summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2004-10-24Add Finnish debconf template translation (thanks, Matti Pöllä; closes:Colin Watson
#265339).
2004-10-24Preserve /etc/ssh/sshd_config ownership/permissions (closes: #276754).Colin Watson
2004-10-19 - (dtucker) [uidswap.c] Don't test dropping of gids for the root user orDarren Tucker
on Cygwin. Cygwin parts from vinschen at redhat com; ok djm@
2004-10-16that was "ok dtucker@"Damien Miller
2004-10-16 - (djm) [auth-pam.c] snprintf->strl*, fix server message length calculationsDamien Miller
2004-10-06Finish 1:3.8.1p1-11.Colin Watson
2004-10-06Finish 1:3.8.1p1-8.sarge.1.Colin Watson
2004-10-06Forward-port from HEAD:Colin Watson
* If PasswordAuthentication is disabled, then offer to disable ChallengeResponseAuthentication too. The current PAM code will attempt password-style authentication if ChallengeResponseAuthentication is enabled (closes: #250369). * This will ask a question of anyone who installed fresh with 1:3.8p1-2 or later and then upgraded. Sorry about that ... for this reason, the default answer is to leave ChallengeResponseAuthentication enabled.
2004-10-06 - (dtucker) [monitor_mm.c openbsd-compat/xmmap.c] Bug #940: cast constantsDarren Tucker
to void * to appease picky compilers (eg Tru64's "cc -std1").
2004-10-06Leave ChallengeResponseAuthentication enabled by default, sinceColin Watson
PasswordAuthentication has been turned off for new installs since 1:3.8p1-2.
2004-10-06 - (dtucker) [README.privsep] Bug #939: update info about HP-UX Trusted ModeDarren Tucker
and other PAM platforms.
2004-10-06Don't ask ssh/disable_cr_auth unless /etc/ssh/sshd_config exists.Colin Watson
2004-10-06get_config_option checks for existence of /etc/ssh/sshd_config.Colin Watson
2004-10-05If PasswordAuthentication is disabled, then offer to disableColin Watson
ChallengeResponseAuthentication too. The current PAM code will attempt password-style authentication if ChallengeResponseAuthentication is enabled (closes: #250369).
2004-09-30 - (dtucker) [configure.ac] Set AC_PACKAGE_NAME. ok djm@Darren Tucker
2004-09-23 - (dtucker) [openbsd-compat/bsd-snprintf.c] Previous change was off by one,Darren Tucker
which could have caused the justification to be wrong. ok djm@
2004-09-21 - (dtucker) [contrib/cygwin/ssh-host-config] Update to match current CygwinDarren Tucker
install process. Patch from vinschen at redhat.com.
2004-09-21 - (dtucker) [openbsd-compat/bsd-snprintf.c] Check for max length too.Darren Tucker
ok djm@
2004-09-12 - (dtucker) [configure.ac] Fix incorrect quoting and tests for cross-compile.Darren Tucker
Partly by & ok djm@.
2004-09-12 - (djm) [ssh.c sshd.c version.h] Don't divulge portable version in protocolDamien Miller
banner. Suggested by deraadt@, ok mouring@, dtucker@
2004-09-12 - (djm) [loginrec.c] xmallocDamien Miller
2004-09-12 - (djm) [loginrec.c] __func__ifiyDamien Miller
2004-09-12 - (djm) [loginrec.c] Start KNF and tidy up of this long-neglected file.Damien Miller
No change in resultant binary
2004-09-11 - (dtucker) [auth-krb5.c] Bug #922: Pass KRB5CCNAME to PAM. From deengertDarren Tucker
at anl.gov, ok djm@
2004-09-11 - (dtucker) [configure.ac] Bug #321: Add cross-compile support to configure.Darren Tucker
Parts by chua at ayrnetworks.com, astrand at lysator.liu.se and me. ok djm@
2004-09-11 - (dtucker) [session.c] Bug #927: make .hushlogin silent again. ok djm@Darren Tucker
2004-09-11 - (dtucker) [auth-pam.c auth.h auth2-none.c auth2.c monitor.c monitor_wrap.c]Darren Tucker
Bug #892: Send messages from failing PAM account modules to the client via SSH2_MSG_USERAUTH_BANNER messages. Note that this will not happen with SSH2 kbdint authentication, which need to be dealt with separately. ok djm@
2004-09-11 - (djm) [auth2-kbdint.c auth2-none.c auth2-passwd.c auth2-pubkey.c]Damien Miller
Make cygwin code more consistent with that which surrounds it
2004-09-11 - (dtucker) [auth-pam.c] Relocate sshpam_store_conv(), no code change.Darren Tucker
2004-09-11 - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #890: Send output fromDarren Tucker
failing PAM session modules to user then exit, similar to the way /etc/nologin is handled. ok djm@
2004-09-11 - (djm) [ssh-agent.c] unifdef some cygwin code; ok dtucker@Damien Miller
2004-08-31Move sshd_config(5) to openssh-server, where it belongs.Colin Watson
2004-08-30 - (dtucker) [Makefile.in contrib/ssh-copy-id] Bug #894: Improve portabilityDarren Tucker
of shell constructs. Patch from cjwatson at debian.org.
