summaryrefslogtreecommitdiff
path: root/session.c
AgeCommit message (Collapse)Author
2003-09-23 - markus@cvs.openbsd.org 2003/09/18 08:49:45Darren Tucker
[deattack.c misc.c session.c ssh-agent.c] more buffer allocation fixes; from Solar Designer; CAN-2003-0682; ok millert@
2003-09-19 - (dtucker) [session.c] Bug #643: Fix size_t -> u_int and fix null derefDarren Tucker
when /etc/default/login doesn't exist or isn't readable. Fixes from jparsons-lists at saffron.net and georg.oppenberg at deu mci com.
2003-09-16 - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: RetrieveDarren Tucker
PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it (eg Solaris, Reliant Unix). Patch from Robert.Dahlem at siemens.com. ok djm@
2003-09-02 - (djm) Bug #423: reorder setting of PAM_TTY and calling of PAM sessionDamien Miller
management (now done in do_setusercontext). Largely from michael_steffens AT hp.com
2003-09-02 - markus@cvs.openbsd.org 2003/08/31 13:29:05Damien Miller
[session.c] call ssh_gssapi_storecreds conditionally from do_exec(); with sxw@inf.ed.ac.uk
2003-09-02 - markus@cvs.openbsd.org 2003/08/28 12:54:34Damien Miller
[auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c] [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5] [sshconnect1.c sshd.c sshd_config sshd_config.5] remove kerberos support from ssh1, since it has been replaced with GSSAPI; but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
2003-08-26 - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.hDarren Tucker
configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
2003-08-26 - markus@cvs.openbsd.org 2003/08/22 10:56:09Darren Tucker
[auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c session.h ssh-gss.h ssh_config.5 sshconnect2.c sshd_config sshd_config.5] support GSS API user authentication; patches from Simon Wilkinson, stripped down and tested by Jakob and myself.
2003-08-25 - (djm) Bug #564: Perform PAM account checks for all authentications whenDamien Miller
UsePAM=yes; ok dtucker
2003-08-13 - markus@cvs.openbsd.org 2003/08/13 08:33:02Darren Tucker
[session.c] use more portable tcsendbreak(3) and ignore break_length; ok deraadt, millert
2003-08-13 - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge.Darren Tucker
2003-08-07 - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.h] Move CygwinDarren Tucker
specific defines and includes to bsd-cygwin_util.h. Fixes build error too.
2003-08-07 - (dtucker) [session.c] Have session_break_req not attempt to send a breakDarren Tucker
if TIOCSBRK and TIOCCBRK are not defined (eg Cygwin).
2003-08-02 - (dtucker) OpenBSD CVS SyncDarren Tucker
- markus@cvs.openbsd.org 2003/07/22 13:35:22 [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h] remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henning@ - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support. - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files. I hope I got this right....
2003-07-08 - (dtucker) [auth-passwd.c auth.c session.c sshd.c port-aix.c port-aix.h]Darren Tucker
Convert aixloginmsg into platform-independant Buffer loginmsg.
2003-07-08 - (dtucker) Check return value of setpcred().Darren Tucker
2003-07-08 - (dtucker) [acconfig.h auth-passwd.c configure.ac session.c port-aix.[ch]]Darren Tucker
Include AIX headers for authentication functions and make calls match prototypes. Test for and handle 3-args and 4-arg variants of loginfailed.
2003-06-03 - (djm) OpenBSD CVS SyncDamien Miller
- markus@cvs.openbsd.org 2003/06/02 09:17:34 [auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c] [canohost.c monitor.c servconf.c servconf.h session.c sshd_config] [sshd_config.5] deprecate VerifyReverseMapping since it's dangerous if combined with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@ - (djm) Fix portable-specific uses of verify_reverse_mapping too
2003-05-15 - markus@cvs.openbsd.org 2003/05/14 22:24:42Damien Miller
[clientloop.c session.c ssh.1] allow to send a BREAK to the remote system; ok various
2003-05-14 - (djm) Add new UsePAM configuration directive to allow runtime controlDamien Miller
over usage of PAM. This allows non-root use of sshd when built with --with-pam
2003-05-14 - markus@cvs.openbsd.org 2003/05/11 20:30:25Damien Miller
[channels.c clientloop.c serverloop.c session.c ssh.c] make channel_new() strdup the 'remote_name' (not the caller); ok theo
2003-05-14 - (djm) RCSID sync w/ OpenBSDDamien Miller
2003-04-09*** empty log message ***Damien Miller
2003-03-21 - (bal) Disable Privsep for Tru64 after pre-authentication due to issuesBen Lindstrom
with SIA. Also, clean up of tru64 support patch by Chris Adams <cmadams@hiwaay.net>
2003-03-10- (djm) OpenBSD CVS SyncDamien Miller
- markus@cvs.openbsd.org 2003/03/05 22:33:43 [channels.c monitor.c scp.c session.c sftp-client.c sftp-int.c] [sftp-server.c ssh-add.c sshconnect2.c] fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@
2003-02-24 - (djm) Bug #494: Allow multiple accounts on Windows 9x/Me;Damien Miller
From vinschen@redhat.com
2003-02-24 - markus@cvs.openbsd.org 2003/02/06 09:26:23Damien Miller
[session.c] missing call to setproctitle() after authentication; ok provos@
2003-01-10 - (djm) Enable new setproctitle emulation for Linux, AIX and HP/UX. MoreDamien Miller
systems may be added later.
