Commit Graph

552 Commits

Author SHA1 Message Date
Damien Miller
484118ea0f - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from
Chris, the Young One <cky@pobox.com>
2000-07-02 19:13:56 +10:00
Damien Miller
c708843e6a - (djm) Stop shadow expiry checking from preventing logins with NIS. Based
on fix from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
2000-07-02 18:44:54 +10:00
Damien Miller
9b6d4ab8f9 - (djm) Fix brace mismatch from Corinna Vinschen <vinschen@cygnus.com> 2000-07-02 08:43:18 +10:00
Damien Miller
c92709967e Release 2.1.1p2 2000-07-01 19:42:32 +10:00
Damien Miller
cb170cb225 - (djm) Added check for broken snprintf() functions which do not correctly
terminate output string and attempt to use replacement.
2000-07-01 16:52:55 +10:00
Damien Miller
28adeef966 - (djm) Replace "/bin/sh" with _PATH_BSHELL. Report from Corinna Vinschen
<vinschen@cygnus.com>
 - (djm) Replace "/usr/bin/login" with LOGIN_PROGRAM
2000-07-01 13:29:26 +10:00
Damien Miller
7b413d2d17 - (djm) Replace "/bin/sh" with _PATH_BSHELL
- (djm) Replace "/usr/bin/login" with LOGIN_PROGRAM
2000-07-01 13:24:21 +10:00
Damien Miller
8e81ed3081 - (djm) Login fixes from Tom Bertelson <tbert@abac.com> 2000-07-01 13:17:42 +10:00
Damien Miller
d8cfda6bf6 - (djm) Fix Tru64 SIA problems reported by John P Speno <speno@isc.upenn.edu> 2000-07-01 12:56:09 +10:00
Damien Miller
b8c656e744 - (djm) Added patch from Chris Adams <cmadams@hiwaay.net> to add OSF SIA
support. Enable using "USE_SIA=1 ./configure [options]"
2000-06-28 15:22:41 +10:00
Damien Miller
262ff170fb - (djm) Added 'distprep' make target to simplify packaging 2000-06-28 08:24:49 +10:00
Damien Miller
91606b17d2 - (djm) Patch from Michael Stone <mstone@cs.loyola.edu> to add support for
Irix 6.x array sessions, project id's, and system audit trail id.
2000-06-28 08:22:29 +10:00
Damien Miller
53c5d467c3 - (djm) Fixes to lastlog code for Irix
- (djm) Use atomicio in loginrec
2000-06-28 00:50:50 +10:00
Damien Miller
dd47aa21fa - (djm) Formatting 2000-06-27 11:18:27 +10:00
Damien Miller
f8af08d7cb - (djm) Fixes to login code - not setting li->uid, cleanups 2000-06-27 09:40:06 +10:00
Damien Miller
0800647391 Fix fixed egd code 2000-06-26 13:55:31 +10:00
Damien Miller
7a445bb8d8 error -> fatal 2000-06-26 13:12:37 +10:00
Damien Miller
6468125052 - (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK
based on patch from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>
2000-06-26 13:01:33 +10:00
Damien Miller
1f335fb8d8 - (djm) Account expiry support from Andreas Steinmetz <ast@domdv.de>
- (djm) Added password expiry checking (no password change support)
2000-06-26 11:31:33 +10:00
Damien Miller
c0fd17fdca - OpenBSD CVS update
- provos@cvs.openbsd.org  2000/06/25 14:17:58
     [channels.c]
     correct check for bad channel ids; from Wei Dai <weidai@eskimo.com>
2000-06-26 10:22:53 +10:00
Damien Miller
8dd33fd1d5 - Better fix to aclocal tests from Garrick James <garrick@james.net> 2000-06-26 10:20:19 +10:00
Damien Miller
bf7f466206 - OpenBSD CVS Updates:
- markus@cvs.openbsd.org  2000/06/22 10:32:27
     [sshd.c]
     missing atomicio; report from Steve.Marquess@DET.AMEDD.ARMY.MIL
   - djm@cvs.openbsd.org     2000/06/22 17:55:00
     [auth-krb4.c key.c radix.c uuencode.c]
     Missing CVS idents; ok markus
2000-06-23 10:16:38 +10:00
Damien Miller
b54b40ef06 - (djm) Use sa_family_t in prototype for rresvport_af. Patch from
Svante Signell <svante.signell@telia.com>
 - (djm) Autoconf logic to define sa_family_t if it is missing
2000-06-23 08:23:34 +10:00
Damien Miller
c19fd5f4e2 Add explanation of PAM_TTY kludge 2000-06-22 21:44:54 +10:00
Damien Miller
8b7c6af89e Update RPM spec version numbers 2000-06-22 21:37:38 +10:00
Damien Miller
6536c7d3c9 - OpenBSD CVS Updates:
- markus@cvs.openbsd.org  2000/06/18 18:50:11
     [auth2.c compat.c compat.h sshconnect2.c]
     make userauth+pubkey interop with ssh.com-2.2.0
   - markus@cvs.openbsd.org  2000/06/18 20:56:17
     [dsa.c]
     mem leak + be more paranoid in dsa_verify.
