Commit Graph
88 Commits
Author SHA1 Message Date
Ben Lindstrom 92a2e38f8e - [email protected] 2001/03/02 18:54:31
[atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h
      scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c
      ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8]
     make copyright lines the same format
2001-03-05 06:59:27 +00:00
Damien Miller c594633b49 - (djm) Fully revert PAM session patch. All PAM session init is now done
before the final fork().
2001-02-28 11:46:11 +11:00
Damien Miller 7bd1c6262b - (djm) Fix PAM fix 2001-02-27 10:48:01 +11:00
Damien Miller 5a7613186b - (djm) Move PAM init to after fork for non-Solaris derived PAMs 2001-02-27 09:28:23 +11:00
Ben Lindstrom 7603b2d244 - [email protected] 2001/02/23 15:37:45
[session.c]
     handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
2001-02-26 20:13:32 +00:00
Ben Lindstrom 38e60935bb - (bal) Generalize lack of UNIX sockets since this also effects Cray
not just Cygwin.  Based on patch by Wendy Palm <[email protected]>
2001-02-24 00:55:04 +00:00
Ben Lindstrom e1bd29bc9e - (bal) Corrected SCO luid patch by svaughan <[email protected]> 2001-02-21 20:00:28 +00:00
Kevin Steves ff793a27b8 - (stevesk) session.c: back out to where we were before:
- (djm) Move PAM session initialisation until after fork in sshd. Patch
      from Nalin Dahyabhai <[email protected]>
2001-02-21 16:36:51 +00:00
Ben Lindstrom 94bce40720 - (bal) Reverted out of 2001/02/15 patch by djm below because it
breaks Solaris.
        - (djm) Move PAM session setup back to before setuid to user.
          fixes problems on Solaris-drived PAMs.
2001-02-21 05:53:33 +00:00
Ben Lindstrom d95c09cc83 - (bal) Markus' blessing to rename login.[ch] -> sshlogin.[ch] and
pty.[ch] -> sshpty.[ch]
2001-02-18 19:13:33 +00:00
Damien Miller 60396b060b - (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzie
enable with --with-bsd-auth.
2001-02-18 17:01:00 +11:00
Ben Lindstrom 8dcdeb8421 - [email protected] 2001/02/16 14:03:43
[session.c]
     proper payload-length check for x11 w/o screen-number
2001-02-16 16:02:14 +00:00
Damien Miller 217f567187 - (djm) Set "login ID" on systems with setluid. Only enabled for SCO
OpenServer for now. Based on patch from svaughan <[email protected]>
2001-02-16 12:12:41 +11:00
Damien Miller 646aa60b41 - (djm) Clean up PAM namespace. Suggested by Darren Moffat
<[email protected]>
2001-02-15 11:51:32 +11:00
Damien Miller e8b5b04521 - (djm) Move PAM session setup back to before setuid to user. Fixes
problems on Solaris-derived PAMs.
2001-02-15 11:32:15 +11:00
Kevin Steves 7fafa5ccbe - (stevesk) fix for SIA patch, misplaced session_setup_sia() 2001-02-13 18:45:00 +00:00
Damien Miller 92ddb7d6f0 - (djm) Split out and improve OSF SIA auth code. Patch from Chris Adams
<[email protected]> with a little modification and KNF.
2001-02-14 01:25:23 +11:00
Damien Miller 6b4146ad73 - (djm) Move PAM session initialisation until after fork in sshd. Patch
from Nalin Dahyabhai <[email protected]>
2001-02-14 00:45:51 +11:00
Kevin Steves 7f982bf6c9 - (stevesk) session.c: remove debugging code. 2001-02-12 15:07:52 +00:00
Kevin Steves 43cdef3ba5 missed session.c part of:
- [email protected] 2001/02/08 10:11:23
     [session.c sftp-client.c]
     %i -> %d
2001-02-11 14:12:08 +00:00
Ben Lindstrom 31ca54aa86 - [email protected] 2001/02/08 19:30:52
sync with netbsd tree changes.
     - more strict prototypes, include necessary headers
     - use paths.h/pathnames.h decls
     - size_t typecase to int -> u_long
2001-02-09 02:11:24 +00:00
Kevin Steves ef4eea9bad - [email protected] 2001/02/04 08:32:27
[many files; did this manually to our top-level source dir]
     unexpand and remove end-of-line whitespace; ok markus@
2001-02-05 12:42:17 +00:00
Damien Miller 3380426358 NB: big update - may break stuff. Please test!
