gbucchino/openssh-portable
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,006 Commits 76 Branches 165 Tags
94de3b20db40dfa2ffbf51fb4757db11df493319
Commit Graph
55 Commits
Author SHA1 Message Date
Damien Miller d681d2602c - (djm) OpenBSD CVS Sync 
- [email protected] 2002/09/25 11:17:16
     [sshd_config]
     sync LoginGraceTime with default
 2002-09-27 13:21:57 +10:00
Damien Miller f771ab75f0 - [email protected] 2002/08/21 19:38:06 
[servconf.c sshd.8 sshd_config sshd_config.5]
     change LoginGraceTime default to 1 minute; ok mouring@ markus@
 2002-09-04 16:25:52 +10:00
Ben Lindstrom 5d860f02ca - [email protected] 2002/07/30 17:03:55 
[auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5]
     add PermitUserEnvironment (off by default!); from [email protected];
     ok provos, deraadt
 2002-08-01 01:28:38 +00:00
Kevin Steves bdf3e89f1a 20020628 
- (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented
   options should contain default value.  from solar.
 2002-06-27 16:59:50 +00:00
Ben Lindstrom 1b8d730b7d - [email protected] 2002/06/20 23:37:12 
[sshd_config]
     add Compression
 2002-06-21 01:11:36 +00:00
Ben Lindstrom 9721e92ba8 - [email protected] 2002/06/20 20:03:34 
[ssh_config sshd_config]
     refer to config file man page
 2002-06-21 01:06:03 +00:00
Ben Lindstrom fb62a69488 - [email protected] 2002/05/15 21:56:38 
[servconf.c sshd.8 sshd_config]
     re-enable privsep and disable setuid for post-3.2.2
 2002-06-06 19:47:11 +00:00
Ben Lindstrom c5c15dde32 - [email protected] 2002/05/15 21:02:53 
[servconf.c sshd.8 sshd_config]
     disable privsep and enable setuid for the 3.2.2 release
 2002-05-15 21:37:34 +00:00
Ben Lindstrom bb2ce36d4d - [email protected] 2002/05/04 02:39:35 
[servconf.c sshd.8 sshd_config]
     enable privsep by default; provos ok
(historical)
 2002-05-15 21:35:43 +00:00
Damien Miller d7de14b6ad - [email protected] 2002/04/22 16:16:53 
[servconf.c sshd.8 sshd_config]
     do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@
 2002-04-23 21:04:51 +10:00
Damien Miller 7a8558d3ea - [email protected] 2002/04/21 16:19:27 
[sshd.8 sshd_config]
     document default AFSTokenPassing no; ok deraadt@
 2002-04-23 20:51:15 +10:00
Ben Lindstrom fa1336ff47 - [email protected] 2002/03/21 20:51:12 
[sshd_config]
     add privsep (off)
 2002-03-22 03:40:58 +00:00
Ben Lindstrom 351e919690 - (bal) Update sshd_config CVSID 2002-02-26 17:49:55 +00:00
Damien Miller 95ca7e9f1f - [email protected] 2002/02/19 02:50:59 
[sshd_config]
     stategy is not an english word
 2002-02-19 15:29:02 +11:00
Damien Miller 05eda437a6 - (djm) OpenBSD CVS Sync 
- [email protected] 2002/02/09 17:37:34
     [pathnames.h session.c ssh.1 sshd.8 sshd_config ssh-keyscan.1]
     move ssh config files to /etc/ssh
 - (djm) Adjust portable Makefile.in tnd ssh-rand-helper.c o match
 2002-02-10 18:32:28 +11:00
Damien Miller c5d8635d6a - [email protected] 2002/01/29 14:32:03 
[auth2.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c canohost.c servconf.c servconf.h session.c sshd.8 sshd_config]
     s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@
 2002-02-05 12:13:41 +11:00
Damien Miller 95c249ff47 - [email protected] 2002/01/27 14:57:46 
[channels.c servconf.c servconf.h session.c sshd.8 sshd_config]
     add X11UseLocalhost; ok markus@
 2002-02-05 12:11:34 +11:00
Tim Rice 1e2c600892 [configure.ac] fix logic on when ssh-rand-helper is installed. 
