summaryrefslogtreecommitdiff
path: root/auth.c
diff options
context:
space:
mode:
authordtucker@openbsd.org <dtucker@openbsd.org>2016-06-15 00:40:40 +0000
committerDarren Tucker <dtucker@zip.com.au>2016-06-15 12:06:33 +1000
commite690fe85750e93fca1fb7c7c8587d4130a4f7aba (patch)
tree42ae40a5cb8fa8564d1006a9b08bc0fe84ab7a0f /auth.c
parent57b4ee04cad0d3e0fec1194753b0c4d31e39a1cd (diff)
upstream commit
Remove "POSSIBLE BREAK-IN ATTEMPT!" from log message about forward and reverse DNS not matching. We haven't supported IP-based auth methods for a very long time so it's now misleading. part of bz#2585, ok markus@ Upstream-ID: 5565ef0ee0599b27f0bd1d3bb1f8a323d8274e29
Diffstat (limited to 'auth.c')
-rw-r--r--auth.c7
1 files changed, 3 insertions, 4 deletions
diff --git a/auth.c b/auth.c
index 55629b320..24527dd7c 100644
--- a/auth.c
+++ b/auth.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: auth.c,v 1.114 2016/03/07 19:02:43 djm Exp $ */ 1/* $OpenBSD: auth.c,v 1.115 2016/06/15 00:40:40 dtucker Exp $ */
2/* 2/*
3 * Copyright (c) 2000 Markus Friedl. All rights reserved. 3 * Copyright (c) 2000 Markus Friedl. All rights reserved.
4 * 4 *
@@ -857,7 +857,7 @@ remote_hostname(struct ssh *ssh)
857 hints.ai_socktype = SOCK_STREAM; 857 hints.ai_socktype = SOCK_STREAM;
858 if (getaddrinfo(name, NULL, &hints, &aitop) != 0) { 858 if (getaddrinfo(name, NULL, &hints, &aitop) != 0) {
859 logit("reverse mapping checking getaddrinfo for %.700s " 859 logit("reverse mapping checking getaddrinfo for %.700s "
860 "[%s] failed - POSSIBLE BREAK-IN ATTEMPT!", name, ntop); 860 "[%s] failed.", name, ntop);
861 return strdup(ntop); 861 return strdup(ntop);
862 } 862 }
863 /* Look for the address from the list of addresses. */ 863 /* Look for the address from the list of addresses. */
@@ -872,8 +872,7 @@ remote_hostname(struct ssh *ssh)
872 if (ai == NULL) { 872 if (ai == NULL) {
873 /* Address not found for the host name. */ 873 /* Address not found for the host name. */
874 logit("Address %.100s maps to %.600s, but this does not " 874 logit("Address %.100s maps to %.600s, but this does not "
875 "map back to the address - POSSIBLE BREAK-IN ATTEMPT!", 875 "map back to the address.", ntop, name);
876 ntop, name);
877 return strdup(ntop); 876 return strdup(ntop);
878 } 877 }
879 return strdup(name); 878 return strdup(name);