- (djm) OpenBSD CVS sync:
   - [email protected]  2001/02/03 03:08:38
     [auth-options.c auth-rh-rsa.c auth-rhosts.c auth.c canohost.c]
     [canohost.h servconf.c servconf.h session.c sshconnect1.c sshd.8]
     [sshd_config]
     make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@
   - [email protected]  2001/02/03 03:19:51
     [ssh.1 sshd.8 sshd_config]
     Skey is now called ChallengeResponse
   - [email protected]  2001/02/03 03:43:09
     [sshd.8]
     use no-pty option in .ssh/authorized_keys* if you need a 8-bit clean
     channel. note from [email protected] (pr/1659)
   - [email protected] 2001/02/03 10:03:06
     [ssh.1]
     typos; ok markus@
   - [email protected]     2001/02/04 04:11:56
     [scp.1 sftp-server.c ssh.1 sshd.8 sftp-client.c sftp-client.h]
     [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c]
     Basic interactive sftp client; ok theo@
 - (djm) Update RPM specs for new sftp binary
 - (djm) Update several bits for new optional reverse lookup stuff. I
   think I got them all.
2001-02-04 23:20:18 +11:00
Ben Lindstrom 226cfa0378 Hopefully things did not get mixed around too much. It compiles under
Linux and works.  So that is at least a good sign. =)
20010122
 - (bal) OpenBSD Resync
   - [email protected] 2001/01/19 12:45:26 GMT 2001 by markus
     [servconf.c ssh.h sshd.c]
     only auth-chall.c needs #ifdef SKEY
   - [email protected] 2001/01/19 15:55:10 GMT 2001 by markus
     [auth-krb4.c auth-options.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
      auth1.c auth2.c channels.c clientloop.c dh.c dispatch.c nchan.c
      packet.c pathname.h readconf.c scp.c servconf.c serverloop.c
      session.c ssh-add.c ssh-keygen.c ssh-keyscan.c ssh.c ssh.h
      ssh1.h sshconnect1.c sshd.c ttymodes.c]
     move ssh1 definitions to ssh1.h, pathnames to pathnames.h
   - [email protected] 2001/01/19 16:48:14
     [sshd.8]
     fix typo; from stevesk@
   - [email protected] 2001/01/19 16:50:58
     [ssh-dss.c]
     clear and free digest, make consistent with other code (use dlen); from
     stevesk@
   - [email protected] 2001/01/20 15:55:20 GMT 2001 by markus
     [auth-options.c auth-options.h auth-rsa.c auth2.c]
     pass the filename to auth_parse_options()
   - [email protected] 2001/01/20 17:59:40 GMT 2001
     [readconf.c]
     fix SIGSEGV from -o ""; problem noted by [email protected]
   - [email protected] 2001/01/20 18:20:29
     [sshconnect2.c]
     dh_new_group() does not return NULL.  ok markus@
   - [email protected] 2001/01/20 21:33:42
     [ssh-add.c]
     do not loop forever if askpass does not exist; from
     [email protected]
   - [email protected] 2001/01/20 23:00:56
     [servconf.c]
     Check for NULL return from strdelim; ok markus
   - [email protected] 2001/01/20 23:02:07
     [readconf.c]
     KNF; ok markus
   - [email protected] 2001/01/21 9:00:33
     [ssh-keygen.1]
     remove -R flag; ok markus@
   - [email protected] 2001/01/21 19:05:40
     [atomicio.c automicio.h auth-chall.c auth-krb4.c auth-options.c
      auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c
      auth.c auth.h auth1.c auth2-chall.c auth2.c authfd.c authfile.c
      bufaux.c  bufaux.h buffer.c canahost.c canahost.h channels.c
      cipher.c cli.c clientloop.c clientloop.h compat.c compress.c
      deattack.c dh.c dispatch.c groupaccess.c hmac.c hostfile.c kex.c
      key.c key.h log-client.c log-server.c log.c log.h login.c login.h
      match.c misc.c misc.h nchan.c packet.c pty.c radix.h readconf.c
      readpass.c readpass.h rsa.c scp.c servconf.c serverloop.c serverloop.h
      session.c sftp-server.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c
      ssh-keyscan.c ssh-rsa.c ssh.c ssh.h sshconnect.c sshconnect.h
      sshconnect1.c sshconnect2.c sshd.c tildexpand.c tildexpand.h
      ttysmodes.c uidswap.c xmalloc.c]
     split ssh.h and try to cleanup the #include mess. remove unnecessary
     #includes.  rename util.[ch] -> misc.[ch]
 - (bal) renamed 'PIDDIR' to '_PATH_SSH_PIDDIR' to match OpenBSD tree
 - (bal) Moved #ifdef KRB4 in auth-krb4.c above the #include to resolve
   conflict when compiling for non-kerb install
 - (bal) removed the #ifdef SKEY in auth1.c to match Markus' changes
   on 1/19.
