Commit Graph

3409 Commits

Author SHA1 Message Date
Darren Tucker
49aaf4ad52 - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h
configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
   sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
2003-08-26 11:58:16 +10:00
Darren Tucker
0efd155c3c - markus@cvs.openbsd.org 2003/08/22 10:56:09
[auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c
     gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c
     readconf.h servconf.c servconf.h session.c session.h ssh-gss.h
     ssh_config.5 sshconnect2.c sshd_config sshd_config.5]
     support GSS API user authentication; patches from Simon Wilkinson,
     stripped down and tested by Jakob and myself.
2003-08-26 11:49:55 +10:00
Damien Miller
30912f7259 - (djm) Bug #629: Mark ssh_config option "pamauthenticationviakbdint"
as deprecated. Remove mention from README.privsep. Patch from
   aet AT cc.hut.fi
2003-08-26 10:48:14 +10:00
Darren Tucker
36ca53a5a0 - (dtucker) [README buildbff.sh inventory.sh] (all in contrib/aix)
Update package builder: correctly handle config variables, use lsuser
   rather than /etc/passwd, fix typos, add Id's.
2003-08-25 15:01:04 +10:00
Darren Tucker
3c8e1e1bbf - (dtucker) [configure.ac] Bug #533, #551: define BROKEN_GETADDRINFO on
Tru64, solves getnameinfo and "bad addr or host" errors.  ok djm@
2003-08-25 13:27:40 +10:00
Damien Miller
1f499fd368 - (djm) Bug #564: Perform PAM account checks for all authentications when
UsePAM=yes; ok dtucker
2003-08-25 13:08:49 +10:00
Darren Tucker
e41bba5847 - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny
any access to locked accounts.  ok djm@
2003-08-25 11:51:19 +10:00
Ben Lindstrom
5ade9abc37 - (bal) redo how we handle 'mysignal()'. Move it to
openbsd-compat/bsd-misc.c, s/mysignal/signal/ and #define signal to
   be our 'mysignal' by default.  OK djm@
2003-08-25 01:16:21 +00:00
Ben Lindstrom
af4a6c3a56 - (bal) openbsd-compat/ OpenBSD updates. Mostly licensing, ansifications
and minor fixes.
2003-08-25 01:10:51 +00:00
Damien Miller
331b6af8fa - (djm) Bug #621: Select OpenSC keys by usage attributes. Patch from
larsch@trustcenter.de
2003-08-25 10:58:26 +10:00
Darren Tucker
49d32566c2 - (dtucker) [contrib/cygwin/ssh-user-config] Put keys in authorized_keys
rather that authorized_keys2.  Patch from vinschen@redhat.com.
2003-08-22 18:43:48 +10:00
Damien Miller
59d3d5b8b4 - (djm) s/get_progname/ssh_get_progname/g to avoid conflict with Heimdal
-lbroken; ok dtucker
2003-08-22 09:34:41 +10:00
Darren Tucker
70a3d55b4a - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement
and after normal openpty test.
2003-08-21 17:58:29 +10:00
Darren Tucker
8e3653d2f3 - (dtucker) [defines.h] Put CMSG_DATA, CMSG_FIRSTHDR with other CMSG* macros,
change CMSG_DATA to use __CMSG_ALIGN (and thus work properly), reformat for
   consistency.
2003-08-21 16:49:41 +10:00
Darren Tucker
f4220e6cef - markus@cvs.openbsd.org 2003/08/14 16:08:58
[ssh-keygen.c]
     exit after primetest, ok djm@
2003-08-21 16:44:07 +10:00
Darren Tucker
f38ea77c03 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
Add a tcsendbreak function for platforms that don't have one, based on the
   one from OpenBSD.

Any more of these and I'll split them out into bsd-termio.[ch].