[sshd_config] put back in line that tells what PATH was compiled into sshd.
 2002-01-30 22:14:03 -08:00
Damien Miller 2bec5c1543 - [email protected] 2002/01/16 17:40:23 
[sshd_config]
     The stategy now used for options in the default sshd_config shipped
     with OpenSSH is to specify options with their default value where
     possible, but leave them commented.  Uncommented options change a
     default value.  Subsystem is currently the only default option
     changed.  ok markus@
 2002-01-22 23:32:07 +11:00
Damien Miller 9f0f5c64bc - [email protected] 2001/12/19 07:18:56 
[auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h]
     [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c]
     [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c]
     [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c]
     [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c]
     [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c]
     [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config]
     [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c]
     basic KNF done while i was looking for something else
 2001-12-21 14:45:46 +11:00
Ben Lindstrom 15da033b34 - [email protected] 2001/09/20 20:57:51 
[sshd_config]
     CheckMail removed.  OKed stevesk@
 2001-09-20 23:15:44 +00:00
Ben Lindstrom f96704d4ef - [email protected] 2001/06/22 21:55:49 
[auth2.c auth-rsa.c pathnames.h ssh.1 sshd.8 sshd_config
      ssh-keygen.1]
     merge authorized_keys2 into authorized_keys.
     authorized_keys2 is used for backward compat.
     (just append authorized_keys2 to authorized_keys).
 2001-06-25 04:17:12 +00:00
Ben Lindstrom c4b7225b8d - [email protected] 2001/05/31 13:08:04 
[sshd_config]
     group options and add some more comments
 2001-06-09 01:09:51 +00:00
Ben Lindstrom bfb3a0e973 - [email protected] 2001/05/20 17:20:36 
[auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8
      sshd_config]
     configurable authorized_keys{,2} location; originally from peter@;
     ok djm@
 2001-06-05 20:25:05 +00:00
Damien Miller f815442116 - (djm) Add new server configuration directive 'PAMAuthenticationViaKbdInt' 
(default: off), implies KbdInteractiveAuthentication. Suggestion from
   markus@
 2001-04-25 22:44:14 +10:00
Ben Lindstrom bdc2beb678 - (bal) CVS ID fix up and slight manpage fix from OpenBSD tree. 2001-04-16 02:11:52 +00:00
Ben Lindstrom 5eabda303a - [email protected] 2001/04/12 19:15:26 
[auth-rhosts.c auth.h auth2.c buffer.c canohost.c canohost.h
      compat.c compat.h hostfile.c pathnames.h readconf.c readconf.h
      servconf.c servconf.h ssh.c sshconnect.c sshconnect.h sshconnect1.c
      sshconnect2.c sshd_config]
     implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
     similar to RhostRSAAuthentication unless you enable (the experimental)
     HostbasedUsesNameFromPacketOnly option.  please test. :)
 2001-04-12 23:34:34 +00:00
Ben Lindstrom 7bfff36ca3 - [email protected] 2001/03/25 13:16:11 
[servconf.c servconf.h session.c sshd.8 sshd_config]
     PrintLastLog option; from [email protected] with some minor
     changes by me.  ok markus@
 2001-03-26 05:45:53 +00:00
Tim Rice 59ea0a0efd make sure $bindir is in USER_PATH so scp will work 2001-03-10 13:50:45 -08:00
Ben Lindstrom 4b00c8b40b - [email protected] 2001/02/24 10:37:26 
[sshd_config]
     ssh2 rsa key before dsa key
 2001-03-05 06:05:35 +00:00
Ben Lindstrom 531a445c3a - [email protected] 2001/02/22 18:09:06 
[sshd_config]
     activate RSA 2 key
 2001-03-05 05:17:18 +00:00
Damien Miller f85b4d7670 mode doc 2001-03-04 00:19:00 +11:00
Damien Miller 1d66c1602e - Document PAM ChallengeResponseAuthentication in sshd.8 
- Disable and comment ChallengeResponseAuthentication in sshd_config
 2001-03-04 00:16:20 +11:00
Ben Lindstrom e9d0444524 - [email protected] 2001/02/04 21:26:07 
[sshd_config]
     type: ok markus@
   - [email protected] 2001/02/06 22:07:50
     [sshd_config]
     enable sftp-server by default
 2001-02-10 23:26:35 +00:00
Damien Miller 3380426358 NB: big update - may break stuff. Please test! 