2001-01-22 05:34:40 +00:00
Ben Lindstrom b100ec9542 - (bal) Updated contrib/cygwin/ by Corinna Vinschen <[email protected]>
Also removed some of the 'ISSUES' comments that have been verified by djm.
2001-01-19 05:37:32 +00:00
Ben Lindstrom db65e8fded Please grep through the source and look for 'ISSUE' comments and verify
that I was able to get all the portable bits in the right location.  As for
the SKEY comment there is an email out to Markus as to how it should be
resolved.  Until then I just #ifdef SKEY/#endif out the whole block.

 - (bal) OpenBSD Resync
   - [email protected] 2001/01/18 16:20:21
     [log-client.c log-server.c log.c readconf.c servconf.c ssh.1 ssh.h
      sshd.8 sshd.c]
     log() is at pri=LOG_INFO, since LOG_NOTICE goes to /dev/console on many
     systems
   - [email protected] 2001/01/18 16:59:59
     [auth-passwd.c auth.c auth.h auth1.c auth2.c serverloop.c session.c
      session.h sshconnect1.c]
     1) removes fake skey from sshd, since this will be much
        harder with /usr/libexec/auth/login_XXX
     2) share/unify code used in ssh-1 and ssh-2 authentication (server side)
     3) make addition of BSD_AUTH and other challenge reponse methods
        easier.
   - [email protected] 2001/01/18 17:12:43
     [auth-chall.c auth2-chall.c]
     rename *-skey.c *-chall.c since the files are not skey specific
2001-01-19 04:26:52 +00:00
Ben Lindstrom bf555ba621 NOTE: This update changes the RSA key generation. *NEW RSA KEYS
NEED TO BE GENERATED*  =)  Refer to to entry "2001/01/16 19:20:06"
      for more details.

20010118
 - (bal) Super Sized OpenBSD Resync
   - [email protected] 2001/01/11 22:14:20 GMT 2001 by markus
     [sshd.c]
     maxfd+1
   - [email protected] 2001/01/13 17:59:18
     [ssh-keygen.1]
     small ssh-keygen manpage cleanup; [email protected]
   - [email protected] 2001/01/13 18:03:07
     [scp.c ssh-keygen.c sshd.c]
     getopt() returns -1 not EOF; [email protected]
   - [email protected] 2001/01/13 18:06:54
     [ssh-keyscan.c]
     use SSH_DEFAULT_PORT; from [email protected]
   - [email protected] 2001/01/13 18:12:47
     [ssh-keyscan.c]
     free() -> xfree(); fix memory leak; from [email protected]
   - [email protected] 2001/01/13 18:14:13
     [ssh-add.c]
     typo, from [email protected]
   - [email protected] 2001/01/13 18:32:50
     [packet.c session.c ssh.c sshconnect.c sshd.c]
     split out keepalive from packet_interactive (from [email protected])
     set IPTOS_LOWDELAY TCP_NODELAY IPTOS_THROUGHPUT for ssh2, too.
   - [email protected] 2001/01/13 18:36:45
     [packet.c packet.h]
     reorder, typo
   - [email protected] 2001/01/13 18:38:00
     [auth-options.c]
     fix comment
   - [email protected] 2001/01/13 18:43:31
     [session.c]
     Wall
   - [email protected] 2001/01/13 19:14:08
     [clientloop.h clientloop.c ssh.c]
     move callback to headerfile
   - [email protected] 2001/01/15 21:40:10
     [ssh.c]
     use log() instead of stderr
   - [email protected] 2001/01/15 21:43:51
     [dh.c]
     use error() not stderr!
