-08 17:34:38 +10:00
Darren Tucker 046dff2a07 - dtucker@cvs.openbsd.org 2003/10/07 01:47:27 
[sshconnect2.c]
     Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 & #707.
     ok markus@
 2003-10-08 17:32:02 +10:00
Darren Tucker 89df7a3eca - (dtucker) [configure.ac] Bug #710: Check for dlsym() in libdl on 
Reliant Unix.  Based on patch from Robert.Dahlem at siemens.com.
 2003-10-07 20:35:57 +10:00
Darren Tucker 3b2a06c0d7 - (dtucker) [configure.ac] Bug #715: Set BROKEN_SETREUID and BROKEN_SETREGID 
on Reliant Unix.  Patch from Robert.Dahlem at siemens.com.
 2003-10-07 18:37:11 +10:00
Darren Tucker 2e8c0cc752 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoul.c] 
Bug #670: add strtoul() to openbsd-compat for platforms lacking it.  ok djm@
 2003-10-07 17:49:56 +10:00
Darren Tucker dfe6d914b7 - (dtucker) [contrib/redhat/openssh.spec] Bug #714: Now that UsePAM is a 
run-time switch, always build --with-md5-passwords.
 2003-10-07 17:40:56 +10:00
Darren Tucker f4bf5d086a So people know who to blame... 2003-10-07 11:31:22 +10:00
Darren Tucker 8846a07639 - (dtucker) [auth-pam.c auth-pam.h session.c] Make PAM use the new static 
cleanup functions.  With & ok djm@
 2003-10-07 11:30:15 +10:00
Damien Miller 6f1f611a52 - (djm) Delete autom4te.cache after autoreconf 2003-10-07 10:18:22 +10:00
Tim Rice 30aa44cf0a [contrib/caldera/openssh.spec] Remove obsolete --with-ipv4-default option. 2003-10-03 22:30:23 -07:00
Darren Tucker e3ca82e06c - markus@cvs.openbsd.org 2003/10/02 08:26:53 
[ssh-gss.h]
     missing $OpenBSD:; dtucker
 2003-10-03 18:02:30 +10:00
Darren Tucker 4a2505445f - markus@cvs.openbsd.org 2003/10/02 10:41:59 
[sshd.c]
     print openssl version, too, several requests; ok henning/djm.
 2003-10-03 17:57:24 +10:00
Darren Tucker f391ba6730 - (dtucker) [session.c] Fix bus errors on some 64-bit Solaris configurations. 
Based on patches by Matthias Koeppe and Thomas Baden.  ok djm@
 2003-10-02 20:07:09 +10:00
Darren Tucker 7596d6866f - (dtucker) [ssh-gss.h] Prototype change missed in sync. 2003-10-02 17:32:30 +10:00
Darren Tucker 0ccb59b85c - (dtucker) [configure.ac] Don't set DISABLE_SHADOW when configuring 
--with-pam.  ok djm@
 2003-10-02 16:26:34 +10:00
Darren Tucker a49d36e7b9 - markus@cvs.openbsd.org 2003/09/29 20:19:57 
[servconf.c sshd_config]
     GSSAPICleanupCreds -> GSSAPICleanupCredentials
 2003-10-02 16:20:54 +10:00
Darren Tucker 6177695c0b - jmc@cvs.openbsd.org 2003/09/29 11:40:51 
[ssh.1]
     - add list of options to -o and .Xr ssh_config(5)
     - some other cleanup
     requested by deraadt@;
     ok deraadt@ markus@
 2003-10-02 16:19:47 +10:00
Darren Tucker 8fca6b57b4 - markus@cvs.openbsd.org 2003/09/26 08:19:29 
[sshd.c]
     no need to set the listen sockets to non-block; ok deraadt@
 2003-10-02 16:18:22 +10:00
Darren Tucker 5dcdd219fb - markus@cvs.openbsd.org 2003/09/23 20:41:11 
[channels.c channels.h clientloop.c]
     move client only agent code to clientloop.c
 2003-10-02 16:17:00 +10:00
Darren Tucker 6cc310bd5f - markus@cvs.openbsd.org 2003/09/23 20:18:52 
[progressmeter.c]
     don't print trailing \0; bug #709; Robert.Dahlem@siemens.com
     ok millert/deraadt@
 2003-10-02 16:15:15 +10:00
Darren Tucker 3e33cecf71 - markus@cvs.openbsd.org 2003/09/23 20:17:11 
[Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c
     cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h
     monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h
     ssh-agent.c sshd.c]
     replace fatal_cleanup() and linked list of fatal callbacks with static
     cleanup_exit() function.  re-refine cleanup_exit() where appropriate,
     allocate sshd's authctxt eary to allow simpler cleanup in sshd.