- (djm) OpenBSD CVS sync:
   - [email protected]  2001/02/03 03:08:38
     [auth-options.c auth-rh-rsa.c auth-rhosts.c auth.c canohost.c]
     [canohost.h servconf.c servconf.h session.c sshconnect1.c sshd.8]
     [sshd_config]
     make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@
   - [email protected]  2001/02/03 03:19:51
     [ssh.1 sshd.8 sshd_config]
     Skey is now called ChallengeResponse
   - [email protected]  2001/02/03 03:43:09
     [sshd.8]
     use no-pty option in .ssh/authorized_keys* if you need a 8-bit clean
     channel. note from [email protected] (pr/1659)
   - [email protected] 2001/02/03 10:03:06
     [ssh.1]
     typos; ok markus@
   - [email protected]     2001/02/04 04:11:56
     [scp.1 sftp-server.c ssh.1 sshd.8 sftp-client.c sftp-client.h]
     [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c]
     Basic interactive sftp client; ok theo@
 - (djm) Update RPM specs for new sftp binary
 - (djm) Update several bits for new optional reverse lookup stuff. I
   think I got them all.
 2001-02-04 23:20:18 +11:00
Ben Lindstrom 36579d3daa - [email protected] 2001/01/2001 
[atomicio.h canohost.h clientloop.h deattack.h dh.h dispatch.h
      groupaccess.c groupaccess.h hmac.h hostfile.h includes.h kex.h
      key.h log.h login.h match.h misc.h myproposal.h nchan.ms pathnames.h
      radix.h readpass.h rijndael.h serverloop.h session.h sftp.h ssh-add.1
      ssh-dss.h ssh-keygen.1 ssh-keyscan.1 ssh-rsa.h ssh1.h ssh_config
      sshconnect.h sshd_config tildexpand.h uidswap.h uuencode.h]
     $OpenBSD$
 2001-01-29 07:39:26 +00:00
Kevin Steves 8ee4f69560 - (stevesk) sshd_config: sync 2001-01-09 15:28:46 +00:00
Ben Lindstrom 48bd7c118a - (bal) OpenBSD Sync 
- [email protected] 2001/01/08 22:29:05
     [auth2.c compat.c compat.h servconf.c servconf.h sshd.8
      sshd_config version.h]
     implement option 'Banner /etc/issue.net' for ssh2, move version to
     2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
     is enabled).