   - markus@cvs.openbsd.org  2000/06/18 21:29:50
     [key.c]
     cleanup fingerprinting, less hardcoded sizes
   - markus@cvs.openbsd.org  2000/06/19 19:39:45
     [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
     [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h]
     [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h]
     [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h]
     [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c]
     [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c]
     [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c]
     [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c]
     [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h]
     OpenBSD tag
   - markus@cvs.openbsd.org  2000/06/21 10:46:10
     sshconnect2.c missing free; nuke old comment
2000-06-22 21:32:31 +10:00
Damien Miller
099f505f95 - (djm) Automatically generate host key during "make install". Suggested
by Gary E. Miller <gem@rellim.com>
 - (djm) Paranoia before kill() system call
2000-06-22 20:57:11 +10:00
Damien Miller
2f02295d31 typo 2000-06-20 13:50:01 +10:00
Damien Miller
d9a0a20671 - (djm) Typo in loginrec.c 2000-06-20 13:49:11 +10:00
Damien Miller
edb82929fa - (djm) Replace use of '-o' and '-a' logical operators in configure tests
with '||' and '&&'. As suggested by Jim Knoble <jmknoble@pint-stowp.cx>
   to fix SCO Unixware problem reported by Gary E. Miller <gem@rellim.com>
2000-06-20 13:25:52 +10:00
andre
98cabe0546 *** empty log message *** 2000-06-19 09:11:30 +00:00
andre
b4db42f781 Added some extra timings to help spot lastlog problems
Increased delay before logout
Improved message detail
2000-06-19 08:25:36 +00:00
andre
43ca7e200a Line up 'configure --help' output 2000-06-19 08:23:46 +00:00
andre
6bb92374df Big loginrec.c update
- MIN_SIZEOF macro to pick smallest buffer for str[ln]cpy()
  - fixes lastlog clobber spotted by P.S.S.Camp <P.S.S.Camp@ukc.ac.uk>
- Added some top-level api documentation
- Re-ordered construct_utmp(x)() to build well-formed structures for
   both login and logout, based on li->type.
  - change wtmp(x)_logout() to match new construct_*() form
- Improved error responses throughout
- Add ut_type cross-check for 'lastlog-from-wtmp(x)' where available
- utmp_write_direct() has had some testing. Oh yes!
- Re-ordered loginrec.h slightly
2000-06-19 08:20:03 +00:00
Damien Miller
0f91b4e3a1 - (djm) Started merge of Ben Lindstrom's <mouring@pconline.com> NeXT support 2000-06-18 15:43:25 +10:00
Damien Miller
f6d9e22189 - OpenBSD CVS updates:
- deraadt@cvs.openbsd.org 2000/06/17 09:58:46
     [channels.c]
     everyone says "nix it" (remove protocol 2 debugging message)
   - markus@cvs.openbsd.org  2000/06/17 13:24:34
     [sshconnect.c]
     allow extended server banners
   - markus@cvs.openbsd.org  2000/06/17 14:30:10
     [sshconnect.c]
     missing atomicio, typo
   - jakob@cvs.openbsd.org   2000/06/17 16:52:34
     [servconf.c servconf.h session.c sshd.8 sshd_config]
     add support for ssh v2 subsystems. ok markus@.