     tested by many, ok deraadt@
 2003-10-02 16:12:36 +10:00
Ben Lindstrom b210aa2cfa - (bal) Fix issues in openbsd-compat/realpath.c 2003-09-30 23:49:06 +00:00
Tim Rice d4d1815cae [sshd_config] UsePAM defaults to no. 2003-09-25 19:04:34 -07:00
Darren Tucker b88fcc755d - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove 
DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam.  Patch from
   michael_steffens at hp.com, ok djm@
 2003-09-25 20:18:33 +10:00
Darren Tucker beaf6790e1 - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6. 2003-09-24 20:03:48 +10:00
Damien Miller dbb104791b - (djm) Update version.h and spec files for HEAD 2003-09-24 08:30:18 +10:00
Damien Miller 5c3a55846a - (djm) Sync with V_3_7 branch: 
- (djm) Fix SSH1 challenge kludge
   - (djm) Bug #671: Fix builds on OpenBSD
   - (djm) Bug #676: Fix PAM stack corruption
   - (djm) Fix bad free() in PAM code
   - (djm) Don't call pam_end before pam_init
   - (djm) Enable build with old OpenSSL again
   - (djm) Trim deprecated options from INSTALL. Mention UsePAM
   - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
 2003-09-23 22:12:38 +10:00
Tim Rice 7ff4e6dbe5 [configure.ac] add --disable-etc-default-login option. ok djm 2003-09-22 19:50:14 -07:00
Ben Lindstrom da4d9cf4bf - (bal) "extration" -> "extraction" in ssh-rand-helper.c; repoted by john 
on #unixhelp@efnet
 2003-09-22 15:36:15 +00:00
Darren Tucker 9a2c4cddad - markus@cvs.openbsd.org 2003/09/19 17:43:35 
[clientloop.c sshtty.c sshtty.h]
     remove fatal callbacks from client code; ok deraadt
 2003-09-22 21:16:05 +10:00
Darren Tucker 8654d16f0f - markus@cvs.openbsd.org 2003/09/19 17:40:20 
[scp.c]
     error handling for remote-remote copy; #638; report Harald Koenig;
     ok millert, fgs, henning, deraadt
 2003-09-22 21:14:55 +10:00
Darren Tucker aaa56cb804 - markus@cvs.openbsd.org 2003/09/19 11:33:09 
[packet.c sshd.c]
     do not call packet_close on fatal; ok deraadt
 2003-09-22 21:13:59 +10:00
Darren Tucker 3dbff2a93b - markus@cvs.openbsd.org 2003/09/19 11:31:33 
[channels.c]
     do not call channel_free_all on fatal; ok deraadt
 2003-09-22 21:12:56 +10:00
Darren Tucker 3d32622171 - markus@cvs.openbsd.org 2003/09/19 11:30:39 
[ssh-keyscan.c]
     avoid fatal_cleanup, just call exit(); ok deraadt
 2003-09-22 21:11:20 +10:00
Darren Tucker 6fa8abd58b - markus@cvs.openbsd.org 2003/09/19 11:29:40 
[ssh-agent.c]
     provide a ssh-agent specific fatal() function; ok deraadt
 2003-09-22 21:10:21 +10:00
Darren Tucker 631a4a9b3e - markus@cvs.openbsd.org 2003/09/19 09:03:00 
[buffer.c]
     sign fix in buffer_dump; Jedi/Sector One; pr 3473
 2003-09-22 21:08:21 +10:00
Darren Tucker a8151da5fe - markus@cvs.openbsd.org 2003/09/19 09:02:02 
[packet.c]
     buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471
 2003-09-22 21:06:46 +10:00
Darren Tucker c0815c927e - miod@cvs.openbsd.org 2003/09/18 13:02:21 
[authfd.c bufaux.c dh.c mac.c ssh-keygen.c]
     A few signedness fixes for harmless situations; markus@ ok
 2003-09-22 21:05:50 +10:00
Darren Tucker fb16b2411e - markus@cvs.openbsd.org 2003/09/18 08:49:45 
[deattack.c misc.c session.c ssh-agent.c]
     more buffer allocation fixes; from Solar Designer; CAN-2003-0682;
     ok millert@
 2003-09-22 21:04:23 +10:00
Darren Tucker d1d41b3181 - markus@cvs.openbsd.org 2003/09/18 07:56:05 
[authfile.c]
     missing  buffer_free(&encrypted); #662; zardoz at users.sf.net
 2003-09-22 21:01:27 +10:00
Darren Tucker d2730d39a1 - markus@cvs.openbsd.org 2003/09/18 07:54:48 
[buffer.c]
     protect against double free; #660;  zardoz at users.sf.net
 2003-09-22 21:00:19 +10:00
Darren Tucker bd5361b237 - markus@cvs.openbsd.org 2003/09/18 07:52:54 
[sshconnect.c]
     missing {}; bug #656; jclonguet at free.fr
 2003-09-22 20:59:16 +10:00
Darren Tucker 220bf133b6 - (dtucker) [contrib/aix/pam.conf] Include example pam.conf for AIX from 
article by genty at austin.ibm.com, included with the author's permission.
 2003-09-22 20:41:40 +10:00
Tim Rice 480ef8ddae [configure.ac] Bug 665: move 3 new AC_DEFINES outside of AC_TRY_RUN. 
Report by distler AT golem ph utexas edu.
 2003-09-21 21:38:11 -07:00
Tim Rice 7a74c6b428 Fix typo. s/SETEIUD_BREAKS_SETUID/SETEUID_BREAKS_SETUID/ 2003-09-21 21:00:59 -07:00
Darren Tucker 42d30828a4 - (dtucker) [INSTALL] Bug #686: Document requirement for zlib 1.1.4 or 
higher.
 2003-09-22 13:28:36 +10:00
Darren Tucker 051c270f88 - (dtucker) [openbsd-compat/port-aix.c] Use correct include for xmalloc.h, 
add canohost.h to stop warning.  Based on patch from openssh-unix-dev at
   thewrittenword.com
 2003-09-22 13:05:26 +10:00
Darren Tucker fbe3b36ca9 - (dtucker) [uidswap.c] Don't test restoration of uid on Cygwin since the 
OS does not support permanently dropping privileges.  Patch from
   vinschen at redhat.com.
 2003-09-22 12:54:37 +10:00
Darren Tucker 8daf4b45ea - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config] Update 
ssh-host-config to match current defaults, bump README version.  Patch from
   vinschen at redhat.com.
 2003-09-22 12:32:00 +10:00
Darren Tucker d5e082f0d5 - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c 
openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with
   where gai_strerror is defined as "const char *".  Part of patch supplied
   by bugzilla-openssh at thewrittenword.com
 2003-09-22 12:08:23 +10:00
Darren Tucker be79af1dfe - (dtucker) [configure.ac] Bug #659: uid swapping issues on IRIX 6. 
Part of patch supplied by bugzilla-openssh at thewrittenword.com
 2003-09-22 11:58:21 +10:00
Darren Tucker 0013011529 - (dtucker) [configure.ac] Bug #693: uid swapping issues on NCR MP-RAS. 