   - [email protected] 2001/01/08 22:03:23
     [channels.c ssh-keyscan.c]
     O_NDELAY -> O_NONBLOCK; thanks [email protected]
   - [email protected] 2001/01/08 21:55:41
     [sshconnect1.c]
     more cleanups and fixes from [email protected]:
     1) try_agent_authentication() for loop will overwrite key just
        allocated with key_new(); don't alloc
     2) call ssh_close_authentication_connection() before exit
        try_agent_authentication()
     3) free mem on bad passphrase in try_rsa_authentication()
   - [email protected] 2001/01/08 21:48:17
     [kex.c]
     missing free; thanks [email protected]
 2001-01-09 00:35:42 +00:00
Damien Miller 6dbfef6355 - (djm) Add Redhat RPM patch for AUTHPRIV SyslogFacility 2000-11-29 13:51:06 +11:00
Damien Miller 0bc1bd814e - (djm) Merge OpenBSD changes: 
- [email protected]  2000/11/06 16:04:56
     [channels.c channels.h clientloop.c nchan.c serverloop.c]
     [session.c ssh.c]
     agent forwarding and -R for ssh2, based on work from
     [email protected]
   - [email protected]  2000/11/06 16:13:27
     [ssh.c sshconnect.c sshd.c]
     do not disabled rhosts(rsa) if server port > 1024; from
     [email protected]
   - [email protected]  2000/11/06 16:16:35
     [sshconnect.c]
     downgrade client to 1.3 if server is 1.4; help from [email protected]
   - [email protected]  2000/11/09 18:04:40
     [auth1.c]
     typo; from [email protected]
   - [email protected]  2000/11/12 12:03:28
     [ssh-agent.c]
     off-by-one when removing a key from the agent
   - [email protected]  2000/11/12 12:50:39
     [auth-rh-rsa.c auth2.c authfd.c authfd.h]
     [authfile.c hostfile.c kex.c kex.h key.c key.h myproposal.h]
     [readconf.c readconf.h rsa.c rsa.h servconf.c servconf.h ssh-add.c]
     [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config]
     [sshconnect1.c sshconnect2.c sshd.8 sshd.c sshd_config ssh-dss.c]
     [ssh-dss.h ssh-rsa.c ssh-rsa.h dsa.c dsa.h]
     add support for RSA to SSH2.  please test.
     there are now 3 types of keys: RSA1 is used by ssh-1 only,
     RSA and DSA are used by SSH2.
     you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
     keys for SSH2 and use the RSA keys for hostkeys or for user keys.
     SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.
 - (djm) Fix up Makefile and Redhat init script to create RSA host keys
 - (djm) Change to interim version
 2000-11-13 22:57:25 +11:00
Damien Miller 874d77bb13 - (djm) Big OpenBSD sync: 
- [email protected]  2000/09/30 10:27:44
     [log.c]
     allow loglevel debug
   - [email protected]  2000/10/03 11:59:57
     [packet.c]
     hmac->mac
   - [email protected]  2000/10/03 12:03:03
     [auth-krb4.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth1.c]
     move fake-auth from auth1.c to individual auth methods, disables s/key in
     debug-msg
   - [email protected]  2000/10/03 12:16:48
     ssh.c
     do not resolve canonname, i have no idea why this was added oin ossh
   - [email protected]  2000/10/09 15:30:44
     ssh-keygen.1 ssh-keygen.c
     -X now reads private ssh.com DSA keys, too.
   - [email protected]  2000/10/09 15:32:34
     auth-options.c
     clear options on every call.
   - [email protected]  2000/10/09 15:51:00
     authfd.c authfd.h
     interop with ssh-agent2, from <[email protected]>
   - [email protected]  2000/10/10 14:20:45
     compat.c
     use rexexp for version string matching
   - [email protected]  2000/10/10 22:02:18
     [kex.c kex.h myproposal.h ssh.h ssh2.h sshconnect2.c sshd.c dh.c dh.h]
     First rough implementation of the diffie-hellman group exchange.  The
     client can ask the server for bigger groups to perform the diffie-hellman
     in, thus increasing the attack complexity when using ciphers with longer
     keys.  University of Windsor provided network, T the company.