   - deraadt@cvs.openbsd.org 2000/06/17 18:57:48
     [readconf.c servconf.c]
     include = in WHITESPACE; markus ok
   - markus@cvs.openbsd.org  2000/06/17 19:09:10
     [auth2.c]
     implement bug compatibility with ssh-2.0.13 pubkey, server side
   - markus@cvs.openbsd.org  2000/06/17 21:00:28
     [compat.c]
     initial support for ssh.com's 2.2.0
   - markus@cvs.openbsd.org  2000/06/17 21:16:09
     [scp.c]
     typo
   - markus@cvs.openbsd.org  2000/06/17 22:05:02
     [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
     split auth-rsa option parsing into auth-options
     add options support to authorized_keys2
   - markus@cvs.openbsd.org  2000/06/17 22:42:54
     [session.c]
     typo
2000-06-18 14:50:44 +10:00
Damien Miller
7b22d65034 - (djm) Add summary of configure options to end of ./configure run
- (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from
   Michael Stone <mstone@cs.loyola.edu>
 - (djm) rusage is a privileged operation on some Unices (incl.
   Solaris 2.5.1). Report from Paul D. Smith <pausmith@nortelnetworks.com>
 - (djm) Avoid PAM failures when running without a TTY. Report from
   Martin Petrak <petrak@spsknm.schools.sk>
 - (djm) Include sys/types.h when including netinet/in.h in configure tests.
   Patch from Jun-ichiro itojun Hagino <itojun@iijlab.net>
2000-06-18 14:07:04 +10:00
Damien Miller
1a13225d87 - (djm) Fix short copy in loginrec.c (based on patch from Phill Camp
<P.S.S.Camp@ukc.ac.uk>
2000-06-13 21:23:17 +10:00
Damien Miller
a66626b2d5 - (djm) Fixes from Andrew McGill <andrewm@datrix.co.za>:
- Platform define for SCO 3.x which breaks on /dev/ptmx
  - Detect and try to fix missing MAXPATHLEN
2000-06-13 18:57:53 +10:00
andre
6e5d3475a5 Changed to OpenBSD indent and function declaration style
Added display of time when logging out, to try to catch lastlog bugs
2000-06-13 00:43:47 +00:00
andre
55661d99b8 Backed out previous changes - 'tolerance' setting may just hide a bug in
the lastlog-from-utmp code for HPUX
2000-06-13 00:29:34 +00:00
andre
4225438a34 Allow a small tolerance for slow systems when testing lastlog
recording
2000-06-12 23:40:52 +00:00
andre
45cad51c70 Stop lastlog detection setting DISABLE_LASTLOG - this flag means
'never even try to get the last login time', whereas we want to try to
use wtmp/wtmpx unless told otherwise. See loginrec.c:getlast_entry().
2000-06-12 23:27:31 +00:00
andre
35ad6bee4b - (andre) AIX, lastlog, configure fixes from Tom Bertelson <tbert@abac.com>:
- Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is
     def'd
  - Set AIX to use preformatted manpages
2000-06-12 22:41:27 +00:00
andre
e441aa3e21 Added catman defines for AIX (Tom Bertelson <tbert@abac.com>)
Fixed errant comma (Tom Bertelson <tbert@abac.com>)
2000-06-12 22:34:38 +00:00
andre
ecaabf1b6a Fixed getlast_entry() so that it doesn't try to use utmp(x) if
DISABLE_LASTLOG is defined. Bug reported by Tom Bertelson
<tbert@abac.com> for AIX.
2000-06-12 22:21:44 +00:00
Damien Miller
c29de955f4 - (djm) Configure fixes from SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp> 2000-06-12 23:04:18 +10:00
Damien Miller
b405d6108b Latest versions 2000-06-12 23:01:02 +10:00
Damien Miller
a6e407e849 wrong modes, forgot -kb 2000-06-12 22:58:43 +10:00
Damien Miller
e69f18cbff - (djm) Glob manpages in RPM spec files to catch compressed files
- (djm) Full license in auth-pam.c
2000-06-12 16:38:54 +10:00