Age | Commit message (Collapse) | Author |
|
the same version. Handle the case where someone uses --with-privsep-user=
and the user name does not match the group name. ok dtucker@
|
|
to pam_authenticate for challenge-response auth too. Originally from
fcusack at fcusack.com, ok djm@
|
|
warnings on compliant platforms. From paul.a.bolton at bt.com. ok djm@
|
|
Ensures messages from PAM modules are displayed when privsep=no.
Note: I did not want to just move display_loginmsg since that would change
existing behaviour (order of expiry warnings, "Last Login", motd) to less
like the native tools.
|
|
[session.c]
unbreak TTY break, diagnosed by darren AT dazwin.com; ok markus@
|
|
[sshd.c]
initialise some fd variables to -1, djm@ ok
|
|
[sshd_config.5]
new sentence, new line;
|
|
[ssh_config.5]
punctuation and grammar fixes. also, keep the options in order.
|
|
- jmc@cvs.openbsd.org 2004/06/26 09:03:21
[ssh.1]
- remove double word
- rearrange .Bk to keep SYNOPSIS nice
- -M before -m in options description
|
|
appdata_ptr to the conversation function. ok djm@
By rights we should free the messages too, but if this happens then one
of the modules has already proven itself to be buggy so can we trust
the messages?
|
|
|
|
rename handling for Linux which returns EPERM for link() on (at least some)
filesystems that do not support hard links. sftp-server will fall back to
stat+rename() in such cases.
|
|
|
|
|
|
|
|
[sftp.c]
bz #875: fix bad escape char error message; reported by f_mohr AT yahoo.de
|
|
- djm@cvs.openbsd.org 2004/06/25 18:43:36
[sshd.c]
fix broken fd handling in the re-exec fallback path, particularly when
/dev/crypto is in use; ok deraadt@ markus@
|
|
[sftp-server.c]
Fall back to stat+rename if filesystem doesn't doesn't support hard
links. bz#823, ok djm@
|
|
|
|
Add closefrom() for platforms that don't have it.
(might need some tuning later, but I want to be able to test reexec).
|
|
[regress/test-exec.sh]
clean reexec-specific junk out of text-exec.sh and simplify; idea markus@
|
|
[regress/Makefile regress/test-exec.sh, added regress/reexec.sh]
regress test for re-exec corner cases
|
|
[sshd.c]
only perform tcp wrappers checks when the incoming connection is on a
socket. silences useless warnings from regress tests that use
proxycommand="sshd -i". prompted by david@ ok markus@
|
|
[servconf.c servconf.h sshd.c]
re-exec sshd on accept(); initial work, final debugging and ok markus@
|
|
[ssh.c]
Fix counting in master/slave when passing environment variables; ok djm@
|
|
[rijndael.c]
-Wshadow fix up s/encrypt/do_encrypt/. OK djm@, markus@
|
|
reference to "findssl.sh"
Also corrected my ChangeLog entries since I placed them in the wrong place.
|
|
|
|
Move loginrestrictions test to port-aix.c, replace with a generic hook.
|
|
|
|
-Wshadow change.
|
|
[regress/dynamic-forward.sh regress/test-exec.sh]
Allow setting of port for regress from TEST_SSH_PORT variable; ok markus@
|
|
[regress/test-exec.sh]
Add TEST_SSH_SSHD_CONFOPTS and TEST_SSH_SSH_CONFOPTS to allow adding
arbitary options to sshd_config and ssh_config during tests. ok markus@
|
|
[regress/envpass.sh]
Add quoting for test -z; ok markus@
|
|
connections with empty passwords. Patch from davidwu at nbttech.com,
ok djm@
|
|
[monitor.c monitor_wrap.c]
Change login->username, will prevent -Wshadow errors in Portable;
ok markus@
|
|
[regress/envpass.sh regress/multiplex.sh]
more portable env passing tests
|
|
|
|
|
|
|
|
[sftp.c]
don't show .files by default in ls, add -a option to turn them back on;
ok markus
|
|
[sftp.1]
document sort options
|
|
[sftp.c]
prefix ls option flags with LS_
|
|
[sftp.c]
introduce sorting for ls, same options as /bin/ls; ok markus@
|
|
[log.h]
mark fatal and cleanup exit as __dead; ok markus@
|
|
[session.c]
fix fd leak for multiple subsystem connections; with markus@
|
|
[auth-rsa.c auth2-gss.c auth2-pubkey.c authfile.c canohost.c channels.c
cipher.c dns.c kex.c monitor.c monitor_fdpass.c monitor_wrap.c
monitor_wrap.h nchan.c packet.c progressmeter.c scp.c sftp-server.c sftp.c
ssh-gss.h ssh-keygen.c ssh.c sshconnect.c sshconnect1.c sshlogin.c
sshpty.c]
make ssh -Wshadow clean, no functional changes
markus@ ok
There are also some portable-specific -Wshadow warnings to be fixed in
monitor.c and montior_wrap.c.
|
|
[sftp.1]
mention new -n flag
|
|
[sftp.c]
make "ls -l" listings print user/group names, add "ls -n" to show uid/gid
(like /bin/ls); idea & ok markus@
|
|
[ssh.c]
filter passed env vars at slave in connection sharing case; ok markus@
|