Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | make two tiny header files go away; djm ok | 2004-05-08 | 1 | -2/+1 | ||
| | ||||||
* | unexpand and delete whitespace at EOL; ok markus@ | 2003-11-21 | 1 | -2/+2 | ||
| | ||||||
* | replace fatal_cleanup() and linked list of fatal callbacks with static | 2003-09-23 | 1 | -9/+1 | ||
| | | | | | | cleanup_exit() function. re-refine cleanup_exit() where appropriate, allocate sshd's authctxt eary to allow simpler cleanup in sshd. tested by many, ok deraadt@ | |||||
* | fix passwd auth for 'username leaks via timing'; with djm@, original patches from solar | 2003-08-26 | 1 | -1/+20 | ||
| | ||||||
* | deprecate VerifyReverseMapping since it's dangerous if combined | 2003-06-02 | 1 | -2/+2 | ||
| | | | | | | | with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@ | |||||
* | rename log() into logit() to avoid name conflict. markus ok, from netbsd | 2003-04-08 | 1 | -13/+13 | ||
| | ||||||
* | don't compare against pw_home if realpath fails for pw_home (seen on AFS); ok djm@ | 2002-11-04 | 1 | -7/+5 | ||
| | ||||||
* | log illegal user here for missing privsep case (ssh2). | 2002-09-20 | 1 | -2/+7 | ||
| | | | | this is executed in the monitor. ok markus@ | |||||
* | typo in comment | 2002-08-08 | 1 | -2/+2 | ||
| | ||||||
* | Fix typo/thinko. Pass in as to auth_approval(), not NULL. | 2002-05-17 | 1 | -2/+2 | ||
| | | | | Closes PR 2659. | |||||
* | move the packet_send_debug handling from auth-options.c to auth.c; ok provos@ | 2002-05-13 | 1 | -1/+47 | ||
| | ||||||
* | check for NULL; from provos@ | 2002-03-19 | 1 | -2/+4 | ||
| | ||||||
* | make getpwnamallow() allways call pwcopy() | 2002-03-19 | 1 | -2/+3 | ||
| | ||||||
* | KNF whitespace | 2002-03-19 | 1 | -5/+5 | ||
| | ||||||
* | move auth_approval into getpwnamallow with help from millert@ | 2002-03-18 | 1 | -3/+23 | ||
| | ||||||
* | getpwnamallow returns struct passwd * only if user valid; okay markus@ | 2002-03-17 | 1 | -1/+13 | ||
| | ||||||
* | fix file type checking (use S_ISREG). ok by markus | 2002-03-15 | 1 | -2/+3 | ||
| | ||||||
* | undo the 'delay hostname lookup' change | 2002-03-01 | 1 | -3/+9 | ||
| | | | | | match.c must not use compress.c (via canonhost.c/packet.c) thanks to wilfried@ | |||||
* | log user not allowed details, from dwd@bell-labs.com; ok markus@ | 2002-02-28 | 1 | -6/+25 | ||
| | ||||||
* | delay hostname lookup until we see a ``@'' in DenyUsers and AllowUsers | 2002-02-28 | 1 | -9/+3 | ||
| | | | | for sshd -u0; ok markus@ | |||||
* | s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@ | 2002-01-29 | 1 | -2/+2 | ||
| | ||||||
* | basic KNF done while i was looking for something else | 2001-12-19 | 1 | -4/+4 | ||
| | ||||||
* | enum/int type cleanup where it made sense to do so; ok markus@ | 2001-11-17 | 1 | -2/+2 | ||
| | ||||||
* | don't print ROOT in CAPS for the authentication messages, i.e. | 2001-11-08 | 1 | -2/+2 | ||
| | | | | | | Accepted publickey for ROOT from 127.0.0.1 port 42734 ssh2 becomes Accepted publickey for root from 127.0.0.1 port 42734 ssh2 | |||||
