Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-03-05 | Remove README.Debian warnings about privsep not working properly with PAM. | Colin Watson | |
2004-03-05 | Really pick up upstream fix for OpenSSH bug #808, a segfault. The previous | Colin Watson | |
auth-pam.c change was in fact a different bug. | |||
2004-03-05 | Implement SSH1 support for ServerAliveInterval using SSH_MSG_IGNORE. As | Colin Watson | |
documented in ssh_config(5), it's not as good as the SSH2 version. | |||
2004-03-05 | Remove a few line breaks that were awkwardly placed and just made it harder | Colin Watson | |
to grep for things. | |||
2004-03-05 | Update config.guess and config.sub from autotools-dev 20040105.1. | Colin Watson | |
2004-03-05 | Pick up upstream fix for OpenSSH bug #808, a segfault: | Colin Watson | |
revision 1.97 date: 2004/03/04 09:03:54; author: dtucker; state: Exp; lines: +2 -1 - (dtucker) [auth-pam.c] Reset signal status when starting pam auth thread, prevent hanging during PAM keyboard-interactive authentications. ok djm@ | |||
2004-03-04 | - (dtucker) [auth-passwd.c auth-sia.c auth-sia.h defines.h | Darren Tucker | |
openbsd-compat/xcrypt.c] Bug #802: Fix build error on Tru64 when configured --with-osfsia. ok djm@ | |||
2004-03-04 | - (dtucker) [auth-pam.c] Reset signal status when starting pam auth thread, | Darren Tucker | |
prevent hanging during PAM keyboard-interactive authentications. ok djm@ | |||
2004-03-04 | - (dtucker) [auth-pam.c] Don't try to export PAM when compiled with | Darren Tucker | |
-DUSE_POSIX_THREADS. From antoine.verheijen at ualbert ca. ok djm@ | |||
2004-03-04 | wrong year | Darren Tucker | |
2004-03-03 | - (djm) [configure.ac ssh-agent.c] Use prctl to prevent ptrace on ssh-agent | Damien Miller | |
ok dtucker | |||
2004-03-01 | Since PAM session modules are run as root, we can turn pam_limits back on | Colin Watson | |
by default, and it no longer spits out "Operation not permitted" to syslog (closes: #171673). | |||
2004-03-01 | According to Darren Tucker, password expiry has been fixed. | Colin Watson | |
2004-03-01 | Merge 3.8p1 to the trunk. This builds and runs, but I haven't tested it | Colin Watson | |
extensively yet. ProtocolKeepAlives is now just a compatibility alias for ServerAliveInterval. | |||
2004-03-01 | Import OpenSSH 3.8p1. | Colin Watson | |
2004-02-29 | - (tim) [configure.ac] Put back bits mistakenly removed from Rev 1.188 | Tim Rice | |
2004-02-29 | - (dtucker) [regress/try-ciphers.sh] Skip acss if not compiled in (eg if we | Darren Tucker | |
built with openssl < 0.9.7) | |||
2004-02-29 | - dtucker@cvs.openbsd.org 2004/02/28 13:44:45 | Darren Tucker | |
[regress/try-ciphers.sh] Test acss too; ok markus@ | |||
2004-02-29 | - dtucker@cvs.openbsd.org 2004/02/28 12:16:57 | Darren Tucker | |
[regress/dynamic-forward.sh] Make dynamic-forward understand nc's new output. ok markus@ | |||
2004-02-29 | - markus@cvs.openbsd.org 2004/02/24 17:06:52 | Darren Tucker | |
[regress/ssh-com-client.sh regress/ssh-com-keygen.sh regress/ssh-com-sftp.sh regress/ssh-com.sh] test against recent ssh.com releases | |||
2004-02-29 | - markus@cvs.openbsd.org 2004/02/24 16:56:30 | Darren Tucker | |
[regress/test-exec.sh] allow arguments in ${TEST_SSH_XXX} | |||
2004-02-29 | - dtucker@cvs.openbsd.org 2004/02/17 08:23:20 | Darren Tucker | |
[regress/Makefile regress/login-timeout.sh] Add regression test for LoginGraceTime; ok markus@ | |||
2004-02-29 | - dtucker@cvs.openbsd.org 2004/02/27 22:49:27 | Darren Tucker | |
[dh.c] Reset bit counter at the right time, fixes debug output in the case where the DH group is rejected. ok markus@ | |||