Patch from david.haughton at ncr.com
 2003-09-22 11:40:24 +10:00
Darren Tucker ed92b21321 - (dtucker) [configure.ac] Bug #653: uid swapping issues on Tru64. 2003-09-22 11:26:16 +10:00
Darren Tucker ed9eb02326 - (dtucker) [configure.ac] Bug #657: uid swappping issues on BSDi. 2003-09-22 11:18:47 +10:00
Darren Tucker 20379a37fa - (dtucker) [configure.ac] Bug #655: uid swapping issues on Mac OS X. 
Patch from max at quendi.de.
 2003-09-22 11:07:40 +10:00
Darren Tucker 8a49dd107b Wrong filename 2003-09-22 10:59:34 +10:00
Darren Tucker 782390e62e - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-tree 
builds.  Portability corrections from tim@.
 2003-09-22 10:58:55 +10:00
Darren Tucker 4724d96ca8 - (dtucker) [acconfig.h] Updated basename test needs HAVE_BASENAME 2003-09-19 21:25:23 +10:00
Darren Tucker c11b1e8420 - (dtucker) [session.c] Bug #643: Fix size_t -> u_int and fix null deref 
when /etc/default/login doesn't exist or isn't readable.  Fixes from
   jparsons-lists at saffron.net and georg.oppenberg at deu mci com.
 2003-09-19 20:56:51 +10:00
Darren Tucker 91acbf211c - (dtucker) [openbsd-compat/port-aix.h] Bug #640: Don't include audit.h 
unless required.  Reorder to reduce warnings.
 2003-09-19 20:43:38 +10:00
Damien Miller 8040939f72 - (djm) Bug #646: Fix location of x11-ssh-askpass; Jim 2003-09-19 17:05:24 +10:00
Damien Miller 968c8d25e9 - (djm) Bug #641: Allow RedHat RPM building without GTK-2; Patch from 
jason AT devrandom.org
 2003-09-19 16:58:21 +10:00
Damien Miller f09ad861e6 - (djm) Bug #661: Remove duplicate check for basename; from 
bugzilla-openssh AT thewrittenword.com
 2003-09-19 16:41:01 +10:00
Damien Miller 677179f23a - (djm) Bug #683: Remove reference to --with-ipv4-default from INSTALL; 
djast AT cs.toronto.edu
 2003-09-19 16:30:14 +10:00
Damien Miller 5d07e6d465 20030918 
- (djm) Bug #652: Fix empty password auth
 2003-09-18 18:25:46 +10:00
Tim Rice 628c873230 [openbsd-compat/inet_ntoa.c] 20030917 "Sync with V_3_7 branch" undid 
20030916 "Missed dead header in inet_ntoa.c"
 2003-09-17 13:20:33 -07:00
Damien Miller e007cf7fa4 - (djm) Crank RPM spec file versions 2003-09-17 07:32:17 +10:00
Damien Miller 5efcecc265 - (djm) OpenBSD Sync 
- markus@cvs.openbsd.org 2003/09/16 21:02:40
     [buffer.c channels.c version.h]
     more malloc/fatal fixes; ok millert/deraadt; ghudson at MIT.EDU
 2003-09-17 07:31:14 +10:00
Damien Miller f2728099ba - (djm) Sync with V_3_7 branch 2003-09-17 07:24:25 +10:00
Ben Lindstrom e121048392 - (bal) Missed dead header in inet_ntoa. 2003-09-16 17:23:29 +00:00
Tim Rice b925b4b82f [configure.ac] Fix portability issues. 2003-09-15 22:40:49 -07:00
Ben Lindstrom f2b4e4e07e - deraadt@cvs.openbsd.org 2003/09/16 03:03:47 
[buffer.c]
     do not expand buffer before attempting to reallocate it; markus ok
 2003-09-16 03:31:03 +00:00
Darren Tucker 16eec18a09 Fix line width 2003-09-16 13:24:50 +10:00
Darren Tucker e1a790d0d1 - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: Retrieve 
PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it
   (eg Solaris, Reliant Unix).  Patch from Robert.Dahlem at siemens.com.  ok djm@
 2003-09-16 11:52:19 +10:00
Darren Tucker 7b6cb5c5ef - (dtucker) [regress/Makefile] AIX's make doesn't like " +=", so replace 
with vanilla "=".

Hopefully everybody's "make" will be happy with that.
 2003-09-14 13:16:55 +10:00
Darren Tucker b12d16fd00 - (dtucker) [Makefile regress/Makefile] Fix portability issues preventing 
the regression tests from running with Solaris' make.  Patch from Brian
   Poole (raj at cerias.purdue.edu).

Further info:  Solaris' /usr/ccs/bin/make
* requires a space before "+=" (but not "=")
* does not like @for

The bit that relies on a trailing "/" on $OBJ so "rm ${OBJ}$$F works in the
current dir if OBJ isn't set is my fault.  Nasty but it works.
 2003-09-14 11:40:35 +10:00
Darren Tucker c58c2eedb0 - (dtucker) [auth-pam.c] Use SSHD_PAM_SERVICE for PAM service name, patch 
from cjwatson at debian.org.
 2003-09-13 22:02:05 +10:00
Tim Rice ae477e922e [configure.ac] define WITH_ABBREV_NO_TTY for SCO. Report by Roger Cornelius. 2003-09-12 18:15:15 -07:00
Darren Tucker 2270c7e8aa - (dtucker) [auth-passwd.c] On AIX, call setauthdb() before loginsuccess(), 
required to correctly reset failed login count when using a password
   registry other than "files" (eg LDAP, see bug #543).
 2003-09-13 10:41:56 +10:00
Darren Tucker dc7e65646f - (dtucker) [regress/agent-timeout.sh] Timeout of 5 sec is borderline for 
slower hosts, increase to 10 sec.
