Commit Graph

4345 Commits

Author SHA1 Message Date
Darren Tucker
372c8fbe9b - (dtucker) [monitor_wrap.c] Remove duplicate definition of loginmsg
introduced during sync.
2005-09-29 22:01:10 +10:00
Darren Tucker
7b1e695846 - (dtucker) [auth-pam.c] Bug #1028: send final non-query messages from
PAM via keyboard-interactive.  Patch tested by the folks at Vintela.
2005-09-28 22:33:27 +10:00
Darren Tucker
46e7ba5d53 - (dtucker) [entropy.c] Use u_char for receiving RNG seed for consistency 2005-09-28 08:26:30 +10:00
Darren Tucker
c6f8219e0d - (dtucker) [entropy.c entropy.h sshd.c] Pass RNG seed to the reexec'ed
process when sshd relies on ssh-random-helper.  Should result in faster
   logins on systems without a real random device or prngd.  ok djm@
2005-09-27 22:46:32 +10:00
Darren Tucker
f1377bdeed - (dtucker) [entropy.c] Remove unnecessary tests for getuid and geteuid
calls, since they can't possibly fail.  ok djm@
2005-09-27 19:50:25 +10:00
Darren Tucker
d3eff2bfa5 - (dtucker) [auth2.c] Move start_pam() calls out of if-else block to remove
duplicate call.  ok djm@
2005-09-24 12:43:51 +10:00
Darren Tucker
82171c6607 - (dtucker) [configure.ac] Fix help for --with-opensc; patch from skeleten at
shillest.net.
2005-09-22 20:19:54 +10:00
Darren Tucker
c373a56343 - (dtucker) [configure.ac] Use -R linker flag for libedit too; patch from
skeleten at shillest.net.
2005-09-22 20:15:08 +10:00
Tim Rice
542f62b9d2 remove acconfig.h 2005-09-19 09:36:55 -07:00
Tim Rice
7df8d39a5f - (tim) [aclocal.m4 configure.ac] Delete acconfig.h and add templates to
AC_DEFINE and AC_DEFINE_UNQUOTED to quiet autoconf 2.59 warning messages.
2005-09-19 09:33:39 -07:00
Tim Rice
fd9e9e3ba6 - (tim) [configure.ac] Bug 1078. Fix --without-kerberos5. Reported by
Mike Frysinger.
2005-09-12 17:36:10 -07:00
Tim Rice
784d4f538f Last commit skipped defines.h
- (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to
   OpenServer 6 and add osr5bigcrypt support so when someone migrates
   passwords between UnixWare and OpenServer they will still work. OK dtucker@
2005-09-08 22:04:59 -07:00
Tim Rice
64ead485ac - (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to
OpenServer 6 and add osr5bigcrypt support so when someone migrates
   passwords between UnixWare and OpenServer they will still work. OK dtucker@
2005-09-08 21:56:33 -07:00
Damien Miller
c8ab8ceacb - (djm) Update RPM spec file versions 2005-09-01 19:10:48 +10:00
Tim Rice
66fd217e8e - (tim) [configure.ac auth.c defines.h session.c openbsd-compat/port-uw.c
openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] libiaf cleanup. Disable
   libiaf bits for OpenServer6. Free memory allocated by ia_get_logpwd().
   Feedback and OK dtucker@
2005-08-31 09:59:49 -07:00
Darren Tucker
d0a47cd243 - (dtucker) [README] Update release note URL to 4.2 2005-09-01 00:05:56 +10:00
Damien Miller
ae37959bfb - markus@cvs.openbsd.org 2005/08/31 09:28:42
[version.h]
     4.2
2005-08-31 19:47:07 +10:00
Damien Miller
da9984fc3a - (djm) OpenBSD CVS Sync
- djm@cvs.openbsd.org 2005/08/30 22:08:05
     [gss-serv.c sshconnect2.c]
     destroy credentials if krb5_kuserok() call fails. Stops credentials being
     delegated to users who are not authorised for GSSAPIAuthentication when
     GSSAPIDeletegateCredentials=yes and another authentication mechanism
     succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
     simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
2005-08-31 19:46:26 +10:00
Damien Miller
ca9ce95bdd correct bug number 2005-08-31 19:42:20 +10:00
Tim Rice
eb456545fd - (tim) [configure.ac] Back out last change. It needs to be done differently. 2005-08-30 07:12:02 -07:00
Tim Rice
2016865b95 - (tim) [configure.ac] ia_openinfo() seems broken on OSR6. Limit UW long
password support to 7.x for now.