* | use realpath() for homedir, too. from jinmei@isl.rdc.toshiba.co.jp | 2001-10-03 | 1 | -3/+8 | ||
| | ||||||
* | no need to call dirname(pw->pw_dir). | 2001-07-11 | 1 | -10/+7 | ||
| | | | | note that dirname(3) modifies its argument on some systems. | |||||
* | tridge@samba.org | 2001-06-27 | 1 | -3/+11 | ||
| | ||||||
* | terminate secure_filename checking after checking homedir. that way it | 2001-06-25 | 1 | -2/+13 | ||
| | | | | works on AFS. okay markus@ | |||||
* | *known_hosts2 is obsolete for hostbased authentication and | 2001-06-23 | 1 | -1/+42 | ||
| | | | | | only used for backward compat. merge ssh1/2 hostkey check and move it to auth.c | |||||
* | fix comment; from jakob@ | 2001-05-24 | 1 | -2/+2 | ||
| | ||||||
* | configurable authorized_keys{,2} location; originally from peter@; ok djm@ | 2001-05-20 | 1 | -1/+134 | ||
| | ||||||
* | undo /etc/shell and proto 2,1 change for openssh-2.5.2 | 2001-03-19 | 1 | -11/+2 | ||
| | ||||||
* | check /etc/shells, too | 2001-03-17 | 1 | -2/+11 | ||
| | ||||||
* | make copyright lines the same format | 2001-03-02 | 1 | -2/+2 | ||
| | ||||||
* | use pwcopy in ssh.c, too | 2001-02-22 | 1 | -16/+1 | ||
| | ||||||
* | PermitRootLogin={yes,without-password,forced-commands-only,no} | 2001-02-12 | 1 | -11/+18 | ||
| | | | | (before this change, root could login even if PermitRootLogin==no) | |||||
* | unexpand and remove end-of-line whitespace; ok markus@ | 2001-02-04 | 1 | -4/+4 | ||
| | ||||||
* | make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@ | 2001-02-03 | 1 | -2/+2 | ||
| | ||||||
* | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. | 2001-01-21 | 1 | -4/+4 | ||
| | | | | rename util.[ch] -> misc.[ch] | |||||
* | 1) removes fake skey from sshd, since this will be much | 2001-01-18 | 1 | -22/+72 | ||
| | | | | | | | harder with /usr/libexec/auth/login_XXX 2) share/unify code used in ssh-1 and ssh-2 authentication (server side) 3) make addition of BSD_AUTH and other challenge reponse methods easier. | |||||
* | support supplementary group in {Allow,Deny}Groups | 2001-01-13 | 1 | -33/+23 | ||
| | | | | from stevesk@pobox.com | |||||
* | new cipher framework | 2000-10-11 | 1 | -2/+1 | ||
| | ||||||
* | some more Copyright fixes | 2000-09-07 | 1 | -2/+1 | ||
| | ||||||
* | cleanup copyright notices on all files. I have attempted to be accurate with | 2000-09-07 | 1 | -1/+29 | ||
| | | | | | | | the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate. | |||||
* | unused | 2000-08-04 | 1 | -3/+1 | ||
| | ||||||
* | accept an empty shell in authentication; bug reported by chris@tinker.ucr.edu | 2000-05-17 | 1 | -2/+9 | ||
| | ||||||
* | split auth/sshconnect in one file per protocol version | 2000-04-26 | 1 | -826/+2 | ||
| | ||||||
* | add DSA pubkey auth and other SSH2 fixes. use ssh-keygen -[xX] | 2000-04-26 | 1 | -49/+249 | ||
| | | | | | for trading keys with the real and the original SSH, directly from the people who invented the SSH protocol. | |||||
* | whitespace cleanup | 2000-04-14 | 1 | -23/+23 | ||
| | ||||||
* | check payload for (illegal) extra data | 2000-04-14 | 1 | -5/+15 | ||
| |