2004-08-30 - (dtucker) [regress/Makefile] Clean scp-ssh-wrapper.scp too. Patch fromDarren Tucker
vinschen at redhat.com.
2004-08-30 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.{c,h}] Bug #915: onlyDarren Tucker
copy required environment variables on Cygwin. Patch from vinschen at redhat.com, ok djm@
2004-08-29 - (dtucker) [openbsd-compat/port-aix.c] Bug #712: Explicitly check forDarren Tucker
accounts with authentication configs that sshd can't support (ie SYSTEM=NONE and AUTH1=something).
2004-08-29 - (dtucker) [configure.ac] Replace non-portable echo \n with extra echo.Darren Tucker
2004-08-29 - (dtucker) [regress/agent-ptrace.sh] Skip ptrace test on OSF1/DUnix/Tru64Darren Tucker
too; patch from cmadams at hiwaay.net.
2004-08-29 - (dtucker) [Makefile.in] Get regress/Makefile symlink right for out-of-treeDarren Tucker
builds too, from vinschen at redhat.com.
2004-08-29 - (dtucker) [regress/scp.sh] Make this work on Cygwin too, which doesn't likeDarren Tucker
files ending in .exe that aren't binaries; patch from vinschen at redhat.com.
2004-08-29 - (dtucker) [regress/dynamic-forward.sh] Allow time for connections to be tornDarren Tucker
down, needed on some platforms, should be harmless on others. Patch from jason at devrandom.org.
2004-08-29 - (dtucker) [regress/multiplex.sh] Skip test on platforms that do notDarren Tucker
support FD passing since multiplex requires it. Noted by tim@
2004-08-29 - (dtucker) [configure.ac] Include sys/stream.h in sys/ptms.h header check,Darren Tucker
fixes configure warning on Solaris reported by wknox at mitre.org.
2004-08-29 - djm@cvs.openbsd.org 2004/08/28 01:01:48Darren Tucker
[sshd.c] don't erroneously close stdin for !reexec case, from Dave Johnson; ok markus@
2004-08-29 - markus@cvs.openbsd.org 2004/08/26 16:00:55Darren Tucker
[ssh.1 sshd.8] get rid of references to rhosts authentication; with jmc@
2004-08-29 - dtucker@cvs.openbsd.org 2004/08/23 14:29:23Darren Tucker
[ssh-keysign.c] Remove duplicate getuid(), suggested by & ok markus@
2004-08-29 - dtucker@cvs.openbsd.org 2004/08/23 14:26:38Darren Tucker
[ssh-keysign.c ssh.c] Use permanently_set_uid() in ssh and ssh-keysign for consistency, matches change in Portable; ok markus@ (CVS ID sync only)
2004-08-29 - djm@cvs.openbsd.org 2004/08/23 11:48:47Darren Tucker
[channels.c] typo, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
2004-08-29 - djm@cvs.openbsd.org 2004/08/23 11:48:09Darren Tucker
[authfile.c] fix error path, spotted by Martin.Kraemer AT Fujitsu-Siemens.com; ok markus
2004-08-29 - (dtucker) [openbsd-compat/getrrsetbyname.c] Prevent getrrsetbyname fromDarren Tucker
failing with NOMEMORY if no sigs are returned and malloc(0) returns NULL. From Martin.Kraemer at Fujitsu-Siemens.com; ok djm@