 2003-09-13 09:46:03 +10:00
Tim Rice e660ede8c0 [regress/yes-head.sh] shell portability fix. 2003-09-12 13:21:14 -07:00
Tim Rice ec28ca16b1 [Makefile.in] only mkdir regress if it does not exist. 2003-09-12 13:02:16 -07:00
Tim Rice b7efb630f6 [regress/agent-ptrace.sh] sh doesn't like "if ! shell_function; then". 2003-09-12 11:20:32 -07:00
Tim Rice 23ee359b08 [regress/agent-ptrace.sh regress/dynamic-forward.sh 
regress/sftp-cmds.sh regress/stderr-after-eof.sh regress/test-exec.sh]
no longer depends on which(1). patch by dtucker@
 2003-09-11 22:32:17 -07:00
Tim Rice d546a84ef6 [configure.ac] Prefer setuid/setgid on UnixWare and Open Server. 2003-09-11 22:24:36 -07:00
Tim Rice 1e1ef64566 [configure.ac] Move libgen tests to before libwrap to unbreak 
UnixWare 2.03 using --with-tcp-wrappers.
 2003-09-11 22:19:31 -07:00
Darren Tucker c82afd5c88 - (dtucker) [configure.ac] Bug #588, #615: Move other libgen tests to after 
the dirname test, to allow a broken dirname to be detected correctly.
   Based partially on patch supplied by alex.kiernan at thus.net.  ok djm@
 2003-09-11 14:42:55 +10:00
Darren Tucker 9a959ea1b5 - (dtucker) [regressh/yes-head.sh] Some platforms (eg Solaris) don't have 
"yes".
 2003-09-10 20:17:40 +10:00
Darren Tucker b2427c82bb - (dtucker) [configure.ac] Part of bug #615: tcsendbreak might be a macro. 2003-09-10 15:22:44 +10:00
Darren Tucker 9f7ffc5a17 - (dtucker) [configure.ac] Bug #636: Add support for Cray's new X1 machine. 
Patch from wendyp at cray.com.
 2003-09-10 11:39:05 +10:00
Tim Rice 1eb40cf514 [regress/sftp-badcmds.sh regress/sftp-cmds.sh] Fix errors like 
UX:rm: ERROR: Cannot remove '.' or '..'
 2003-09-09 08:35:20 -07:00
Tim Rice 5543947d7f [regress/agent-timeout.sh] s/TIMEOUT/SSHAGENT_TIMEOUT/ Fixes conflict 
with shell read-only variable.
 2003-09-09 08:27:40 -07:00
Tim Rice 8b2157d86a [regress/Makefile] Fixes for building outside of a read-only source tree. 2003-09-09 06:07:10 -07:00
Tim Rice 2e0e38e310 [ssh-keygen.c] s/PATH_MAX/MAXPATHLEN/ ok mouring@ 2003-09-08 16:11:33 -07:00
Tim Rice b284e16c10 [configure.ac acconfig.h openbsd-compat/getrrsetbyname.c] test for 
HEADER.ad in arpa/nameser.h
 2003-09-08 14:35:16 -07:00
Tim Rice 0ac16a4492 [configure.ac openbsd-compat/getrrsetbyname.c] wrap _getshort and 
_getlong in #ifndef
 2003-09-08 06:33:33 -07:00
Darren Tucker 167bd9cfef - (dtucker) [CREDITS Makefile.in configure.ac mdoc2man.awk mdoc2man.pl] 
Replace mdoc2man.pl with mdoc2man.awk, provided by Peter Stuge.
 2003-09-07 12:34:54 +10:00
Darren Tucker 7c600f24a4 - (dtucker) [acconfig.h] Typo. 2003-09-07 11:37:27 +10:00
Darren Tucker 3393c5c36e - (dtucker) openbsd-compat/xcrypt.c] #elsif -> #elif 2003-09-07 09:43:42 +10:00
Darren Tucker e7f7580cab - (dtucker) [regress/sftp-cmds.sh] Skip quoted file test on Cygwin. 2003-09-07 09:32:58 +10:00
Darren Tucker e1e26a6c15 - (dtucker) [regress/sftp-batch.sh] Make temporary batch file name more 
distinctive, so "rm ${BATCH}.*" doesn't match the script itself.
 2003-09-07 09:31:02 +10:00
Darren Tucker d199b6d69b - (dtucker) [dynamic-forward.sh forwarding.sh sftp-batch.sh (all regress/)] 
Add ${EXEEXT}: required to work on Cygwin.
 2003-09-07 09:28:03 +10:00
Darren Tucker 57ac36ffb4 - (dtucker) [agent-ptrace.sh dynamic-forward.sh (all regress/)] 
Put "which" inside quotes.
 2003-09-07 09:22:21 +10:00
Darren Tucker 9f18be63ab - (dtucker) [acconfig.h configure.ac uidswap.c] Prefer setuid/setgid on AIX. 2003-09-06 16:44:39 +10:00
Darren Tucker b2db4e83a3 - (dtucker) [Makefile.in] Add distclean target for regress/, fix clean target. 2003-09-05 11:35:52 +10:00
Darren Tucker 77d07e927d - [Makefile.in regress/agent-ptrace] Fix minor regress issues on Cygwin. 2003-09-04 22:06:16 +10:00
Darren Tucker 118576556b - [Makefile.in regress/agent-getpeereid.sh] config.h is now in $BUILDDIR 
not $OBJ.
 2003-09-04 18:04:16 +10:00
Darren Tucker 9d9d44811b - [regress/README.regress] Add a basic readme. 2003-09-04 15:39:54 +10:00
Darren Tucker ebc3c13d40 - [regress/Makefile] Remove BSDisms. 2003-09-04 15:37:58 +10:00
Darren Tucker 6d3921f64b - [regress/test-exec.sh] Use sudo, search for "whoami" equivalent, always 
use Strictmodes no, wait longer for sshd startup.
 2003-09-04 15:35:48 +10:00
Darren Tucker bd05609dff - [regress/ssh-com-sftp.sh] Remove dependency on /dev/stdin. 2003-09-04 15:26:57 +10:00
Darren Tucker 4735115e4d - [regress/sftp-cmds.sh] Use portable "test" option. 2003-09-04 15:24:50 +10:00
Darren Tucker a241d87e94 - [regress/dynamic-forward.sh] Some "which" programs output on stderr. 2003-09-04 15:22:01 +10:00
Darren Tucker 53c55f4179 - [regress/agent.sh regress/proto-version.sh regress/ssh-com.sh 
regress/test-exec.sh] Handle different was of echoing without newlines.