2005-08-29 17:17:37 -07:00
Tim Rice
2291c00ab2 - (tim) [CREDITS LICENCE auth.c configure.ac defines.h includes.h session.c
openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h
   openbsd-compat/xcrypt.c] New files [openssh/openbsd-compat/port-uw.c
   openssh/openbsd-compat/port-uw.h] Support long passwords (> 8-char)
   on UnixWare 7 from Dhiraj Gulati and Ahsan Rashid. Cleanup and testing
   by tim@. Feedback and OK dtucker@
2005-08-26 13:15:19 -07:00
Tim Rice
8cc2ad68cd - (tim) [defines.h] PATH_MAX bits for OpenServer OK dtucker@ 2005-08-23 17:18:21 -07:00
Tim Rice
3db1e3fc68 - (tim) [configure.ac ] Not all gcc's support -Wsign-compare 2005-08-23 17:11:26 -07:00
Darren Tucker
114572f7ee - (dtucker) [regress/test-exec.sh] Do not prepend an extra "/" to a fully-
qualified sshd pathname since some systems (eg Cygwin) may consider "/foo"
   and "//foo" to be different.  Spotted by vinschen at redhat.com.
2005-08-23 23:32:05 +10:00
Darren Tucker
93e7e8f345 - (dtucker) [configure.ac defines.h includes.h sftp.c] Add support for
LynxOS, patch from Olli Savia (ops at iki.fi).  ok djm@
2005-08-23 08:06:55 +10:00
Damien Miller
1d10976c16 - (djm) [ttymodes.c] bugzilla #1054: Fix encoding of _POSIX_VDISABLE,
from Jacob Nevins; ok dtucker@
2005-08-16 21:32:09 +10:00
Tim Rice
c1819c831f - (tim) [configure.ac] corrections to libedit tests. Report and patches
by skeleten AT shillest.net
2005-08-15 17:48:40 -07:00
Tim Rice
027e8b10f5 - (tim) wrap el_end() in #ifdef USE_LIBEDIT 2005-08-15 14:52:50 -07:00
Damien Miller
0e2c102858 - jaredy@cvs.openbsd.org 2005/08/08 13:22:48
[sftp.c]
     sftp prompt enhancements:
     - in non-interactive mode, do not print an empty prompt at the end
       before finishing
     - print newline after EOF in editline mode
     - call el_end() in editline mode
     ok dtucker djm
2005-08-12 22:16:22 +10:00
Damien Miller
8e489484a1 oops, that last commit was:
Report from Janusz Mucka; ok djm@
2005-08-12 22:11:58 +10:00
Damien Miller
203c70579e - dtucker@cvs.openbsd.org 2005/08/06 10:03:12
[servconf.c]
     Unbreak sshd ListenAddress for bare IPv6 addresses.
2005-08-12 22:11:37 +10:00
Damien Miller
43f6db64ff - djm@cvs.openbsd.org 2005/07/30 02:03:47
[readconf.c]
     listen_hosts initialisation here too; spotted greg AT y2005.nest.cx
2005-08-12 22:11:18 +10:00
Damien Miller
be1045dc58 - djm@cvs.openbsd.org 2005/07/30 01:26:16
[ssh.c]
     fix -D listen_host initialisation, so it picks up gateway_ports setting
     correctly
2005-08-12 22:10:56 +10:00
Damien Miller
b5c012577e - markus@cvs.openbsd.org 2005/07/28 17:36:22
[packet.c]
     missing packet_init_compression(); from solar
2005-08-12 22:10:28 +10:00
Darren Tucker
73f671a090 - (dtucker) [LICENCE configure.ac defines.h openbsd-compat/realpath.c]
Sync current (thread-safe) version of realpath.c from OpenBSD (which is
   in turn based on FreeBSD's).  ok djm@
2005-08-10 21:52:36 +10:00
Darren Tucker
c7572b2661 - (dtucker) [configure.ac] Test libedit library and headers for compatibility.
