Commit Graph

3927 Commits

Author SHA1 Message Date
Darren Tucker
4d2f361f96 - (dtucker) [loginrec.c] Use UT_LINESIZE if available, prevents truncating
pty name on Linux 2.6.x systems.  Patch from jpe at eisenmenger.org.
2004-04-08 10:57:05 +10:00
Ben Lindstrom
a8104b5c92 - (bal) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Check to see
if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X)
   are starting to restrict it as internal since it is not needed by
    developers any more. (Patch based on Apple tree)
- (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since
    krb5 on MacOS/X conflicts.  There may be a better solution, but this will
    work for now.
2004-04-07 04:16:11 +00:00
Darren Tucker
ac7c998a2d - (dtucker) [session.c] Flush stdout after displaying loginmsg. From
f_mohr at yahoo.de.
2004-04-07 08:04:09 +10:00
Darren Tucker
3c7c83a554 Oops, leftover from testing 2004-04-06 21:41:51 +10:00
Darren Tucker
4398cf5927 - (dtucker) [configure.ac] Bug #816, #748 (again): Attempt to detect
broken getaddrinfo and friends on HP-UX.  ok djm@
2004-04-06 21:39:02 +10:00
Darren Tucker
8db9a0ffd8 - (dtucker) [acconfig.h configure.ac defines.h] Bug #820: don't use
updwtmpx() on IRIX since it seems to clobber utmp.  ok djm@
2004-04-06 21:31:12 +10:00
Damien Miller
ccea020574 - (djm) Bug #825: Fix ip_options_check() for mapped IPv4/IPv6 connection;
with & ok dtucker@
2004-03-31 15:17:54 +10:00
Darren Tucker
17addf0463 - (dtucker) [auth-pam.c] rename the_authctxt to sshpam_authctxt in auth-pam.c
to reduce potential confusion with the one in sshd.c.  ok djm@
2004-03-30 20:57:57 +10:00
Darren Tucker
809031f6c4 - (dtucker) [configure.ac] Bug #811: Use "!" for LOCKED_PASSWD_PREFIX on
Linuxes, since that's what many use.  ok djm@
2004-03-30 14:03:45 +10:00
Darren Tucker
b385059346 - (dtucker) [session.c] Bug #817: Clear loginmsg after fork to prevent
duplicate login messages for mutli-session logins.  ok djm@
2004-03-27 16:44:21 +11:00
Damien Miller
154e8b82ef - (djm) Crank RPM spec versions 2004-03-22 09:40:01 +11:00
Damien Miller
aed7cee49a - markus@cvs.openbsd.org 2004/03/20 10:40:59
[version.h]
     3.8.1
2004-03-22 09:39:09 +11:00
Damien Miller
0c889cd9e9 - markus@cvs.openbsd.org 2004/03/11 10:21:17
[ssh.c sshd.c]
     ssh, sshd: sync version output, ok djm
2004-03-22 09:36:00 +11:00
Damien Miller
b408786db9 - markus@cvs.openbsd.org 2004/03/11 08:36:26
[sshd.c]
     trim usage; ok deraadt
2004-03-22 09:35:21 +11:00
Damien Miller
5095510e5f - markus@cvs.openbsd.org 2004/03/10 09:45:06
[ssh.c]
     trim usage to match ssh(1) and look more like unix. ok djm@
2004-03-22 09:34:58 +11:00
Damien Miller
3df755e441 - markus@cvs.openbsd.org 2004/03/09 22:11:05
[ssh.c]
     increase x11 cookie lifetime to 20 minutes; ok djm
2004-03-22 09:34:26 +11:00
Damien Miller
bfba354261 - (djm) [sshd.c] Drop supplemental groups if started as root 2004-03-22 09:29:57 +11:00
Damien Miller
4fefe24c01 - (djm) [configure.ac] Add standard license to configure.ac; ok ben, dtucker 2004-03-11 14:20:10 +11:00
Darren Tucker
7c991ab1e1 - (dtucker) [openbsd-compat/fake-rfc2553.h] Bug #812: #undef getaddrinfo
before redefining it, silences warnings on Tru64.
2004-03-10 21:06:32 +11:00
Tim Rice
aa5383243d - (tim) [regress/README.regress] Document ssh-rand-helper issue. ok bal 2004-03-08 12:12:18 -08:00
Damien Miller
8448e66770 - dtucker@cvs.openbsd.org 2004/03/08 10:18:57
[sshd_config.5]
     Document KerberosGetAFSToken;  ok markus@
2004-03-08 23:13:15 +11:00
Damien Miller
3b51301a4b - djm@cvs.openbsd.org 2004/03/08 09:38:05
[ssh-keyscan.c]
     explicitly initialise remote_major and remote_minor.