 2003-09-04 15:16:56 +10:00
Darren Tucker 58f89bc14d - [regress/agent-ptrace.sh regress/agent-timeout.sh] 
"grep -q" -> "grep >/dev/null"
 2003-09-04 15:07:59 +10:00
Darren Tucker e15b0dd011 - [regress/sftp.sh] Remove dependency on /dev/stdin. 2003-09-04 15:00:55 +10:00
Darren Tucker c2c4223ed0 - [regress/sftp-badcmds.sh regress/sftp-cmds.sh regress/sftp.sh 
regress/ssh-com-client.sh regress/ssh-com-sftp.sh regress/stderr-data.sh
     regress/transfer.sh] Use ${EXEEXT} where appropriate.
 2003-09-04 14:54:39 +10:00
Darren Tucker c376a88c10 - [regress/stderr-after-eof.sh] Search for a usable checksum program. 2003-09-04 14:32:02 +10:00
Darren Tucker 933e4f1c27 - [regress/sftp-cmds.sh] Ensure file used for test are readable. 2003-09-04 14:26:31 +10:00
Darren Tucker 60de9f1851 - [regress/rekey.sh] Remove dependence on /dev/zero (not all platforms have 
it).  The sparse file will take less disk space too.
 2003-09-04 14:02:56 +10:00
Darren Tucker 871f7408ab - [regress/reconfigure/sh] Make path to sshd fully qualified if required. 2003-09-04 13:59:48 +10:00
Darren Tucker 5569759bce - [regress/agent-ptrace.sh] Skip tests if platform doesn't support it or 
gdb cannot be found.
 2003-09-04 13:55:25 +10:00
Darren Tucker 2297ac41ca - [regress/agent-getpeereid.sh] Skip test on platforms that don't support 
getpeereid.
 2003-09-04 13:49:30 +10:00
Darren Tucker 150a81c745 - (dtucker) Portablize regression tests. Parts contributed by Roumen 
Petrov, David M. Williams and Corinna Vinschen.
   - [Makefile.in] Add "make tests" target and "make clean" hooks.
 2003-09-04 13:41:06 +10:00
Damien Miller c2b9827695 - jmc@cvs.openbsd.org 2003/09/02 18:50:06 
[sftp.1 ssh_config.5]
     escape punctuation;
     ok deraadt@
 2003-09-03 12:13:30 +10:00
Damien Miller f117f877b1 - markus@cvs.openbsd.org 2003/09/02 16:40:29 
[version.h]
     enter 3.7
 2003-09-03 12:12:54 +10:00
Damien Miller a256c650ac - markus@cvs.openbsd.org 2003/08/28 12:54:34 
[auth.h]
     remove kerberos support from ssh1, since it has been replaced with GSSAPI;
     but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
 2003-09-03 12:11:30 +10:00
Damien Miller 856f0be669 - markus@cvs.openbsd.org 2003/08/26 09:58:43 
[auth-passwd.c auth.c auth.h auth1.c auth2-none.c auth2-passwd.c]
     [auth2.c monitor.c]
     fix passwd auth for 'username leaks via timing'; with djm@, original
     patches from solar
 2003-09-03 07:32:45 +10:00
Damien Miller 39638b6aeb - (djm) Fix openbsd-compat/ again - remove references to strl(cpy|cat).h 2003-09-02 23:33:42 +10:00
Damien Miller 341c6e687c - (djm) Bug #423: reorder setting of PAM_TTY and calling of PAM session 
management (now done in do_setusercontext). Largely from
   michael_steffens AT hp.com
 2003-09-02 23:18:52 +10:00
Damien Miller f4b6f10ded - (djm) Don't initialise pam_conv structures inline. Avoids HP/UX compiler 
error. Part of Bug #423, patch from  michael_steffens AT hp.com
 2003-09-02 23:12:06 +10:00
Damien Miller 0b56b45d6f fix date 2003-09-02 23:09:41 +10:00
Damien Miller 982d326045 - markus@cvs.openbsd.org 2003/09/01 20:44:54 
[auth2-gss.c]
     fix leak
 2003-09-02 22:59:01 +10:00
Damien Miller fb10e9abe8 - markus@cvs.openbsd.org 2003/09/01 18:15:50 
[readconf.c readconf.h servconf.c servconf.h ssh.c]
     remove unused kerberos code; ok henning@
 2003-09-02 22:58:22 +10:00
Damien Miller 46aa3b9139 - markus@cvs.openbsd.org 2003/09/01 13:52:18 
[ssh.h]
     rm whitespace
 2003-09-02 22:57:54 +10:00
Damien Miller 84d03efdf7 - markus@cvs.openbsd.org 2003/09/01 12:50:46 
[readconf.c]
     rm gssapidelegatecreds alias; never supported before
 2003-09-02 22:57:27 +10:00
Damien Miller 9b7b03b270 - markus@cvs.openbsd.org 2003/09/01 09:50:04 
[sshd_config.5]
     gss kex is not supported; sxw@inf.ed.ac.uk
 2003-09-02 22:57:05 +10:00
Damien Miller 134350c20c - markus@cvs.openbsd.org 2003/08/31 13:31:57 
[gss-serv.c]
     whitspace KNF
 2003-09-02 22:56:42 +10:00
Damien Miller a0c4ad21b6 - markus@cvs.openbsd.org 2003/08/31 13:30:18 
[gss-serv.c]
     correct string termination in parse_ename(); sxw@inf.ed.ac.uk
 2003-09-02 22:56:18 +10:00
Damien Miller 324948b320 - markus@cvs.openbsd.org 2003/08/31 13:29:05 
[session.c]
     call ssh_gssapi_storecreds conditionally from do_exec();
     with sxw@inf.ed.ac.uk
 2003-09-02 22:55:45 +10:00
Damien Miller b5829f56eb - markus@cvs.openbsd.org 2003/08/31 12:14:22 
[progressmeter.c]
     do write to buf[-1]
 2003-09-02 22:53:32 +10:00
Damien Miller 17af176302 - markus@cvs.openbsd.org 2003/08/31 10:26:04 
[progressmeter.c]
     pass file_size + 1 to snprintf: fixes printing of truncated
     file names; fix based on patch/report from sturm@;