   - [email protected] 2001/01/15 21:45:29
     [sftp-server.c]
     rename must fail if newpath exists, debug off by default
   - [email protected] 2001/01/15 21:46:38
     [sftp-server.c]
     readable long listing for sftp-server, ok deraadt@
   - [email protected] 2001/01/16 19:20:06
     [key.c ssh-rsa.c]
     make "ssh-rsa" key format for ssh2 confirm to the ietf-drafts; from
     [email protected].  note that you have to delete older ssh2-rsa keys,
     since they are in the wrong format, too. they must be removed from
     .ssh/authorized_keys2 and .ssh/known_hosts2, etc.
     (cd; grep -v ssh-rsa .ssh/authorized_keys2 > TMP && mv TMP
     .ssh/authorized_keys2) additionally, we now check that
     BN_num_bits(rsa->n) >= 768.
   - [email protected] 2001/01/16 20:54:27
     [sftp-server.c]
     remove some statics. simpler handles; idea from [email protected]
   - [email protected] 2001/01/16 23:58:08
     [bufaux.c radix.c sshconnect.h sshconnect1.c]
     indent
 - (bal) Added bsd-strmode.[ch] since some non-OpenBSD platforms may
   be missing such feature.
2001-01-18 02:04:35 +00:00
Ben Lindstrom d26dcf3371 20010107
- (bal) OpenBSD Sync
   - [email protected] 2001/01/06 11:23:27
     [ssh-rsa.c]
     remove unused
   - [email protected] 2001/01/05 08:23:29
     [ssh-keyscan.1]
     missing .El
   - [email protected] 2001/01/04 22:41:03
     [session.c sshconnect.c]
     consistent use of _PATH_BSHELL; from [email protected]
   - [email protected] 2001/01/04 22:35:32
     [ssh.1 sshd.8]
     Mention AES as available SSH2 Cipher; ok markus
   - [email protected] 2001/01/04 22:25:58
     [sshd.c]
     sync usage()/man with defaults; from [email protected]
   - [email protected] 2001/01/04 22:21:26
     [sshconnect2.c]
     handle SSH2_MSG_USERAUTH_BANNER; fixes bug when connecting to a server
     that prints a banner (e.g. /etc/issue.net)
2001-01-06 15:18:16 +00:00
Ben Lindstrom 46c162204b One way to massive patch. <sigh> It compiles and works under Linux..
And I think I have all the bits right from the OpenBSD tree.
20001222
 - Updated RCSID for pty.c
 - (bal) OpenBSD CVS Updates:
  - [email protected] 2000/12/21 15:10:16
    [auth-rh-rsa.c hostfile.c hostfile.h sshconnect.c]
    print keyfile:line for changed hostkeys, for deraadt@, ok deraadt@
  - [email protected] 2000/12/20 19:26:56
    [authfile.c]
    allow ssh -i userkey for root
  - [email protected] 2000/12/20 19:37:21
    [authfd.c authfd.h kex.c sshconnect2.c sshd.c uidswap.c uidswap.h]
    fix prototypes; from [email protected]
  - [email protected] 2000/12/20 19:32:08
    [sshd.c]
    init pointer to NULL; report from [email protected]
  - [email protected] 2000/12/19 23:17:54
    [auth-krb4.c auth-options.c auth-options.h auth-rhosts.c auth-rsa.c
     auth1.c auth2-skey.c auth2.c authfd.c authfd.h authfile.c bufaux.c
     bufaux.h buffer.c canohost.c channels.c clientloop.c compress.c
     crc32.c deattack.c getput.h hmac.c hmac.h hostfile.c kex.c kex.h
     key.c key.h log.c login.c match.c match.h mpaux.c mpaux.h packet.c
     packet.h radix.c readconf.c rsa.c scp.c servconf.c servconf.h
     serverloop.c session.c sftp-server.c ssh-agent.c ssh-dss.c ssh-dss.h
     ssh-keygen.c ssh-keyscan.c ssh-rsa.c ssh-rsa.h ssh.c ssh.h  uuencode.c
     uuencode.h sshconnect1.c sshconnect2.c sshd.c tildexpand.c]
    replace 'unsigned bla' with 'u_bla' everywhere. also replace 'char
    unsigned' with u_char.
