Age | Commit message (Collapse) | Author |
|
[sftp-int.c]
typos from Jonathon Gray;
|
|
[auth1.c]
remove unused variable (pw). ok djm@
(id sync only - still used in portable)
|
|
[auth1.c auth2.c auth2-pubkey.c auth.h auth-krb5.c auth-passwd.c]
[auth-rhosts.c auth-rh-rsa.c auth-rsa.c monitor.c serverloop.c]
[session.c]
standardise arguments to auth methods - they should all take authctxt.
check authctxt->valid rather then pw != NULL; ok markus@
|
|
[sshconnect.c]
do not free static type pointer in warn_changed_key()
|
|
[sshconnect.c]
move changed key warning into warn_changed_key(). ok markus@
|
|
- djm@cvs.openbsd.org 2003/11/03 09:03:37
[auth-chall.c]
make this a little more idiot-proof; ok markus@
(includes portable-specific changes)
|
|
HP-UX, skip test on AIX.
|
|
PAM_ERROR_MSG messages.
|
|
contrib/cygwin). Major update from vinschen at redhat.com.
- Makefile provides a `cygwin-postinstall' target to run right after
`make install'.
- Better support for Windows 2003 Server.
- Try to get permissions as correct as possible.
- New command line options to allow full automated host configuration.
- Create configs from skeletons in /etc/defaults/etc.
- Use /bin/bash, allows reading user input with readline support.
- Remove really old configs from /usr/local.
|
|
pam_chauthtok_conv().
|
|
|
|
|
|
[auth2-gss.c compat.c compat.h sshconnect2.c]
remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk
|
|
[misc.c]
error->debug for getsockopt+TCP_NODELAY; several requests
|
|
[sshconnect2.c]
rename 'supported' static var in userauth_gssapi() to 'gss_supported'
to avoid shadowing the global version. markus@ ok
|
|
[auth2-gss.c]
make sure the doid is larger than 2
|
|
[monitor_wrap.c]
check pmonitor != NULL
|
|
are created correctly with CRLF line terminations. Patch from vinschen at
redhat.com.
|
|
make agent setgid during test.
|
|
directly. Noted by Darren.Moffat at sun.com.
|
|
MD5 passwords even if PAM support is enabled. From steev at detritus.net.
|
|
|
|
|
|
openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always
compiled in but disabled in config.
|
|
[session.c ssh-agent.c]
10X for mkdtemp; djm@
|
|
[README.dns]
update
Resynced with OpenBSD too: DNSFP support is now always compiled in
so the configure support (and documentation thereof) can go away.
|
|
[dns.c dns.h readconf.c ssh-keygen.c sshconnect.c]
include SSHFP lookup code (not enabled by default). ok markus@
|
|
[scp.1 sftp.1]
don't refer to options related to forwarding; ok jmc@
|
|
[ssh_config.5]
note that EnableSSHKeySign should be in the non-hostspecific section;
remove unnecessary .Pp;
ok markus@
|
|
[monitor_wrap.c]
return NULL for missing banner; ok djm@
|
|
[sshconnect2.c]
search keys in reverse order; fixes #684
|
|
[readconf.c readconf.h ssh.1 ssh.c ssh_config.5]
remote x11 clients are now untrusted by default, uses xauth(8) to generate
untrusted cookies; ForwardX11Trusted=yes restores old behaviour.
ok deraadt; feedback and ok djm/fries
|
|
[readconf.c ssh_config.5]
default GSS API to no in client, too; ok jakob, deraadt@
|
|
[scp.1 scp.c sftp-server.8 sftp.1 sftp.c ssh.1 sshd.8]
scp and sftp: add options list and sort options. options list requested
by deraadt@
sshd: use same format as ssh
ssh: remove wrong option from list
sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)
ok deraadt@ markus@
|
|
|
|
[regress/sftp-cmds.sh]
more sftp quoting regress tests; ok markus
|
|
[regress/Makefile regress/banner.sh]
Test SSH2 banner. ok markus@
|
|
[sshconnect2.c]
set ptr to NULL after free
|
|
[sftp-int.c]
sftp quoting fix from admorten AT umich.edu; ok markus@
|
|
[sshconnect2.c]
Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 & #707.
ok markus@
|
|
Reliant Unix. Based on patch from Robert.Dahlem at siemens.com.
|
|
on Reliant Unix. Patch from Robert.Dahlem at siemens.com.
|
|
Bug #670: add strtoul() to openbsd-compat for platforms lacking it. ok djm@
|
|
run-time switch, always build --with-md5-passwords.
|
|
|
|
cleanup functions. With & ok djm@
|
|
|
|
|
|
[ssh-gss.h]
missing $OpenBSD:; dtucker
|
|
[sshd.c]
print openssl version, too, several requests; ok henning/djm.
|