RepoMirrors/openssh
1
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2024-12-28 21:22:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,484 Commits 69 Branches 157 Tags 27 MiB
ff9f484f45
Commit Graph

169 Commits

Author SHA1 Message Date
Damien Miller
d27b947178 - reyk@cvs.openbsd.org 2005/12/06 22:38:28 
[auth-options.c auth-options.h channels.c channels.h clientloop.c]
     [misc.c misc.h readconf.c readconf.h scp.c servconf.c servconf.h]
     [serverloop.c sftp.c ssh.1 ssh.c ssh_config ssh_config.5 sshconnect.c]
     [sshconnect.h sshd.8 sshd_config sshd_config.5]
     Add support for tun(4) forwarding over OpenSSH, based on an idea and
     initial channel code bits by markus@. This is a simple and easy way to
     use OpenSSH for ad hoc virtual private network connections, e.g.
     administrative tunnels or secure wireless access. It's based on a new
     ssh channel and works similar to the existing TCP forwarding support,
     except that it depends on the tun(4) network interface on both ends of
     the connection for layer 2 or layer 3 tunneling. This diff also adds
     support for LocalCommand in the ssh(1) client.

     ok djm@, markus@, jmc@ (manpages), tested and discussed with others
 2005-12-13 19:29:02 +11:00
Tim Rice
46259d86a2 - (tim) [configure.ac sshd.8] Enable locked account check (a "*LK*" string) 
for UnixWare.
 2005-11-28 18:40:34 -08:00
Darren Tucker
b18f15100a - (dtucker) [configure.ac sshd.8] Enable locked account check (a prepended 
"*LOCKED*" string) for FreeBSD.  Patch jeremie at le-hen.org and
   senthilkumar_sen at hotpop.com.
 2005-10-05 23:02:16 +10:00
Damien Miller
ac7ef6a736 - djm@cvs.openbsd.org 2005/06/08 03:50:00 
[ssh-keygen.1 ssh-keygen.c sshd.8]
     increase default rsa/dsa key length from 1024 to 2048 bits;
     ok markus@ deraadt@
 2005-06-16 13:19:06 +10:00
Damien Miller
167ea5d026 - djm@cvs.openbsd.org 2005/04/21 06:17:50 
[ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 ssh_config.5 sshd.8]
     [sshd_config.5] OpenSSH doesn't ever look at the $HOME environment
     variable, so don't say that we do (bz #623); ok deraadt@
 2005-05-26 12:04:02 +10:00
Damien Miller
718fd4b9b8 - jmc@cvs.openbsd.org 2005/03/01 14:59:49 
[sshd.8]
     new sentence, new line;
     whitespace;
 2005-03-02 12:03:23 +11:00
Damien Miller
e1776155d1 - djm@cvs.openbsd.org 2005/03/01 10:40:27 
[hostfile.c hostfile.h readconf.c readconf.h ssh.1 ssh_config.5]
     [sshconnect.c sshd.8]
     add support for hashing host names and addresses added to known_hosts
     files, to improve privacy of which hosts user have been visiting; ok
     markus@ deraadt@
 2005-03-01 21:47:37 +11:00
Damien Miller
70a908ec89 - jmc@cvs.openbsd.org 2005/02/25 10:55:13 
[sshd.8]
     add /etc/motd and $HOME/.hushlogin to FILES;
     from michael knudsen;
 2005-03-01 21:17:09 +11:00
Darren Tucker
22cc741096 - dtucker@cvs.openbsd.org 2004/12/06 11:41:03 
[auth-rsa.c auth2-pubkey.c authfile.c misc.c misc.h ssh.h sshd.8]
     Discard over-length authorized_keys entries rather than complaining when
     they don't decode.  bz #884, with & ok djm@
 2004-12-06 22:47:41 +11:00
Darren Tucker
db69390817 - markus@cvs.openbsd.org 2004/08/26 16:00:55 
[ssh.1 sshd.8]
     get rid of references to rhosts authentication; with jmc@
 2004-08-29 16:37:24 +10:00
Darren Tucker
097e1e9a97 - dtucker@cvs.openbsd.org 2004/05/02 11:54:31 
[sshd.8]
     Man page grammar fix (bz #858), from damerell at chiark.greenend.org.uk
     via Debian; ok djm@
 2004-05-02 22:15:08 +10:00
Darren Tucker
1f20394e92 - jmc@cvs.openbsd.org 2003/10/08 08:27:36 
[scp.1 scp.c sftp-server.8 sftp.1 sftp.c ssh.1 sshd.8]
     scp and sftp: add options list and sort options. options list requested
     by deraadt@
     sshd: use same format as ssh
     ssh: remove wrong option from list
     sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)
     ok deraadt@ markus@
 2003-10-15 15:50:42 +10:00
Darren Tucker
e41bba5847 - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny 
any access to locked accounts.  ok djm@
 2003-08-25 11:51:19 +10:00
Darren Tucker
ec960f2c93 - markus@cvs.openbsd.org 2003/08/13 08:46:31 
[auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
     ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
     remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
     fgsch@, miod@, henning@, jakob@ and others
 2003-08-13 20:37:05 +10:00
Damien Miller
f1ce505daf - jmc@cvs.openbsd.org 2003/06/10 09:12:11 
[scp.1 sftp-server.8 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5]
     [sshd.8 sshd_config.5 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
     - section reorder
     - COMPATIBILITY merge
     - macro cleanup
     - kill whitespace at EOL
     - new sentence, new line
     ssh pages ok markus@
 2003-06-11 22:04:39 +10:00
Damien Miller
fbf486b4a6 - jmc@cvs.openbsd.org 2003/05/20 12:09:31 
[ssh.1 ssh_config.5 sshd.8 sshd_config.5 ssh-keygen.1]
     new sentence, new line
 2003-05-23 18:44:23 +10:00
Damien Miller
3155432cd9 - david@cvs.openbsd.org 2003/04/30 20:41:07 
[sshd.8]
     fix invalid .Pf macro usage introduced in previous commit
     ok jmc@ mouring@
 2003-05-14 13:44:58 +10:00
Damien Miller
049245d260 - mouring@cvs.openbsd.org 2003/04/30 01:16:20 
[sshd.8 sshd_config.5]
     Escape ?, * and ! in .Ql for nroff compatibility.  OpenSSH Portable
     Bug #550 and * escaping suggested by jmc@.