 2003-09-02 22:53:01 +10:00
Damien Miller fbdeecef92 - markus@cvs.openbsd.org 2003/08/29 10:04:36 
[channels.c nchan.c]
     be less chatty; debug -> debug2, cleanup; ok henning@
 2003-09-02 22:52:31 +10:00
Damien Miller 7630ee2fa6 - markus@cvs.openbsd.org 2003/08/29 10:03:15 
[compat.c compat.h]
     SSH_BUG_K5USER is unused; ok henning@
 2003-09-02 22:52:00 +10:00
Damien Miller 1a0c0b9621 - markus@cvs.openbsd.org 2003/08/28 12:54:34 
[auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c]
     [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5]
     [sshconnect1.c sshd.c sshd_config sshd_config.5]
     remove kerberos support from ssh1, since it has been replaced with GSSAPI;
     but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
 2003-09-02 22:51:17 +10:00
Damien Miller 55c47edc81 - (djm) OpenBSD CVS Sync 
- deraadt@cvs.openbsd.org 2003/08/24 17:36:51
     [auth2-gss.c]
     64 bit cleanups; markus ok
 2003-09-02 22:14:07 +10:00
Ben Lindstrom 4d5dffce9f ChangeLog fix pointed out by Darren. Yes, we should not use $Id$ when 
describing those changes. <chuckle>
 2003-08-30 00:11:56 +00:00
Ben Lindstrom 515d0f9a1e - (bal) openbsd-compat/ clean up. Considate headers, add in $Id$ on our 
files, and added missing license to header.
 2003-08-29 16:59:52 +00:00
Darren Tucker 43a0dc6653 - (dtucker) [auth.c] Do not check for locked accounts when PAM is enabled. 2003-08-26 14:22:12 +10:00
Darren Tucker 2fae867806 - (dtucker) [contrib/aix/inventory.sh] Add public domain notice. ok mouring@ 
(the original author)
 2003-08-26 13:43:12 +10:00
Darren Tucker 6ad50438ed - (dtucker) [Makefile.in] Remove auth2-krb5. 2003-08-26 12:22:04 +10:00
Darren Tucker 08bbb2f69d - djm@cvs.openbsd.org 2003/08/25 10:33:33 
[sshconnect2.c]
     fprintf->logit to silence login banner with "ssh -q"; ok markus@
 2003-08-26 12:14:05 +10:00
Darren Tucker 7858726e8a - fgsch@cvs.openbsd.org 2003/08/25 08:13:09 
[sftp-int.c]
     fix div by zero when listing for filename lengths longer than width.
     markus@ ok.
 2003-08-26 12:12:56 +10:00
Darren Tucker 600ad8de76 - deraadt@cvs.openbsd.org 2003/08/24 17:36:52 
[monitor.c monitor_wrap.c sshconnect2.c]
     64 bit cleanups; markus ok
 2003-08-26 12:10:48 +10:00
Darren Tucker 6b191a234c - markus@cvs.openbsd.org 2003/08/22 20:55:06 
[LICENCE]
     add Simon Wilkinson
 2003-08-26 12:09:53 +10:00
Darren Tucker 1e66a39e40 - markus@cvs.openbsd.org 2003/08/22 13:22:27 
[auth2.c] (auth2-krb5.c removed)
     nuke "kerberos-2@ssh.com"
 2003-08-26 12:08:15 +10:00
Darren Tucker be1a901f99 - markus@cvs.openbsd.org 2003/08/22 13:20:03 
[sshconnect2.c]
     remove support for "kerberos-2@ssh.com"
 2003-08-26 12:04:31 +10:00
Darren Tucker 49aaf4ad52 - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h 
configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
   sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
 2003-08-26 11:58:16 +10:00
Darren Tucker 0efd155c3c - markus@cvs.openbsd.org 2003/08/22 10:56:09 
[auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c
     gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c
     readconf.h servconf.c servconf.h session.c session.h ssh-gss.h
     ssh_config.5 sshconnect2.c sshd_config sshd_config.5]
     support GSS API user authentication; patches from Simon Wilkinson,
     stripped down and tested by Jakob and myself.
 2003-08-26 11:49:55 +10:00
Damien Miller 30912f7259 - (djm) Bug #629: Mark ssh_config option "pamauthenticationviakbdint" 
as deprecated. Remove mention from README.privsep. Patch from
   aet AT cc.hut.fi
 2003-08-26 10:48:14 +10:00
Darren Tucker 36ca53a5a0 - (dtucker) [README buildbff.sh inventory.sh] (all in contrib/aix) 
Update package builder: correctly handle config variables, use lsuser
   rather than /etc/passwd, fix typos, add Id's.
 2003-08-25 15:01:04 +10:00
Darren Tucker 3c8e1e1bbf - (dtucker) [configure.ac] Bug #533, #551: define BROKEN_GETADDRINFO on 
Tru64, solves getnameinfo and "bad addr or host" errors.  ok djm@
 2003-08-25 13:27:40 +10:00
Damien Miller 1f499fd368 - (djm) Bug #564: Perform PAM account checks for all authentications when 
UsePAM=yes; ok dtucker
 2003-08-25 13:08:49 +10:00
Darren Tucker e41bba5847 - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny 
any access to locked accounts.  ok djm@
 2003-08-25 11:51:19 +10:00
Ben Lindstrom 5ade9abc37 - (bal) redo how we handle 'mysignal()'. Move it to 
openbsd-compat/bsd-misc.c, s/mysignal/signal/ and #define signal to
   be our 'mysignal' by default.  OK djm@
 2003-08-25 01:16:21 +00:00
Ben Lindstrom af4a6c3a56 - (bal) openbsd-compat/ OpenBSD updates. Mostly licensing, ansifications 
and minor fixes.