2003-08-13 20:48:07 +10:00
Darren Tucker
1c52ee3e6f - markus@cvs.openbsd.org 2003/08/13 09:07:10
[readconf.c ssh.c]
     socks4->socks, since with support both 4 and 5; dtucker@zip.com.au
2003-08-13 20:38:36 +10:00
Darren Tucker
ec960f2c93 - markus@cvs.openbsd.org 2003/08/13 08:46:31
[auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
     ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
     remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
     fgsch@, miod@, henning@, jakob@ and others
2003-08-13 20:37:05 +10:00
Darren Tucker
3bdbd848ea - markus@cvs.openbsd.org 2003/08/13 08:33:02
[session.c]
     use more portable tcsendbreak(3) and ignore break_length;
     ok deraadt, millert
2003-08-13 20:31:05 +10:00
Darren Tucker
d85efee437 - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge. 2003-08-13 20:28:14 +10:00
Darren Tucker
7802f31914 Update Corinna's address. 2003-08-11 23:03:53 +10:00
Darren Tucker
bc8c8f36fb - (dtucker) [openbsd-compat/xcrypt.c] Remove Cygwin #ifdef block (duplicate
in bsd-cygwin_util.h).
2003-08-11 23:00:33 +10:00
Darren Tucker
ec0943a96c - (dtucker) OpenBSD CVS Sync
(thanks to Simon Wilkinson for help with this -dt)
   - markus@cvs.openbsd.org 2003/07/16 15:02:06
     [auth-krb5.c]
     mcc -> fcc; from Love Hörnquist Åstrand <lha@it.su.se>
     otherwise the kerberos credentinal is stored in a memory cache
     in the privileged sshd. ok jabob@, hin@ (some time ago)
2003-08-11 22:55:36 +10:00
Darren Tucker
f38db7f5da - (dtucker) [auth-pam.c] Don't set PAM_TTY if tty is null. ok djm@ 2003-08-08 13:43:37 +10:00
Darren Tucker
65914f1eb3 - (dtucker) [openbsd-compat/fake-rfc2553.h] Older Linuxes have AI_PASSIVE and
AI_CANONNAME in netdb.h but not AI_NUMERICHOST, so check each definition
   separately before defining them.
2003-08-08 12:15:11 +10:00
Darren Tucker
80649c5fa6 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.h] Move Cygwin
specific defines and includes to bsd-cygwin_util.h.  Fixes build error too.
2003-08-07 16:28:16 +10:00
Darren Tucker
854d7fd439 - (dtucker) [openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h]
Remove incorrect filenames from comments (file names are in Id tags).
2003-08-07 16:23:43 +10:00
Darren Tucker
f315224d7c - (dtucker) [defines.h] Bug #336: Add CMSG_DATA and CMSG_FIRSTHDR macros if
not already defined (eg Linux with some versions of libc5), based on those
   from OpenBSD.
2003-08-07 15:58:28 +10:00
Darren Tucker
89f4cf0d29 - (dtucker) [canohost.c] Bug #336: Only check ip options if IP_OPTIONS is
defined (fixes compile error on really old Linuxes).
2003-08-07 13:29:04 +10:00
Darren Tucker
b9d3f41ceb - (dtucker) [session.c] Have session_break_req not attempt to send a break
if TIOCSBRK and TIOCCBRK are not defined (eg Cygwin).
2003-08-07 13:24:24 +10:00
Darren Tucker
bdf571b0dc - (dtucker) [openbsd-compat/bsd-misc.c] Fix cut-and-paste bug in tcgetpgrp. 2003-08-03 00:36:16 +10:00
Darren Tucker
19c4bbc37f Sync OpenBSD ID 2003-08-03 00:17:30 +10:00
Darren Tucker
db732b14d7 - markus@cvs.openbsd.org 2003/07/31 22:34:03
[progressmeter.c]
    print rate similar old version; round instead truncate;
    (included in previous progressmeter.c commit)
2003-08-03 00:07:35 +10:00
Darren Tucker
85f04c6fd5 - avsm@cvs.openbsd.org 2003/07/31 15:50:16
[atomicio.c]
     correct comment: atomicio takes vwrite, not write; deraadt@ ok
2003-08-03 00:05:58 +10:00
Darren Tucker
4b60966863 - markus@cvs.openbsd.org 2003/07/31 09:21:02
[auth2-none.c]
     check whether passwd auth is allowd, similar to proto 1; rob@pitman.co.za
     ok henning
2003-08-03 00:05:01 +10:00
Darren Tucker
40311f2feb Add imported progressmeter.c changes to Changelog 2003-08-03 00:00:47 +10:00
Darren Tucker
b2f9d4161a - (dtucker) [Makefile.in moduli.c moduli.h] Add new files and to Makefile.