Report from skeleten AT shillest.net, ok djm@
2005-08-10 20:34:15 +10:00
Tim Rice
8bc6b900ed - (tim) [configure.ac] Allow --with-audit=no. OK dtucker@
Report by skeleten AT shillest.net
2005-08-09 10:09:53 -07:00
Darren Tucker
9825697d3c - (dtucker) [openbsd-compat/fake-rfc2553.h] MAX_INT -> INT_MAX since the
latter is specified in the standard.
2005-08-03 15:36:21 +10:00
Darren Tucker
212cfc4b48 - (dtucker) [openbsd-compat/fake-rfc2553.h] Check for EAI_* defines
individually and use a value less likely to collide with real values from
   netdb.h.  Fixes compile warnings on FreeBSD 5.3.  ok djm@
2005-08-03 10:57:15 +10:00
Darren Tucker
7da23cb5d3 - (dtucker) [configure.ac] Add a --with-Werror option to configure for
adding -Werror to CFLAGS when all of the configure tests are done. ok djm@
2005-08-03 00:20:15 +10:00
Darren Tucker
dd352b675b - (dtucker) [configure.ac] Enable -Wuninitialized by default when compiling
with gcc.  ok djm@
2005-08-02 17:21:29 +10:00
Darren Tucker
4085853915 - dtucker@cvs.openbsd.org 2005/07/27 10:39:03
[scp.c hostfile.c sftp-client.c]
     Silence bogus -Wuninitialized warnings; ok djm@
2005-08-02 17:07:07 +10:00
Damien Miller
9786e6e2a0 - markus@cvs.openbsd.org 2005/07/25 11:59:40
[kex.c kex.h myproposal.h packet.c packet.h servconf.c session.c]
     [sshconnect2.c sshd.c sshd_config sshd_config.5]
     add a new compression method that delays compression until the user
     has been authenticated successfully and set compression to 'delayed'
     for sshd.
     this breaks older openssh clients (< 3.5) if they insist on
     compression, so you have to re-enable compression in sshd_config.
     ok djm@
2005-07-26 21:54:56 +10:00
Damien Miller
47655ee03a - (djm) OpenBSD CVS Sync
- otto@cvs.openbsd.org 2005/07/19 15:32:26
     [auth-passwd.c]
     auth_usercheck(3) can return NULL, so check for that. Report from
     mpech@. ok markus@
2005-07-26 21:54:11 +10:00
Darren Tucker
ac1910f1a5 - (dtucker) [configure.ac] Update zlib warning message too, pointed out by
tim@.
2005-07-26 12:00:42 +10:00
Darren Tucker
41097edcf6 - (dtucker) [configure.ac] Update zlib version check for CAN-2005-2096. 2005-07-25 15:24:21 +10:00
Damien Miller
04b65335a8 - (djm) [monitor.c monitor_wrap.c] -Wsign-compare for PAM monitor calls 2005-07-17 17:53:31 +10:00
Damien Miller
b6f72f5294 -(djm) [audit.c auth1.c auth2.c entropy.c loginrec.c serverloop.c]
[ssh-rand-helper.c] fix portable 2nd level indents at 4 spaces too
2005-07-17 17:26:43 +10:00
Damien Miller
0dc1bef12d - djm@cvs.openbsd.org 2005/07/17 07:17:55
[auth-rh-rsa.c auth-rhosts.c auth2-chall.c auth2-gss.c channels.c]
     [cipher-ctr.c gss-genr.c gss-serv.c kex.c moduli.c readconf.c]
     [serverloop.c session.c sftp-client.c sftp.c ssh-add.c ssh-keygen.c]
     [sshconnect.c sshconnect2.c]
     knf says that a 2nd level indent is four (not three or five) spaces
2005-07-17 17:22:45 +10:00