2000-12-22 01:43:59 +00:00
Damien Miller 152cea206a - (djm) Make sure we reset the SIGPIPE disposition after we fork. Report
from Andreas M. Kirchwitz <[email protected]>
2000-12-13 19:21:51 +11:00
Damien Miller 43dc8da75c - (djm) Back out all the serverloop.c hacks. sshd will now hang again
if there are background children with open fds.
2000-11-29 15:55:17 +11:00
Damien Miller a2e53ccb64 - (djm) Fix(?) the ssh hang-on-logout/data-from-child race 2000-11-29 11:26:45 +11:00
Ben Lindstrom 1492029371 20001123
- (bal) Merge OpenBSD changes:
   - [email protected]  2000/11/15 22:31:36
     [auth-options.c]
     case insensitive key options; from [email protected]
   - [email protected]  2000/11/16 17:55:43
     [dh.c]
     do not use perror() in sshd, after child is forked()
   - [email protected]  2000/11/14 23:42:40
     [auth-rsa.c]
     parse option only if key matches; fix some confusing seen by the client
   - [email protected]  2000/11/14 23:44:19
     [session.c]
     check no_agent_forward_flag for ssh-2, too
   - [email protected]  2000/11/15
     [ssh-agent.1]
     reorder SYNOPSIS; typo, use .It
   - [email protected]  2000/11/14 23:48:55
     [ssh-agent.c]
     do not reorder keys if a key is removed
   - [email protected]  2000/11/15 19:58:08
     [ssh.c]
     just ignore non existing user keys
   - [email protected]  200/11/15 20:24:43
     [ssh-keygen.c]
     Add missing \n at end of error message.
2000-11-21 21:24:55 +00:00
Ben Lindstrom 49a79c0976 - (stevek) Reworked progname support.
- (bal) Misplaced #include "includes.h" in bsd-setproctitle.c.  Patch by
   Shinichi Maruyama <[email protected]>

I assume the progname patch was finished.  I believe stevek is on vacation,
but it passes compiling under Linux and NeXTStep.
2000-11-17 03:47:20 +00:00
Damien Miller 0bc1bd814e - (djm) Merge OpenBSD changes:
- [email protected]  2000/11/06 16:04:56
     [channels.c channels.h clientloop.c nchan.c serverloop.c]
     [session.c ssh.c]
     agent forwarding and -R for ssh2, based on work from
     [email protected]
   - [email protected]  2000/11/06 16:13:27
     [ssh.c sshconnect.c sshd.c]
     do not disabled rhosts(rsa) if server port > 1024; from
     [email protected]
   - [email protected]  2000/11/06 16:16:35
     [sshconnect.c]
     downgrade client to 1.3 if server is 1.4; help from [email protected]
   - [email protected]  2000/11/09 18:04:40
     [auth1.c]
     typo; from [email protected]
   - [email protected]  2000/11/12 12:03:28
     [ssh-agent.c]
     off-by-one when removing a key from the agent
   - [email protected]  2000/11/12 12:50:39
     [auth-rh-rsa.c auth2.c authfd.c authfd.h]
     [authfile.c hostfile.c kex.c kex.h key.c key.h myproposal.h]
     [readconf.c readconf.h rsa.c rsa.h servconf.c servconf.h ssh-add.c]
     [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config]
     [sshconnect1.c sshconnect2.c sshd.8 sshd.c sshd_config ssh-dss.c]
     [ssh-dss.h ssh-rsa.c ssh-rsa.h dsa.c dsa.h]
     add support for RSA to SSH2.  please test.
     there are now 3 types of keys: RSA1 is used by ssh-1 only,
     RSA and DSA are used by SSH2.
     you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
     keys for SSH2 and use the RSA keys for hostkeys or for user keys.
     SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.