     from cjwatson AT debian.org; ok markus@
2004-03-08 23:13:00 +11:00
Damien Miller
bd394c329b - markus@cvs.openbsd.org 2004/03/05 10:53:58
[readconf.c readconf.h scp.1 sftp.1 ssh.1 ssh_config.5 sshconnect2.c]
     add IdentitiesOnly; ok djm@, pb@
2004-03-08 23:12:36 +11:00
Damien Miller
c0f27d8782 - djm@cvs.openbsd.org 2004/03/03 09:31:20
[sftp.c]
     Fix initialisation of progress meter; ok markus@
2004-03-08 23:12:19 +11:00
Damien Miller
9ba3069a8b - djm@cvs.openbsd.org 2004/03/03 09:30:42
[sftp-client.c]
     Don't print duplicate messages when progressmeter is off
     Spotted by job317 AT mailvault.com; ok markus@
2004-03-08 23:12:02 +11:00
Damien Miller
57aae982be - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2004/03/03 06:47:52
     [sshd.c]
     change proctiltle after accept(2); ok henning, deraadt, djm
2004-03-08 23:11:25 +11:00
Darren Tucker
dbf7a74ee5 - (dtucker) [auth-pam.c auth-pam.h auth1.c auth2.c monitor.c monitor_wrap.c
monitor_wrap.h] Bug #808: Ensure force_pwchange is correctly initialized
   even if keyboard-interactive is not used by the client.  Prevents segfaults
   in some cases where the user's password is expired (note this is not
   considered a security exposure).  ok djm@
2004-03-08 23:04:06 +11:00
Darren Tucker
86c093d289 - (dtucker) [configure.ac sshd.c openbsd-compat/bsd-misc.h
openbsd-compat/setenv.c] Unset KRB5CCNAME on AIX to prevent it from being
   inherited by the child.  ok djm@
2004-03-08 22:59:03 +11:00
Darren Tucker
112aaac0ce - (dtucker) [sshd.c] Back out rev 1.270 as it caused problems on some
platforms (eg SCO, HP-UX) with logging in the wrong TZ.
2004-03-08 22:13:12 +11:00
Tim Rice
f45eff21dc - (tim) [regress/login-timeout.sh] fix building outside of source tree. 2004-03-07 10:40:01 -08:00
Darren Tucker
91bf45c597 - (dtucker) [auth-passwd.c auth-sia.c auth-sia.h defines.h
openbsd-compat/xcrypt.c] Bug #802: Fix build error on Tru64 when
   configured --with-osfsia.  ok djm@
2004-03-04 22:59:36 +11:00
Darren Tucker
b9b6021667 - (dtucker) [auth-pam.c] Reset signal status when starting pam auth thread,
prevent hanging during PAM keyboard-interactive authentications.  ok djm@
2004-03-04 20:03:54 +11:00
Darren Tucker
4b385d4bc0 - (dtucker) [auth-pam.c] Don't try to export PAM when compiled with
-DUSE_POSIX_THREADS.  From antoine.verheijen at ualbert ca.  ok djm@
2004-03-04 19:54:10 +11:00
Darren Tucker
6e26bf15ee wrong year 2004-03-04 19:47:29 +11:00
Damien Miller
6c4914afcc - (djm) [configure.ac ssh-agent.c] Use prctl to prevent ptrace on ssh-agent
ok dtucker
2004-03-03 11:08:59 +11:00
Tim Rice
ad4a188e46 - (tim) [configure.ac] Put back bits mistakenly removed from Rev 1.188 2004-02-29 15:53:37 -08:00
Darren Tucker
b099d855d3 - (dtucker) [regress/try-ciphers.sh] Skip acss if not compiled in (eg if we
built with openssl < 0.9.7)
2004-02-29 21:30:05 +11:00
Darren Tucker
9468ba33a1 - dtucker@cvs.openbsd.org 2004/02/28 13:44:45
[regress/try-ciphers.sh]
     Test acss too; ok markus@
2004-02-29 20:38:26 +11:00
Darren Tucker
68b184c75d - dtucker@cvs.openbsd.org 2004/02/28 12:16:57
[regress/dynamic-forward.sh]
     Make dynamic-forward understand nc's new output.  ok markus@
2004-02-29 20:37:06 +11:00
Darren Tucker
437a5f035b - markus@cvs.openbsd.org 2004/02/24 17:06:52
[regress/ssh-com-client.sh regress/ssh-com-keygen.sh
     regress/ssh-com-sftp.sh regress/ssh-com.sh]
     test against recent ssh.com releases
2004-02-29 20:33:51 +11:00
Darren Tucker
03c907a22b - markus@cvs.openbsd.org 2004/02/24 16:56:30
[regress/test-exec.sh]
     allow arguments in ${TEST_SSH_XXX}
2004-02-29 20:31:08 +11:00
Darren Tucker
017fd61a92 - dtucker@cvs.openbsd.org 2004/02/17 08:23:20
[regress/Makefile regress/login-timeout.sh]
     Add regression test for LoginGraceTime; ok markus@
2004-02-29 20:30:17 +11:00
Darren Tucker
effc84ce5b - dtucker@cvs.openbsd.org 2004/02/27 22:49:27
[dh.c]
     Reset bit counter at the right time, fixes debug output in the case where
     the DH group is rejected.  ok markus@
2004-02-29 20:15:08 +11:00
Darren Tucker
c56c7ef592 - dtucker@cvs.openbsd.org 2004/02/27 22:44:56
[dh.c]
     Make /etc/moduli line buffer big enough for 8kbit primes, in case anyone
     ever uses one.  ok markus@
2004-02-29 20:13:34 +11:00
Darren Tucker
fc113c97a3 - dtucker@cvs.openbsd.org 2004/02/27 22:42:47
[dh.c]
     Prevent sshd from sending DH groups with a primitive generator of zero or
     one, even if they are listed in /etc/moduli.  ok markus@
2004-02-29 20:12:33 +11:00
Darren Tucker
d592048c36 - djm@cvs.openbsd.org 2004/02/25 00:22:45
[sshd.c]
     typo in comment
2004-02-29 20:11:30 +11:00
Ben Lindstrom
78ffe26501 - (bal) KNF our sshlogin.c even if the code looks nothing like upstream
code due to diversity issues.
2004-02-27 03:01:19 +00:00
Damien Miller
124055dd3b - (djm) Don't specify path to PAM modules in Redhat sshd.pam; from Fedora 2004-02-25 10:57:45 +11:00
Damien Miller
d891395a09 - (djm) Trim ChangeLog 2004-02-25 10:56:31 +11:00
Damien Miller
3342470472 - (djm) Release 3.8p1 2004-02-24 17:13:28 +11:00