 2003-05-14 13:44:42 +10:00
Damien Miller
ffadc583f6 - jmc@cvs.openbsd.org 2003/01/31 21:54:40 
[sshd.8]
     typos; sshd(8): help and ok markus@
     help and ok millert@
 2003-02-24 11:52:26 +11:00
Damien Miller
dcbb6c2dc9 - todd@cvs.openbsd.org 2002/09/24 20:59:44 
[sshd.8]
     tweak the example $HOME/.ssh/rc script to not show on any cmdline the
     sensitive data it handles. This fixes bug # 402 as reported by
     kolya@mit.edu (Nickolai Zeldovich).
     ok markus@ and stevesk@
 2002-09-25 12:20:52 +10:00
Damien Miller
86247e2798 - stevesk@cvs.openbsd.org 2002/09/16 22:03:13 
[sshd.8]
     reference moduli(5) in FILES /etc/moduli.
 2002-09-19 11:51:53 +10:00
Damien Miller
c13486300d - (djm) OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2002/09/04 18:52:42
     [servconf.c sshd.8 sshd_config.5]
     default LoginGraceTime to 2m; 1m may be too short for slow systems.
     ok markus@
 2002-09-05 14:35:14 +10:00
Damien Miller
f771ab75f0 - stevesk@cvs.openbsd.org 2002/08/21 19:38:06 
[servconf.c sshd.8 sshd_config sshd_config.5]
     change LoginGraceTime default to 1 minute; ok mouring@ markus@
 2002-09-04 16:25:52 +10:00
Damien Miller
b83df8d505 - espie@cvs.openbsd.org 2002/08/21 11:20:59 
[sshd.8]
     `RSA' updated to refer to `public key', where it matters.
     okay markus@
 2002-09-04 16:24:55 +10:00
Ben Lindstrom
bd9bf38b00 - stevesk@cvs.openbsd.org 2002/08/12 17:30:35 
[ssh.1 sshd.8 sshd_config.5]
     more PermitUserEnvironment; ok markus@
 2002-08-20 18:54:20 +00:00
Ben Lindstrom
dc7adf2670 - marc@cvs.openbsd.org 2002/08/02 16:00:07 
[ssh.1 sshd.8]
     note that .ssh/environment is only read when
     allowed (PermitUserEnvironment in sshd_config).
     OK markus@
 2002-08-20 18:38:02 +00:00
Ben Lindstrom
959de99aa0 - stevesk@cvs.openbsd.org 2002/06/22 16:45:29 
[ssh-agent.1 sshd.8 sshd_config.5]
     use process ID vs. pid/PID/process identifier
 2002-06-23 00:35:25 +00:00
Ben Lindstrom
624e3f2065 - stevesk@cvs.openbsd.org 2002/06/22 16:32:54 
[sshd.8]
     add /var/empty in FILES section
 2002-06-23 00:32:57 +00:00
Ben Lindstrom
9f04903c50 - stevesk@cvs.openbsd.org 2002/06/20 19:56:07 
[ssh.1 sshd.8]
     move configuration file options from ssh.1/sshd.8 to
     ssh_config.5/sshd_config.5; ok deraadt@ millert@
 2002-06-21 00:59:05 +00:00
Ben Lindstrom
20abb75f53 - stevesk@cvs.openbsd.org 2002/05/29 03:06:30 
[ssh.1 sshd.8]
     spelling
 2002-06-06 20:45:33 +00:00
Ben Lindstrom
fb62a69488 - markus@cvs.openbsd.org 2002/05/15 21:56:38 
[servconf.c sshd.8 sshd_config]
     re-enable privsep and disable setuid for post-3.2.2
 2002-06-06 19:47:11 +00:00
Ben Lindstrom
c5c15dde32 - markus@cvs.openbsd.org 2002/05/15 21:02:53 
[servconf.c sshd.8 sshd_config]
     disable privsep and enable setuid for the 3.2.2 release
 2002-05-15 21:37:34 +00:00
Ben Lindstrom
c57bbf158d - millert@cvs.openbsd.org 2002/05/06 23:34:33 
[ssh.1 sshd.8]
     Kill/adjust r(login|exec)d? references now that those are no longer in
     the tree.