 - (djm) Fix up Makefile and Redhat init script to create RSA host keys
 - (djm) Change to interim version
2000-11-13 22:57:25 +11:00
Ben Lindstrom 980754ce49 20001112
- (bal) SCO Patch to add needed libraries for configure.in.  Patch by
   Phillips Porch <[email protected]>
 - (bal) IRIX patch to adding Job Limits.  Patch by Denis Parker <[email protected]>
2000-11-12 00:04:24 +00:00
Damien Miller 69b69aa50d - (djm) Sync with OpenBSD:
- [email protected]  2000/10/16 15:46:32
     [ssh.1]
     fixes from [email protected]
   - [email protected]  2000/10/17 14:28:11
     [atomicio.c]
     return number of characters processed; ok deraadt@
   - [email protected]  2000/10/18 12:04:02
     [atomicio.c]
     undo
   - [email protected]  2000/10/18 12:23:02
     [scp.c]
     replace atomicio(read,...) with read(); ok deraadt@
   - [email protected]  2000/10/18 12:42:00
     [session.c]
     restore old record login behaviour
   - [email protected] 2000/10/19 10:41:13
     [auth-skey.c]
     fmt string problem in unused code
   - [email protected]  2000/10/19 10:45:16
     [sshconnect2.c]
     don't reference freed memory. okay deraadt@
   - [email protected]  2000/10/21 11:04:23
     [canohost.c]
     typo, [email protected]; ok niels@
   - [email protected]  2000/10/23 13:31:55
     [cipher.c]
     non-alignment dependent swap_bytes(); from
     [email protected]/netbsd
   - [email protected]  2000/10/26 12:38:28
     [compat.c]
     add older vandyke products
   - [email protected]  2000/10/27 01:32:19
     [channels.c channels.h clientloop.c serverloop.c session.c]
     [ssh.c util.c]
     enable non-blocking IO on channels, and tty's (except for the
     client ttys).
   - [email protected]  2000/10/27 01:48:22
     channels.c channels.h clientloop.c
     deny agent/x11 forwarding unless requested; thanks to [email protected]
2000-10-28 14:19:58 +11:00
Damien Miller 50a41ed079 - (djm) Sync with OpenBSD:
- [email protected]  2000/10/14 04:01:15
     [cipher.c]
     debug3
   - [email protected]  2000/10/14 04:07:23
     [scp.c]
     remove spaces from arguments; from [email protected]
   - [email protected]  2000/10/14 06:09:46
     [ssh.1]
     Cipher is for SSH-1 only
   - [email protected]  2000/10/14 06:12:09
     [servconf.c servconf.h serverloop.c session.c sshd.8]
     AllowTcpForwarding; from naddy@
   - [email protected]  2000/10/14 06:16:56
     [auth2.c compat.c compat.h sshconnect2.c version.h]
     OpenSSH_2.3; note that is is not complete, but the version number
     needs to be changed for interoperability reasons
   - [email protected]  2000/10/14 06:19:45
     [auth-rsa.c]
     do not send RSA challenge if key is not allowed by key-options; from
     [email protected]
   - [email protected]  2000/10/15 08:14:01
     [rijndael.c session.c]
     typos; from [email protected]
   - [email protected]  2000/10/15 08:18:31
     [rijndael.c]
     typo
 - Copy manpages back over from OpenBSD - too tedious to wade through diffs
2000-10-16 12:14:42 +11:00
Damien Miller 5993935f76 - (djm) Fix ssh2 hang on background processes at logout. 2000-10-15 12:21:32 +11:00
Kevin Steves c368a3c939 comparing against buf and not hostname; openbsd tree has this
problem also.
2000-10-14 16:10:06 +00:00
Kevin Steves 8d3ebb418a get_last_login_time() called twice. 2000-10-14 15:31:35 +00:00
Kevin Steves 092f2effc5 - (stevesk) ~/.hushlogin shouldn't cause required password change to
be bypassed.
2000-10-14 13:36:13 +00:00
Damien Miller 874d77bb13 - (djm) Big OpenBSD sync:
- [email protected]  2000/09/30 10:27:44
     [log.c]
     allow loglevel debug
   - [email protected]  2000/10/03 11:59:57
     [packet.c]
     hmac->mac
   - [email protected]  2000/10/03 12:03:03
     [auth-krb4.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth1.c]
     move fake-auth from auth1.c to individual auth methods, disables s/key in
     debug-msg
   - [email protected]  2000/10/03 12:16:48
     ssh.c
     do not resolve canonname, i have no idea why this was added oin ossh
   - [email protected]  2000/10/09 15:30:44
     ssh-keygen.1 ssh-keygen.c
     -X now reads private ssh.com DSA keys, too.
