Age | Commit message (Collapse) | Author | |
---|---|---|---|
2005-11-05 | - (djm) OpenBSD CVS Sync | Damien Miller | |
- markus@cvs.openbsd.org 2005/10/07 11:13:57 [ssh-keygen.c] change DSA default back to 1024, as it's defined for 1024 bits only and this causes interop problems with other clients. moreover, in order to improve the security of DSA you need to change more components of DSA key generation (e.g. the internal SHA1 hash); ok deraadt | |||
2005-11-02 | - (dtucker) [openbsd-compat/bsd-misc.c] Bug #1108: fix broken strdup(). | Darren Tucker | |
Reported by olavi at ipunplugged.com and antoine.brodin at laposte.net via FreeBSD. | |||
2005-10-30 | - (dtucker) [session.c] Bug #1045do not check /etc/nologin when PAM is | Darren Tucker | |
enabled, instead allow PAM to handle it. Note that on platforms using PAM, the pam_nologin module should be added to sshd's session stack in order to maintain exising behaviour. Based on patch and discussion from t8m at centrum.cz, ok djm@ | |||
2005-10-30 | - (djm) [contrib/suse/openssh.spec contrib/suse/rc. | Damien Miller | |
sshd contrib/suse/sysconfig.ssh] Bug #1106: Updated SuSE spec and init files from imorgan AT nas.nasa.gov | |||
2005-10-25 | - (dtucker) [contrib/cygwin/ssh-user-config] Remove duplicate yes/no | Darren Tucker | |
prompt. Patch from vinschen at redhat.com. | |||
2005-10-25 | - (dtucker) [configure.ac] Bug #1104: Tru64's printf family doesn't | Darren Tucker | |
understand "%lld", even though the compiler has "long long", so handle it as a special case. Patch tested by mcaskill.scott at epa.gov. (actually was included in previous commit) | |||
2005-10-25 | - (dtucker) [configure.ac] Relocate LLONG_MAX calculation to after the | Darren Tucker | |
sizeof(long long) checks, to make fixing bug #1104 easier (no changes yet). | |||
2005-10-17 | - (dtucker) [configure.ac] Bug #1097: Fix configure for cross-compiling. | Darren Tucker | |
/etc/default/login report and testing from aabaker at iee.org, corrections from tim@. | |||
2005-10-09 | - (dtucker) [configure.ac defines.h openbsd-compat/vis.{c,h}] Sync current | Darren Tucker | |
versions from OpenBSD. ok djm@ | |||
2005-10-08 | - (djm) [configure.ac] missing 'test' call for -with-Werror test | Damien Miller | |
2005-10-08 | - (dtucker) [configure.ac] Bug #1098: define $MAIL for HP-UX; report from | Darren Tucker | |
brian.smith at agilent com. | |||
2005-10-05 | - (dtucker) [configure.ac sshd.8] Enable locked account check (a prepended | Darren Tucker | |
"*LOCKED*" string) for FreeBSD. Patch jeremie at le-hen.org and senthilkumar_sen at hotpop.com. | |||
2005-10-03 | - (dtucker) [regress/README.regress] Bug #989: Document limitation that scp | Darren Tucker | |
is required in the system path for the multiplex test to work. | |||
2005-10-03 | - dtucker@cvs.openbsd.org 2005/10/03 07:44:42 | Darren Tucker | |
[canohost.c] Relocate check_ip_options call to prevent logging of garbage for connections with IP options set. bz#1092 from David Leonard, "looks good" deraadt@ | |||
2005-10-03 | - jaredy@cvs.openbsd.org 2005/09/30 20:34:26 | Darren Tucker | |
[ssh-keyscan.1] deploy .An -nosplit; ok jmc | |||
2005-10-03 | - djm@cvs.openbsd.org 2005/09/21 23:37:11 | Darren Tucker | |
[sshd.c] change label at markus@'s request | |||
2005-10-03 | - djm@cvs.openbsd.org 2005/09/21 23:36:54 | Darren Tucker | |
[sshd_config.5] aquire -> acquire, from stevesk@ | |||
2005-10-03 | - djm@cvs.openbsd.org 2005/09/19 23:31:31 | Darren Tucker | |
[ssh.1] spelling nit from stevesk@ | |||
2005-10-03 | - jmc@cvs.openbsd.org 2005/09/19 15:42:44 | Darren Tucker | |
[ssh.c] update -D usage here too; | |||
2005-10-03 | - jmc@cvs.openbsd.org 2005/09/19 15:38:27 | Darren Tucker | |
[ssh.1] some more .Bk/.Ek to avoid ugly line split; | |||
2005-10-03 | - djm@cvs.openbsd.org 2005/09/19 11:48:10 | Darren Tucker | |
[gss-serv.c] typo | |||
2005-10-03 | - djm@cvs.openbsd.org 2005/09/19 11:47:09 | Darren Tucker | |
[sshd.c] stop connection abort on rekey with delayed compression enabled when post-auth privsep is disabled (e.g. when root is logged in); ok dtucker@ | |||
2005-10-03 | - djm@cvs.openbsd.org 2005/09/19 11:37:34 | Darren Tucker | |
[ssh_config.5 ssh.1] mention ability to specify bind_address for DynamicForward and -D options; bz#1077 spotted by Haruyama Seigo | |||
2005-10-03 | - djm@cvs.openbsd.org 2005/09/13 23:40:07 | Darren Tucker | |
