NB: big update - may break stuff. Please test!

 - (djm) OpenBSD CVS sync:
   - markus@cvs.openbsd.org  2001/02/03 03:08:38
     [auth-options.c auth-rh-rsa.c auth-rhosts.c auth.c canohost.c]
     [canohost.h servconf.c servconf.h session.c sshconnect1.c sshd.8]
     [sshd_config]
     make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@
   - markus@cvs.openbsd.org  2001/02/03 03:19:51
     [ssh.1 sshd.8 sshd_config]
     Skey is now called ChallengeResponse
   - markus@cvs.openbsd.org  2001/02/03 03:43:09
     [sshd.8]
     use no-pty option in .ssh/authorized_keys* if you need a 8-bit clean
     channel. note from Erik.Anggard@cygate.se (pr/1659)
   - stevesk@cvs.openbsd.org 2001/02/03 10:03:06
     [ssh.1]
     typos; ok markus@
   - djm@cvs.openbsd.org     2001/02/04 04:11:56
     [scp.1 sftp-server.c ssh.1 sshd.8 sftp-client.c sftp-client.h]
     [sftp-common.c sftp-common.h sftp-int.c sftp-int.h sftp.1 sftp.c]
     Basic interactive sftp client; ok theo@
 - (djm) Update RPM specs for new sftp binary
 - (djm) Update several bits for new optional reverse lookup stuff. I
   think I got them all.

1 files changed, 8 insertions, 4 deletions

diff --git a/auth1.c b/auth1.c
index 6e9808e5e..1986b2d8d 100644
--- a/auth1.c
+++ b/auth1.c
@@ -266,8 +266,8 @@ do_authloop(Authctxt *authctxt)
 #elif defined(HAVE_OSF_SIA)
                         /* Do SIA auth with password */
                         if (sia_validate_user(NULL, saved_argc, saved_argv, 
-                                get_canonical_hostname(), pw->pw_name, NULL, 0, 
-                                NULL, password) == SIASUCCESS) {
+                            get_canonical_hostname(options.reverse_mapping_check), 
+                            pw->pw_name, NULL, 0, NULL, password) == SIASUCCESS) {
                                 authenticated = 1;
                         }
 #else /* !USE_PAM && !HAVE_OSF_SIA */
@@ -347,7 +347,9 @@ do_authloop(Authctxt *authctxt)
 
                 if (authctxt->failures++ > AUTH_FAIL_MAX) {
 #ifdef WITH_AIXAUTHENTICATE 
-                        loginfailed(user,get_canonical_hostname(),"ssh");
+                        loginfailed(user, 
+                            get_canonical_hostname(options.reverse_mapping_check), 
+                            "ssh");
 #endif /* WITH_AIXAUTHENTICATE */
                         packet_disconnect(AUTH_FAIL_MSG, authctxt->user);
                 }
@@ -433,7 +435,9 @@ do_authentication()
 
 #ifdef WITH_AIXAUTHENTICATE
         /* We don't have a pty yet, so just label the line as "ssh" */
-        if (loginsuccess(authctxt->user,get_canonical_hostname(),"ssh",&aixloginmsg) < 0)
+        if (loginsuccess(authctxt->user, 
+            get_canonical_hostname(options.reverse_mapping_check),
+            "ssh", &aixloginmsg) < 0)
                 aixloginmsg = NULL;
 #endif /* WITH_AIXAUTHENTICATE */