 2002-05-15 21:36:45 +00:00
Ben Lindstrom
bb2ce36d4d - deraadt@cvs.openbsd.org 2002/05/04 02:39:35 
[servconf.c sshd.8 sshd_config]
     enable privsep by default; provos ok
(historical)
 2002-05-15 21:35:43 +00:00
Damien Miller
d7de14b6ad - markus@cvs.openbsd.org 2002/04/22 16:16:53 
[servconf.c sshd.8 sshd_config]
     do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@
 2002-04-23 21:04:51 +10:00
Damien Miller
7a8558d3ea - stevesk@cvs.openbsd.org 2002/04/21 16:19:27 
[sshd.8 sshd_config]
     document default AFSTokenPassing no; ok deraadt@
 2002-04-23 20:51:15 +10:00
Ben Lindstrom
a11e270115 - stevesk@cvs.openbsd.org 2002/04/05 20:56:21 
[sshd.8]
     clarify sshrc some and handle X11UseLocalhost=yes; ok markus@
 2002-04-05 22:18:48 +00:00
Ben Lindstrom
0d0be02a29 - stevesk@cvs.openbsd.org 2002/03/29 19:16:22 
[sshd.8]
     RSA key modulus size minimum 768; ok markus@
 2002-04-02 20:39:29 +00:00
Ben Lindstrom
f181384a6b - markus@cvs.openbsd.org 2002/03/26 11:34:49 
[ssh.1 sshd.8]
     update to recent drafts
 2002-03-27 17:18:31 +00:00
Ben Lindstrom
85520a6705 - stevesk@cvs.openbsd.org 2002/03/19 05:23:08 
[sshd.8]
     Banner has no default.
 2002-03-22 02:44:40 +00:00
Ben Lindstrom
191c8e5eb9 - provos@cvs.openbsd.org 2002/03/18 17:59:09 
[sshd.8]
     document UsePrivilegeSeparation
 2002-03-22 02:37:50 +00:00
Ben Lindstrom
000dda5373 - provos@cvs.openbsd.org 2002/03/18 17:53:08 
[sshd.8]
     credits for privsep
 2002-03-22 02:33:12 +00:00
Ben Lindstrom
ea03db9dbb - stevesk@cvs.openbsd.org 2002/02/28 20:46:10 
[sshd.8]
     -u0 DNS for user@host
 2002-03-05 01:38:57 +00:00
Ben Lindstrom
778bf55d89 - stevesk@cvs.openbsd.org 2002/02/28 20:36:42 
[sshd.8]
     DenyUsers allows user@host pattern also
 2002-03-05 01:37:12 +00:00
Damien Miller
afcc22542e - deraadt@cvs.openbsd.org 2002/02/10 01:07:05 
[readconf.h sshd.8]
     more /etc/ssh; openbsd@davidkrause.com
 2002-02-10 18:32:55 +11:00
Damien Miller
05eda437a6 - (djm) OpenBSD CVS Sync 
- deraadt@cvs.openbsd.org 2002/02/09 17:37:34
     [pathnames.h session.c ssh.1 sshd.8 sshd_config ssh-keyscan.1]
     move ssh config files to /etc/ssh
 - (djm) Adjust portable Makefile.in tnd ssh-rand-helper.c o match
 2002-02-10 18:32:28 +11:00
Damien Miller
9749c0c972 - stevesk@cvs.openbsd.org 2002/02/03 22:35:57 
[ssh.1 sshd.8]
     some KeepAlive cleanup/clarify; ok markus@
 2002-02-05 12:23:58 +11:00
Damien Miller
c5d8635d6a - markus@cvs.openbsd.org 2002/01/29 14:32:03 
[auth2.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c canohost.c servconf.c servconf.h session.c sshd.8 sshd_config]
     s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@
 2002-02-05 12:13:41 +11:00
Damien Miller
95c249ff47 - stevesk@cvs.openbsd.org 2002/01/27 14:57:46 
[channels.c servconf.c servconf.h session.c sshd.8 sshd_config]
     add X11UseLocalhost; ok markus@
 2002-02-05 12:11:34 +11:00
Damien Miller
df64a682f1 - stevesk@cvs.openbsd.org 2002/01/18 20:46:34 
[sshd.8]
     clarify Allow(Groups|Users) and Deny(Groups|Users); suggestion from
     allard@oceanpark.com; ok markus@
 2002-01-22 23:33:45 +11:00