   - [email protected]  2000/10/11 13:59:52
     [auth-rsa.c auth2.c]
     clear auth options unless auth sucessfull
   - [email protected]  2000/10/11 14:00:27
     [auth-options.h]
     clear auth options unless auth sucessfull
   - [email protected]  2000/10/11 14:03:27
     [scp.1 scp.c]
     support 'scp -o' with help from [email protected]
   - [email protected]  2000/10/11 14:11:35
     [dh.c]
     Wall
   - [email protected]  2000/10/11 14:14:40
     [auth.h auth2.c readconf.c readconf.h readpass.c servconf.c servconf.h]
     [ssh.h sshconnect2.c sshd_config auth2-skey.c cli.c cli.h]
     add support for s/key (kbd-interactive) to ssh2, based on work by
     [email protected] and me
   - [email protected]  2000/10/11 14:27:24
     [auth.c auth1.c auth2.c authfile.c cipher.c cipher.h kex.c kex.h]
     [myproposal.h packet.c readconf.c session.c ssh.c ssh.h sshconnect1.c]
     [sshconnect2.c sshd.c]
     new cipher framework
   - [email protected]  2000/10/11 14:45:21
     [cipher.c]
     remove DES
   - [email protected]  2000/10/12 03:59:20
     [cipher.c cipher.h sshconnect1.c sshconnect2.c sshd.c]
     enable DES in SSH-1 clients only
   - [email protected]  2000/10/12 08:21:13
     [kex.h packet.c]
     remove unused
   - [email protected]  2000/10/13 12:34:46
     [sshd.c]
     Kludge for F-Secure Macintosh < 1.0.2; [email protected]
   - [email protected]  2000/10/13 12:59:15
     [cipher.c cipher.h myproposal.h  rijndael.c rijndael.h]
     rijndael/aes support
   - [email protected]  2000/10/13 13:10:54
     [sshd.8]
     more info about -V
   - [email protected]  2000/10/13 13:12:02
     [myproposal.h]
     prefer no compression
 2000-10-14 16:23:11 +11:00
Damien Miller 7b28dc5eb0 20000905 
- (djm) Import OpenBSD CVS changes
   - [email protected]  2000/08/31 15:52:24
     [Makefile sshd.8 sshd_config sftp-server.8 sftp-server.c]
     implement a SFTP server. interops with sftp2, scp2 and the windows
     client from ssh.com
   - [email protected]  2000/08/31 15:56:03
     [README.openssh2]
     sync
   - [email protected]  2000/08/31 16:05:42
     [session.c]
     Wall
   - [email protected]  2000/08/31 16:09:34
     [authfd.c ssh-agent.c]
     add a flag to SSH2_AGENTC_SIGN_REQUEST for future extensions
   - [email protected] 2000/09/01 09:25:13
     [scp.1 scp.c]
     cleanup and fix -S support; [email protected]
   - [email protected]  2000/09/01 16:29:32
     [sftp-server.c]
     portability fixes
   - [email protected]  2000/09/01 16:32:41
     [sftp-server.c]
     fix cast; [email protected]
   - [email protected]  2000/09/03 09:23:28
     [ssh-add.1 ssh.1]
     add missing .El against .Bl.
   - [email protected]  2000/09/04 13:03:41
     [session.c]
     missing close; ok theo
   - [email protected]  2000/09/04 13:07:21
     [session.c]
     fix get_last_login_time order; from [email protected]
   - [email protected]  2000/09/04 13:10:09
     [sftp-server.c]
     more cast fixes; from [email protected]
   - [email protected]  2000/09/04 13:06:04
     [session.c]
     set SSH_ORIGINAL_COMMAND; from [email protected], [email protected]
 - (djm) Cleanup after import. Fix sftp-server compilation, Makefile
 2000-09-05 13:34:53 +11:00
Damien Miller c30d35ce32 - (djm) Periodically rekey arc4random 
- (djm) Clean up diff against OpenBSD.