2003-01-07 - (djm) Bug #178: On AIX /etc/nologin wasnt't shown to users. Fix fromDamien Miller
Ralf.Wenk@fh-karlsruhe.de and dtucker@zip.com.au
2003-01-03 - (djm) Bug #446: Set LOGIN env var to pw_name on AIX. Patch fromDamien Miller
mii@ornl.gov
2003-01-01 - (stevesk) [session.c sshlogin.c sshlogin.h] complete portableKevin Steves
parts of pass addrlen with sockaddr * fix. from Hajimu UMEMOTO <ume@FreeBSD.org>
2002-12-23 - markus@cvs.openbsd.org 2002/12/10 08:56:00Ben Lindstrom
[session.c] Make sure $SHELL points to the shell from the password file, even if shell is overridden from login.conf; bug#453; semen at online.sinor.ru; ok millert@
2002-12-23 - stevesk@cvs.openbsd.org 2002/12/04 04:36:47Ben Lindstrom
[session.c] remove xauth entries before add; PR 2994 from janjaap@stack.nl. ok markus@
2002-09-25Cray fixes (bug 367) based on patch from Wendy Palm @ cray.Tim Rice
This does not include the deattack.c fixes.
2002-09-25l) Fix issue where successfull login does not clear failure countsBen Lindstrom
in AIX. Patch by dtucker@zip.com.au ok by djm
2002-09-19 - stevesk@cvs.openbsd.org 2002/09/16 19:55:33Damien Miller
[session.c] log when _PATH_NOLOGIN exists; ok markus@
2002-09-19 - stevesk@cvs.openbsd.org 2002/09/12 19:50:36Damien Miller
[session.c ssh.1] add SSH_CONNECTION and deprecate SSH_CLIENT; bug #384. ok markus@
2002-09-10 - (djm) Bug #365: Read /.ssh/environment properly under CygWin.Damien Miller
Patch from Mark Bradshaw <bradshaw@staff.crosswalk.com>
2002-09-04 - stevesk@cvs.openbsd.org 2002/08/29 15:57:25Damien Miller
[monitor.c session.c sshlogin.c sshlogin.h] pass addrlen with sockaddr *; from Hajimu UMEMOTO <ume@FreeBSD.org> NOTE: there are also p-specific parts to this patch. ok markus@
2002-09-04 - markus@cvs.openbsd.org 2002/08/22 21:45:41Damien Miller
[session.c] send signal name (not signal number) in "exit-signal" message; noticed by galb@vandyke.com
2002-08-01 - markus@cvs.openbsd.org 2002/07/30 17:03:55Ben Lindstrom
[auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5] add PermitUserEnvironment (off by default!); from dot@dotat.at; ok provos, deraadt
2002-07-23 - markus@cvs.openbsd.org 2002/07/22 11:03:06Ben Lindstrom
[session.c] fallback to _PATH_STDPATH on setusercontext+LOGIN_SETPATH errors;
2002-07-23 - markus@cvs.openbsd.org 2002/07/19 15:43:33Ben Lindstrom
[log.c log.h session.c sshd.c] remove fatal cleanups after fork; based on discussions with and code from solar.
2002-07-23 - (stevesk) [auth-pam.[ch] session.c] pam_getenvlist() must beKevin Steves
freed by the caller; add free_pam_environment() and use it.
2002-07-15 - (bal) Remove unused tty defined in do_setusercontext() pointed out byBen Lindstrom
dtucker@zip.com.au plus a a more KNF since I am near it.
2002-07-04 - (bal) Clean up aix_usrinfo(). Ignore TTY= period I guess.Ben Lindstrom
2002-07-04 - deraadt@cvs.openbsd.org 2002/06/30 21:54:16Ben Lindstrom
[auth2.c session.c sshd.c] lint asks that we use names that do not overlap
2002-06-26 - deraadt@cvs.openbsd.org 2002/06/26 13:49:26Damien Miller
[session.c] disclose less information from environment files; based on input from djm, and dschultz@uclink.Berkeley.EDU
2002-06-26 - markus@cvs.openbsd.org 2002/06/26 08:58:26Damien Miller
[session.c] limit # of env vars to 1000; ok deraadt/djm
2002-06-26 - (djm) setlogin needs pgid==pid on BSD/OS; from itojun@Damien Miller