 2003-08-25 01:10:51 +00:00
Damien Miller 331b6af8fa - (djm) Bug #621: Select OpenSC keys by usage attributes. Patch from 
larsch@trustcenter.de
 2003-08-25 10:58:26 +10:00
Darren Tucker 49d32566c2 - (dtucker) [contrib/cygwin/ssh-user-config] Put keys in authorized_keys 
rather that authorized_keys2.  Patch from vinschen@redhat.com.
 2003-08-22 18:43:48 +10:00
Damien Miller 59d3d5b8b4 - (djm) s/get_progname/ssh_get_progname/g to avoid conflict with Heimdal 
-lbroken; ok dtucker
 2003-08-22 09:34:41 +10:00
Darren Tucker 70a3d55b4a - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement 
and after normal openpty test.
 2003-08-21 17:58:29 +10:00
Darren Tucker 8e3653d2f3 - (dtucker) [defines.h] Put CMSG_DATA, CMSG_FIRSTHDR with other CMSG* macros, 
change CMSG_DATA to use __CMSG_ALIGN (and thus work properly), reformat for
   consistency.
 2003-08-21 16:49:41 +10:00
Darren Tucker f4220e6cef - markus@cvs.openbsd.org 2003/08/14 16:08:58 
[ssh-keygen.c]
     exit after primetest, ok djm@
 2003-08-21 16:44:07 +10:00
Darren Tucker f38ea77c03 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] 
Add a tcsendbreak function for platforms that don't have one, based on the
   one from OpenBSD.

Any more of these and I'll split them out into bsd-termio.[ch].
 2003-08-13 20:48:07 +10:00
Darren Tucker 1c52ee3e6f - markus@cvs.openbsd.org 2003/08/13 09:07:10 
[readconf.c ssh.c]
     socks4->socks, since with support both 4 and 5; dtucker@zip.com.au
 2003-08-13 20:38:36 +10:00
Darren Tucker ec960f2c93 - markus@cvs.openbsd.org 2003/08/13 08:46:31 
[auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
     ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
     remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
     fgsch@, miod@, henning@, jakob@ and others
 2003-08-13 20:37:05 +10:00
Darren Tucker 3bdbd848ea - markus@cvs.openbsd.org 2003/08/13 08:33:02 
[session.c]
     use more portable tcsendbreak(3) and ignore break_length;
     ok deraadt, millert
 2003-08-13 20:31:05 +10:00
Darren Tucker d85efee437 - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge. 2003-08-13 20:28:14 +10:00
Darren Tucker bc8c8f36fb - (dtucker) [openbsd-compat/xcrypt.c] Remove Cygwin #ifdef block (duplicate 
in bsd-cygwin_util.h).
 2003-08-11 23:00:33 +10:00
Darren Tucker ec0943a96c - (dtucker) OpenBSD CVS Sync 
(thanks to Simon Wilkinson for help with this -dt)
   - markus@cvs.openbsd.org 2003/07/16 15:02:06
     [auth-krb5.c]
     mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
     otherwise the kerberos credentinal is stored in a memory cache
     in the privileged sshd. ok jabob@, hin@ (some time ago)
 2003-08-11 22:55:36 +10:00
Darren Tucker f38db7f5da - (dtucker) [auth-pam.c] Don't set PAM_TTY if tty is null. ok djm@ 2003-08-08 13:43:37 +10:00
Darren Tucker 65914f1eb3 - (dtucker) [openbsd-compat/fake-rfc2553.h] Older Linuxes have AI_PASSIVE and 
AI_CANONNAME in netdb.h but not AI_NUMERICHOST, so check each definition
   separately before defining them.
 2003-08-08 12:15:11 +10:00
Darren Tucker 80649c5fa6 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.h] Move Cygwin 
specific defines and includes to bsd-cygwin_util.h.  Fixes build error too.
 2003-08-07 16:28:16 +10:00
Darren Tucker 854d7fd439 - (dtucker) [openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h] 
Remove incorrect filenames from comments (file names are in Id tags).
 2003-08-07 16:23:43 +10:00
Darren Tucker f315224d7c - (dtucker) [defines.h] Bug #336: Add CMSG_DATA and CMSG_FIRSTHDR macros if 
not already defined (eg Linux with some versions of libc5), based on those
   from OpenBSD.
 2003-08-07 15:58:28 +10:00
Darren Tucker 89f4cf0d29 - (dtucker) [canohost.c] Bug #336: Only check ip options if IP_OPTIONS is 
defined (fixes compile error on really old Linuxes).
 2003-08-07 13:29:04 +10:00
Darren Tucker b9d3f41ceb - (dtucker) [session.c] Have session_break_req not attempt to send a break 
if TIOCSBRK and TIOCCBRK are not defined (eg Cygwin).
 2003-08-07 13:24:24 +10:00
Darren Tucker bdf571b0dc - (dtucker) [openbsd-compat/bsd-misc.c] Fix cut-and-paste bug in tcgetpgrp. 2003-08-03 00:36:16 +10:00
Darren Tucker db732b14d7 - markus@cvs.openbsd.org 2003/07/31 22:34:03 
[progressmeter.c]
    print rate similar old version; round instead truncate;
    (included in previous progressmeter.c commit)
 2003-08-03 00:07:35 +10:00
Darren Tucker 85f04c6fd5 - avsm@cvs.openbsd.org 2003/07/31 15:50:16 
[atomicio.c]
     correct comment: atomicio takes vwrite, not write; deraadt@ ok
 2003-08-03 00:05:58 +10:00
Darren Tucker 4b60966863 - markus@cvs.openbsd.org 2003/07/31 09:21:02 
[auth2-none.c]
     check whether passwd auth is allowd, similar to proto 1; rob@pitman.co.za
     ok henning
 2003-08-03 00:05:01 +10:00
Darren Tucker 40311f2feb Add imported progressmeter.c changes to Changelog 2003-08-03 00:00:47 +10:00
Darren Tucker b2f9d4161a - (dtucker) [Makefile.in moduli.c moduli.h] Add new files and to Makefile. 