[sshd.c ssh.c misc.h sftp.c ssh-keygen.c ssh-keysign.c sftp-server.c scp.c misc.c ssh-keyscan.c ssh-add.c ssh-agent.c] ensure that stdio fds are attached; ok deraadt@ | |||
2005-10-03 | - markus@cvs.openbsd.org 2005/09/09 19:18:05 | Darren Tucker | |
[clientloop.c] typo; from mark at mcs.vuw.ac.nz, bug #1082 | |||
2005-10-03 | - markus@cvs.openbsd.org 2005/09/07 08:53:53 | Darren Tucker | |
[channels.c] enforce chanid != NULL; ok djm | |||
2005-09-30 | - (dtucker) [monitor.c] Bug #1087: Send loginmsg to preauth privsep | Darren Tucker | |
child during PAM account check without clearing it. This restores the post-login warnings such as LDAP password expiry. Patch from Tomas Mraz with help from several others. | |||
2005-09-30 | - (dtucker) [openbsd-compat/openbsd-compat.h] Bug #1096: Add prototype | Darren Tucker | |
for strtoll. Patch from o.flebbe at science-computing.de. | |||
2005-09-29 | - (dtucker) [monitor_wrap.c] Remove duplicate definition of loginmsg | Darren Tucker | |
introduced during sync. | |||
2005-09-28 | - (dtucker) [auth-pam.c] Bug #1028: send final non-query messages from | Darren Tucker | |
PAM via keyboard-interactive. Patch tested by the folks at Vintela. | |||
2005-09-28 | - (dtucker) [entropy.c] Use u_char for receiving RNG seed for consistency | Darren Tucker | |
2005-09-27 | - (dtucker) [entropy.c entropy.h sshd.c] Pass RNG seed to the reexec'ed | Darren Tucker | |
process when sshd relies on ssh-random-helper. Should result in faster logins on systems without a real random device or prngd. ok djm@ | |||
2005-09-27 | - (dtucker) [entropy.c] Remove unnecessary tests for getuid and geteuid | Darren Tucker | |
calls, since they can't possibly fail. ok djm@ | |||
2005-09-24 | - (dtucker) [auth2.c] Move start_pam() calls out of if-else block to remove | Darren Tucker | |
duplicate call. ok djm@ | |||
2005-09-22 | - (dtucker) [configure.ac] Fix help for --with-opensc; patch from skeleten at | Darren Tucker | |
shillest.net. | |||
2005-09-22 | - (dtucker) [configure.ac] Use -R linker flag for libedit too; patch from | Darren Tucker | |
skeleten at shillest.net. | |||
2005-09-19 | remove acconfig.h | Tim Rice | |
2005-09-19 | - (tim) [aclocal.m4 configure.ac] Delete acconfig.h and add templates to | Tim Rice | |
AC_DEFINE and AC_DEFINE_UNQUOTED to quiet autoconf 2.59 warning messages. | |||
2005-09-12 | - (tim) [configure.ac] Bug 1078. Fix --without-kerberos5. Reported by | Tim Rice | |
Mike Frysinger. | |||
2005-09-08 | - (tim) [defines.h openbsd-compat/port-uw.c] Add long password support to | Tim Rice | |
OpenServer 6 and add osr5bigcrypt support so when someone migrates passwords between UnixWare and OpenServer they will still work. OK dtucker@ | |||
2005-09-01 | - (djm) Update RPM spec file versions | Damien Miller | |
2005-08-31 | - (tim) [configure.ac auth.c defines.h session.c openbsd-compat/port-uw.c | Tim Rice | |
openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] libiaf cleanup. Disable libiaf bits for OpenServer6. Free memory allocated by ia_get_logpwd(). Feedback and OK dtucker@ | |||
2005-09-01 | - (dtucker) [README] Update release note URL to 4.2 | Darren Tucker | |
2005-08-31 | - markus@cvs.openbsd.org 2005/08/31 09:28:42 | Damien Miller | |
[version.h] 4.2 | |||
2005-08-31 | - (djm) OpenBSD CVS Sync | Damien Miller | |
- djm@cvs.openbsd.org 2005/08/30 22:08:05 [gss-serv.c sshconnect2.c] destroy credentials if krb5_kuserok() call fails. Stops credentials being delegated to users who are not authorised for GSSAPIAuthentication when GSSAPIDeletegateCredentials=yes and another authentication mechanism succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@ | |||
2005-08-31 | correct bug number | Damien Miller | |
2005-08-30 | - (tim) [configure.ac] Back out last change. It needs to be done differently. | Tim Rice | |
2005-08-29 | - (tim) [configure.ac] ia_openinfo() seems broken on OSR6. Limit UW long | Tim Rice | |
password support to 7.x for now. | |||
2005-08-26 | - (tim) [CREDITS LICENCE auth.c configure.ac defines.h includes.h session.c | Tim Rice | |
openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h openbsd-compat/xcrypt.c] New files [openssh/openbsd-compat/port-uw.c openssh/openbsd-compat/port-uw.h] Support long passwords (> 8-char) on UnixWare 7 from Dhiraj Gulati and Ahsan Rashid. Cleanup and testing by tim@. Feedback and OK dtucker@ | |||
2005-08-23 | - (tim) [defines.h] PATH_MAX bits for OpenServer OK dtucker@ | Tim Rice | |