   - [email protected]  2000/10/09 15:32:34
     auth-options.c
     clear options on every call.
   - [email protected]  2000/10/09 15:51:00
     authfd.c authfd.h
     interop with ssh-agent2, from <[email protected]>
   - [email protected]  2000/10/10 14:20:45
     compat.c
     use rexexp for version string matching
   - [email protected]  2000/10/10 22:02:18
     [kex.c kex.h myproposal.h ssh.h ssh2.h sshconnect2.c sshd.c dh.c dh.h]
     First rough implementation of the diffie-hellman group exchange.  The
     client can ask the server for bigger groups to perform the diffie-hellman
     in, thus increasing the attack complexity when using ciphers with longer
     keys.  University of Windsor provided network, T the company.
   - [email protected]  2000/10/11 13:59:52
     [auth-rsa.c auth2.c]
     clear auth options unless auth sucessfull
   - [email protected]  2000/10/11 14:00:27
     [auth-options.h]
     clear auth options unless auth sucessfull
   - [email protected]  2000/10/11 14:03:27
     [scp.1 scp.c]
     support 'scp -o' with help from [email protected]
   - [email protected]  2000/10/11 14:11:35
     [dh.c]
     Wall
   - [email protected]  2000/10/11 14:14:40
     [auth.h auth2.c readconf.c readconf.h readpass.c servconf.c servconf.h]
     [ssh.h sshconnect2.c sshd_config auth2-skey.c cli.c cli.h]
     add support for s/key (kbd-interactive) to ssh2, based on work by
     [email protected] and me
   - [email protected]  2000/10/11 14:27:24
     [auth.c auth1.c auth2.c authfile.c cipher.c cipher.h kex.c kex.h]
     [myproposal.h packet.c readconf.c session.c ssh.c ssh.h sshconnect1.c]
     [sshconnect2.c sshd.c]
     new cipher framework
   - [email protected]  2000/10/11 14:45:21
     [cipher.c]
     remove DES
   - [email protected]  2000/10/12 03:59:20
     [cipher.c cipher.h sshconnect1.c sshconnect2.c sshd.c]
     enable DES in SSH-1 clients only
   - [email protected]  2000/10/12 08:21:13
     [kex.h packet.c]
     remove unused
   - [email protected]  2000/10/13 12:34:46
     [sshd.c]
     Kludge for F-Secure Macintosh < 1.0.2; [email protected]
   - [email protected]  2000/10/13 12:59:15
     [cipher.c cipher.h myproposal.h  rijndael.c rijndael.h]
     rijndael/aes support
   - [email protected]  2000/10/13 13:10:54
     [sshd.8]
     more info about -V
   - [email protected]  2000/10/13 13:12:02
     [myproposal.h]
     prefer no compression
2000-10-14 16:23:11 +11:00
Damien Miller 15b2952cd8 - (djm) Revert SSH2 serverloop hack, will find a better way. 2000-10-14 12:33:48 +11:00
Kevin Steves 48b7cc0dd7 - (stevesk) Fix detection of pw_class struct member in configure;
patch from KAMAHARA Junzo <[email protected]>
2000-10-07 13:24:00 +00:00
Damien Miller 05dd7950f9 - (djm) Cygwin fixes from Corinna Vinschen <[email protected]> 2000-10-01 00:42:48 +11:00
Damien Miller cf3888d396 - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with
very short lived X connections. Bug report from Tobias Oetiker
   <[email protected]>. Fix from Markus Friedl <[email protected]>
2000-09-30 14:17:52 +11:00
Damien Miller cb5e44a440 - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code,
tidy necessary differences. Use Markus' new debugN() in entropy.c
2000-09-29 12:12:36 +11:00
Damien Miller 15e7d4b64c - (djm) Fix SSH2 not terminating until all background tasks done problem. 2000-09-29 10:57:35 +11:00
Damien Miller 9d5705a4b3 - (djm) Add Steve VanDevender's <[email protected]> PAM
password change patch.
 - (djm) Bring licenses on my stuff in line with OpenBSD's
2000-09-16 16:09:27 +11:00