Should have added with this sync:
   - djm@cvs.openbsd.org 2003/07/28 09:49:56
     [ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
 2003-08-02 23:51:38 +10:00
Darren Tucker 2e9c9cf702 - (dtucker) [openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] 
Add a tcgetpgrp function.
 2003-08-02 23:31:42 +10:00
Darren Tucker 06ef75bf0c - markus@cvs.openbsd.org 2003/07/29 18:24:00 
[LICENCE progressmeter.c]
     replace 4 clause BSD licensed progressmeter code with a replacement
     from Nils Nordman and myself; ok deraadt@
     (copied from OpenBSD an re-applied portable changes)
 2003-08-02 23:28:38 +10:00
Darren Tucker 019cefeaad - djm@cvs.openbsd.org 2003/07/28 09:49:56 
[ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
 2003-08-02 22:40:07 +10:00
Darren Tucker c20c60bc99 - markus@cvs.openbsd.org 2003/07/23 07:42:43 
[sshd_config]
     remove AFS; itojun@
 2003-08-02 22:31:45 +10:00
Darren Tucker 6aaa58c470 - (dtucker) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2003/07/22 13:35:22
     [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c
     monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1
     ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h]
     remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
     test+ok henning@
 - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support.
 - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files.

I hope I got this right....
 2003-08-02 22:24:49 +10:00
Darren Tucker 4c29dd9f44 - (dtucker) [monitor.h monitor_wrap.h] Remove excess ident tags. 2003-08-02 20:37:03 +10:00
Damien Miller 7f2d795e3f - (djm) [auth-pam.c] Don't use crappy APIs like sprintf. Thanks bal 2003-07-30 14:53:11 +10:00
Darren Tucker fbba5a0501 - (dtucker) [openbsd-compat/xcrypt.c] Fix typo: DISABLED_SHADOW -> 
DISABLE_SHADOW.  Fixes HP-UX compile error.
 2003-07-26 19:38:30 +10:00
Ben Lindstrom 0410e32f47 - (bal) [auth-passwd.c openbsd-compat/Makefile.in openbsd-compat/xcrypt.c 
openbsd-compat/xcrypt.h] Split off encryption into xcrypt() interface,
    and isolate shadow password functions.  Tested in Solaris, but should
    not break other platforms too badly (except maybe HP =).  Also brings
    auth-passwd.c into full sync with OpenBSD tree.
 2003-07-24 06:52:13 +00:00
Darren Tucker acb98497fb - (dtucker) [configure.ac] Back out change for bug #620. 2003-07-23 14:33:10 +10:00
Darren Tucker cca1bdb8a8 - djm@cvs.openbsd.org 2003/07/19 00:46:31 
[regress/sftp-cmds.sh]
     regress test for sftp arguments with escaped quotes; ok markus
 2003-07-19 20:11:54 +10:00
Darren Tucker 554d5b544a - djm@cvs.openbsd.org 2003/07/19 00:45:53 
[sftp-int.c]
     fix sftp filename parsing for arguments with escaped quotes. bz #517;
     ok markus
 2003-07-19 20:09:21 +10:00
Darren Tucker 03a29baf35 - deraadt@cvs.openbsd.org 2003/07/18 01:54:25 
[scp.c]
     userid is unsigned, but well, force it anyways; andrushock@korovino.net
 2003-07-19 20:07:45 +10:00
Darren Tucker 538d180395 - markus@cvs.openbsd.org 2003/07/16 10:36:28 
[sshtty.c]
     clear IUCLC in enter_raw_mode; from rob@pitman.co.za; ok deraadt@, fgs@
 2003-07-19 19:56:18 +10:00
Darren Tucker e98dfa323e - markus@cvs.openbsd.org 2003/07/16 10:34:53 
[ssh.c sshd.c]
     don't exit on multiple -v or -d; ok deraadt@
 2003-07-19 19:54:31 +10:00
Darren Tucker fe0078ae49 - markus@cvs.openbsd.org 2003/07/14 12:36:37 
[sshd.c]
     remove undocumented -V option. would be only useful if openssh is used
     as ssh v1 server for ssh.com's ssh v2.
 2003-07-19 19:52:28 +10:00
Darren Tucker 394b8c8db3 - (dtucker) [configure.ac] Bug #620: Define BROKEN_GETADDRINFO for 
Solaris/x86.  Patch from jrhett at isite.net.
 2003-07-19 19:49:45 +10:00
Darren Tucker 1a721156b0 - markus@cvs.openbsd.org 2003/07/10 20:05:55 
[sftp.c]
     sync usage with manpage, add missing -R
 2003-07-14 17:32:29 +10:00
Darren Tucker 81a0b371f4 - markus@cvs.openbsd.org 2003/07/10 14:42:28 
[packet.c]
     the 2^(blocksize*2) rekeying limit is too expensive for 3DES,
     blowfish, etc, so enforce a 1GB limit for small blocksizes.
 2003-07-14 17:31:06 +10:00
Darren Tucker 29588616c2 - avsm@cvs.openbsd.org 2003/07/09 13:58:19 
[key.c]
     minor tweak: when generating the hex fingerprint, give strlcat the full
     bound to the buffer, and add a comment below explaining why the
     zero-termination is one less than the bound.  markus@ ok
 2003-07-14 17:28:34 +10:00
Darren Tucker 0abf13bb50 - (dtucker) [port-aix.h] Fix prototypes. 2003-07-14 16:43:42 +10:00
Darren Tucker fc3454ee67 - (dtucker) Bug #543: [configure.ac port-aix.c port-aix.h] 
Call setauthdb() before loginfailed(), which may load password registry-
   specific functions.  Based on patch by cawlfiel@us.ibm.com.
 2003-07-14 16:41:55 +10:00