 2000-08-30 09:40:09 +11:00
Damien Miller 942da039d2 - (djm) OpenBSD CVS changes: 
- [email protected]  2000/07/22 03:14:37
     [servconf.c servconf.h sshd.8 sshd.c sshd_config]
     random early drop; ok theo, niels
   - [email protected] 2000/07/26 11:46:51
     [ssh.1]
     typo
   - [email protected] 2000/08/01 11:46:11
     [sshd.8]
     many fixes from [email protected]
   - [email protected]  2000/08/01 13:01:42
     [Makefile.in util.c aux.c]
     rename aux.c to util.c to help with cygwin port
   - [email protected] 2000/08/02 00:23:31
     [authfd.c]
     correct sun_len; [email protected]
   - [email protected]  2000/08/02 10:27:17
     [readconf.c sshd.8]
     disable kerberos authentication by default
   - [email protected]  2000/08/02 11:27:05
     [sshd.8 readconf.c auth-krb4.c]
     disallow kerberos authentication if we can't verify the TGT; from
     dugsong@
     kerberos authentication is on by default only if you have a srvtab.
   - [email protected]  2000/08/04 14:30:07
     [auth.c]
     unused
   - [email protected]  2000/08/04 14:30:35
     [sshd_config]
     MaxStartups
   - [email protected]  2000/08/15 13:20:46
     [authfd.c]
     cleanup; ok niels@
   - [email protected]  2000/08/17 14:05:10
     [session.c]
     cleanup login(1)-like jobs, no duplicate utmp entries
   - [email protected]  2000/08/17 14:06:34
     [session.c sshd.8 sshd.c]
      sshd -u len, similar to telnetd
 2000-08-18 13:59:06 +10:00
Damien Miller f6d9e22189 - OpenBSD CVS updates: 
- [email protected] 2000/06/17 09:58:46
     [channels.c]
     everyone says "nix it" (remove protocol 2 debugging message)
   - [email protected]  2000/06/17 13:24:34
     [sshconnect.c]
     allow extended server banners
   - [email protected]  2000/06/17 14:30:10
     [sshconnect.c]
     missing atomicio, typo
   - [email protected]   2000/06/17 16:52:34
     [servconf.c servconf.h session.c sshd.8 sshd_config]
     add support for ssh v2 subsystems. ok markus@.
   - [email protected] 2000/06/17 18:57:48
     [readconf.c servconf.c]
     include = in WHITESPACE; markus ok
   - [email protected]  2000/06/17 19:09:10
     [auth2.c]
     implement bug compatibility with ssh-2.0.13 pubkey, server side
   - [email protected]  2000/06/17 21:00:28
     [compat.c]
     initial support for ssh.com's 2.2.0
   - [email protected]  2000/06/17 21:16:09
     [scp.c]
     typo
   - [email protected]  2000/06/17 22:05:02
     [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
     split auth-rsa option parsing into auth-options
     add options support to authorized_keys2
   - [email protected]  2000/06/17 22:42:54
     [session.c]
     typo
 2000-06-18 14:50:44 +10:00
Damien Miller 8bb73be04e - OpenBSD CVS updates 
[channels.c]
   - fix pr 1196, listen_port and port_to_connect interchanged
   [scp.c]
   - after completion, replace the progress bar ETA counter with a final
     elapsed time; my idea, aaron wrote the patch
   [ssh_config sshd_config]
   - show 'Protocol' as an example, ok markus@
   [sshd.c]
   - missing xfree()
 - Add missing header to bsd-misc.c
 2000-04-19 16:26:12 +10:00
Damien Miller 886c63a2c5 - Big manpage and config file cleanup from Andre Lucas 
<[email protected]>
   - Re-added latest (unmodified) OpenBSD manpages
 2000-01-20 23:13:36 +11:00
Damien Miller c0d7390398 - Automatically correct paths in manpages and configuration files. Patch 
and script from Andre Lucas <[email protected]>
 - Removed credits from README to CREDITS file, updated.
 1999-12-27 09:23:58 +11:00
Damien Miller 192bd0120a - Tidied default config file some more 
- Revised Redhat initscript to fix bug: sshd (re)start would fail
   if executed from inside a ssh login.
 1999-11-13 23:56:35 +11:00
Damien Miller d355f2e9e9 Removed obselete logging directive 1999-11-12 12:17:52 +11:00