2004-02-29 | - dtucker@cvs.openbsd.org 2004/02/27 22:44:56 | Darren Tucker | |
[dh.c] Make /etc/moduli line buffer big enough for 8kbit primes, in case anyone ever uses one. ok markus@ | |||
2004-02-29 | - dtucker@cvs.openbsd.org 2004/02/27 22:42:47 | Darren Tucker | |
[dh.c] Prevent sshd from sending DH groups with a primitive generator of zero or one, even if they are listed in /etc/moduli. ok markus@ | |||
2004-02-29 | - djm@cvs.openbsd.org 2004/02/25 00:22:45 | Darren Tucker | |
[sshd.c] typo in comment | |||
2004-02-27 | - (bal) KNF our sshlogin.c even if the code looks nothing like upstream | Ben Lindstrom | |
code due to diversity issues. | |||
2004-02-25 | - (djm) Don't specify path to PAM modules in Redhat sshd.pam; from Fedora | Damien Miller | |
2004-02-25 | - (djm) Trim ChangeLog | Damien Miller | |
2004-02-24 | - (djm) Release 3.8p1 | Damien Miller | |
2004-02-23 | [configure.ac] SCO3 needs -lcrypt_i for -lprot | Tim Rice | |
2004-02-24 | - (dtucker) {README.platform] Add platform-specific notes. | Darren Tucker | |
2004-02-24 | - (dtucker) [README] Add pointer to release notes. ok djm@ | Darren Tucker | |
2004-02-24 | - (djm) Crank RPM spec versions | Damien Miller | |
2004-02-23 | [openbsd-compat/getrrsetbyname.c] Make gcc 2.7.2.3 happy. ok djm@ | Tim Rice | |
2004-02-24 | - (dtucker) [uidswap.c] Minor KNF. ok djm@ | Darren Tucker | |
2004-02-24 | - (djm) [groupaccess.c uidswap.c] Bug #787: Size group arrays at runtime | Damien Miller | |
using sysconf() if available Based on patches from holger AT van-lengerich.de and openssh_bugzilla AT hockin.org | |||
2004-02-24 | Add missing ok | Darren Tucker | |
2004-02-24 | - (dtucker) [configure.ac gss-serv-krb5.c ssh-gss.h] Define GSSAPI when found | Darren Tucker | |
with krb5-config, hunt down gssapi.h and friends. Based partially on patch from deengert at anl.gov. For the MIT Kerberos bug against krb5-config related to this see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=2240 | |||
2004-02-24 | - markus@cvs.openbsd.org 2004/02/23 15:16:46 | Darren Tucker | |
[version.h] enter 3.8 | |||
2004-02-24 | - markus@cvs.openbsd.org 2004/02/23 15:12:46 | Darren Tucker | |
[bufaux.c] encode 0 correctly in buffer_put_bignum2; noted by Mikulas Patocka and drop support for negative BNs; ok otto@ | |||
2004-02-24 | - markus@cvs.openbsd.org 2004/02/23 12:02:33 | Darren Tucker | |
[sshd.c] backout revision 1.279; set listen socket to non-block; ok henning. | |||
2004-02-24 | - markus@cvs.openbsd.org 2004/02/19 21:15:04 | Darren Tucker | |
[sftp-server.c] switch to new license.template | |||
2004-02-24 | - (dtucker) [session.c] Bug #789: Only make setcred call for !privsep in the | Darren Tucker | |
non-interactive path. ok djm@ | |||
2004-02-22 | Add yet more upstream bug closures. | Colin Watson | |
2004-02-22 | Close "new version available" bug. | Colin Watson | |
2004-02-22 | Add more upstream bug closures. | Colin Watson | |
2004-02-22 | Add 'UsePAM yes' to /etc/ssh/sshd_config on upgrade from versions older | Colin Watson | |
than this, to maintain the standard Debian sshd configuration. Comment out PAMAuthenticationViaKbdInt and RhostsAuthentication in sshd_config on upgrade. Neither option is supported any more. | |||
2004-02-22 | I'm not sure where the need to define __FILE_OFFSET_BITS (as opposed to | Colin Watson | |
_FILE_OFFSET_BITS) came from, but it doesn't seem to be necessary any more. Remove it. | |||
2004-02-22 | Backport a few more changes to auth-pam.c from upstream portable CVS. PAM | Colin Watson | |
session modules finally produce output! |