Should have added with this sync:
   - djm@cvs.openbsd.org 2003/07/28 09:49:56
     [ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
2003-08-02 23:51:38 +10:00
Darren Tucker
048737c9bc Remove unused variable. 2003-08-02 23:33:48 +10:00
Darren Tucker
2e9c9cf702 - (dtucker) [openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
Add a tcgetpgrp function.
2003-08-02 23:31:42 +10:00
Darren Tucker
06ef75bf0c - markus@cvs.openbsd.org 2003/07/29 18:24:00
[LICENCE progressmeter.c]
     replace 4 clause BSD licensed progressmeter code with a replacement
     from Nils Nordman and myself; ok deraadt@
     (copied from OpenBSD an re-applied portable changes)
2003-08-02 23:28:38 +10:00
Darren Tucker
019cefeaad - djm@cvs.openbsd.org 2003/07/28 09:49:56
[ssh-keygen.1 ssh-keygen.c]
     Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
     Based on code from Phil Karn, William Allen Simpson and Niels Provos.
     ok markus@, thanks jmc@
2003-08-02 22:40:07 +10:00
Darren Tucker
c20c60bc99 - markus@cvs.openbsd.org 2003/07/23 07:42:43
[sshd_config]
     remove AFS; itojun@
2003-08-02 22:31:45 +10:00
Darren Tucker
6aaa58c470 - (dtucker) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/07/22 13:35:22
     [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c
     monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1
     ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h]
     remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
     test+ok henning@
 - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support.
 - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files.

I hope I got this right....
2003-08-02 22:24:49 +10:00
Darren Tucker
4c29dd9f44 - (dtucker) [monitor.h monitor_wrap.h] Remove excess ident tags. 2003-08-02 20:37:03 +10:00
Damien Miller
7f2d795e3f - (djm) [auth-pam.c] Don't use crappy APIs like sprintf. Thanks bal 2003-07-30 14:53:11 +10:00
Darren Tucker
fbba5a0501 - (dtucker) [openbsd-compat/xcrypt.c] Fix typo: DISABLED_SHADOW ->
DISABLE_SHADOW.  Fixes HP-UX compile error.
2003-07-26 19:38:30 +10:00
Ben Lindstrom
0410e32f47 - (bal) [auth-passwd.c openbsd-compat/Makefile.in openbsd-compat/xcrypt.c
openbsd-compat/xcrypt.h] Split off encryption into xcrypt() interface,
    and isolate shadow password functions.  Tested in Solaris, but should
    not break other platforms too badly (except maybe HP =).  Also brings
    auth-passwd.c into full sync with OpenBSD tree.
2003-07-24 06:52:13 +00:00
Darren Tucker
acb98497fb - (dtucker) [configure.ac] Back out change for bug #620. 2003-07-23 14:33:10 +10:00
Darren Tucker
700e4380ce Typo: BROKEN_ADDRINFO -> BROKEN_GETADDRINFO 2003-07-19 21:28:31 +10:00
Darren Tucker
cca1bdb8a8 - djm@cvs.openbsd.org 2003/07/19 00:46:31
[regress/sftp-cmds.sh]
     regress test for sftp arguments with escaped quotes; ok markus
2003-07-19 20:11:54 +10:00