| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | skip the initial check for access with an empty password when |   djm | 2010-06-25 | 1 | -2/+2 |
| | | | | | PermitEmptyPasswords=no; | ||||
| * | Make protocol 1 MaxAuthTries logic match protocol 2's. | djm | 2008-07-04 | 1 | -2/+4 |
| | | | | | | | | | | | Do not treat the first protocol 2 authentication attempt as a failure IFF it is for method "none". Makes MaxAuthTries' user-visible behaviour identical for protocol 1 vs 2. ok dtucker@ | ||||
| * | Implement a channel success/failure status confirmation callback | djm | 2008-05-08 | 1 | -1/+2 |
| | | | | | | | | | | | | | | mechanism. Each channel maintains a queue of callbacks, which will be drained in order (RFC4253 guarantees confirm messages are not reordered within an channel). Also includes a abandonment callback to clean up if a channel is closed without sending confirmation messages. This probably shouldn't happen in compliant implementations, but it could be abused to leak memory. ok markus@ (as part of a larger diff) | ||||
| * | unifdef -DBSD_AUTH | djm | 2007-09-21 | 1 | -3/+1 |
| | | | | | | | | unifdef -USKEY These options have been in use for some years; ok markus@ "no objection" millert@ | ||||
| * | almost entirely get rid of the culture of ".h files that include .h files" |   deraadt | 2006-08-03 | 1 | -3/+7 |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
| * | move #include <stdio.h> out of includes.h |   stevesk | 2006-08-01 | 1 | -1/+2 |
| | | |||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -1/+2 |
| | | |||||
| * | missed some needed #include <unistd.h> when KERBEROS5=no; issue from | stevesk | 2006-07-20 | 1 | -1/+5 |
| | | | | | massimo@cedoc.mo.it | ||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | ||||
| * | sprinkle some ARGSUSED for table driven functions (which sometimes must ignore their args) | deraadt | 2006-03-20 | 1 | -0/+5 |
| | | |||||
| * | spacing | deraadt | 2006-03-19 | 1 | -1/+1 |
| | | |||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 |
| | | |||||
| * | spacing | djm | 2005-07-16 | 1 | -3/+3 |
| | | |||||
| * | make this -Wsign-compare clean; ok avsm@ markus@ | djm | 2005-06-17 | 1 | -3/+4 |
| | | |||||
| * | split protocol 1 auth methods into separate functions, makes authloop | djm | 2005-05-20 | 1 | -127/+188 |
| | | | | | much more readable; fixes and ok markus@ | ||||
| * | more s/illegal/invalid/ |   markus | 2004-07-28 | 1 | -3/+3 |
| | | |||||
| * | bz#899: Don't display invalid usernames in setproctitle | djm | 2004-07-21 | 1 | -2/+2 |
| | | | | | from peak AT argo.troja.mff.cuni.cz; ok markus@ | ||||
| * | Add MaxAuthTries sshd config option; ok markus@ |   dtucker | 2004-05-23 | 1 | -2/+2 |
| | | |||||
| * | kill some more tiny files; ok deraadt@ | djm | 2004-05-09 | 1 | -2/+1 |
| | | |||||
| * | remove unused variable (pw). ok djm@ |   jakob | 2003-11-08 | 1 | -2/+1 |
| | | |||||
| * | standardise arguments to auth methods - they should all take authctxt. | djm | 2003-11-04 | 1 | -3/+3 |
| | | | | | check authctxt->valid rather then pw != NULL; ok markus@ | ||||
| * | replace fatal_cleanup() and linked list of fatal callbacks with static | markus | 2003-09-23 | 1 | -7/+3 |
| | | | | | | | cleanup_exit() function. re-refine cleanup_exit() where appropriate, allocate sshd's authctxt eary to allow simpler cleanup in sshd. tested by many, ok deraadt@ | ||||
| * | remove kerberos support from ssh1, since it has been replaced with GSSAPI; | markus | 2003-08-28 | 1 | -57/+1 |
| | | | | | but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ... | ||||
| * | fix passwd auth for 'username leaks via timing'; with djm@, original patches from solar | markus | 2003-08-26 | 1 | -2/+4 |
| | | |||||
| * | remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@, | markus | 2003-08-13 | 1 | -22/+1 |
| | | | | | fgsch@, miod@, henning@, jakob@ and others | ||||
| * | remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); | markus | 2003-07-22 | 1 | -41/+6 |
| | | | | | test+ok henning@ | ||||
| * | rename log() into logit() to avoid name conflict. markus ok, from netbsd |   itojun | 2003-04-08 | 1 | -2/+2 |
| | | |||||
| * | undo broken fix for #387, fixes #486 | markus | 2003-02-06 | 1 | -3/+2 |
| | | |||||
| * | Don't log TIS auth response; "get rid of it" - markus@ | djm | 2003-01-23 | 1 | -2/+1 |
| | | |||||
| * | KNF | deraadt | 2002-11-21 | 1 | -2/+2 |
| | | |||||
| * | krb4 + privsep; ok dugsong@, deraadt@ | markus | 2002-09-26 | 1 | -4/+12 |
| | | |||||
| * | kerberos support for privsep. confirmed to work by lha@stacken.kth.se | itojun | 2002-09-09 | 1 | -3/+15 |
| | | | | | patch from markus | ||||
| * | auth_root_allowed() is handled by the monitor in the privsep case, | markus | 2002-08-22 | 1 | -2/+3 |
| | | | | | so skip this for use_privsep, ok stevesk@, fixes bugzilla #387/325 | ||||
| * | KNF done automatically while reading.... | deraadt | 2002-06-19 | 1 | -2/+2 |
| | | |||||
| * | strip '@' from username only for KerbV and known broken clients, bug #204 | markus | 2002-04-10 | 1 | -4/+10 |
| | | |||||
| * | make getpwnamallow() allways call pwcopy() | markus | 2002-03-19 | 1 | -16/+6 |
| | | |||||
| * | integrate privilege separated openssh; its turned off by default for now. |   provos | 2002-03-18 | 1 | -9/+15 |
| | | | | | work done by me and markus@ | ||||
| * | have the authentication functions return the authentication context | provos | 2002-03-18 | 1 | -4/+3 |
| | | | | | and then do_authenticated; okay millert@ | ||||
| * | getpwnamallow returns struct passwd * only if user valid; okay markus@ | provos | 2002-03-17 | 1 | -3/+3 |
| | | |||||
| * | don't use channel_input_channel_request and callback | markus | 2002-02-03 | 1 | -1/+2 |
| | | | | | | | | use new server_input_channel_req() instead: server_input_channel_req does generic request parsing on server side session_input_channel_req handles just session specific things now ok djm@ | ||||
| * | packet_read* no longer return the packet length, since it's not used. | markus | 2001-12-28 | 1 | -5/+3 |
| | | |||||
| * | packet_get_bignum* no longer returns a size | markus | 2001-12-28 | 1 | -5/+5 |
| | | |||||
| * | s/packet_done/packet_check_eom/ (end-of-message); ok djm@ | markus | 2001-12-28 | 1 | -8/+8 |
| | | |||||
| * | get rid of packet_integrity_check, use packet_done() instead. | markus | 2001-12-27 | 1 | -9/+8 |
| | | |||||
| * | auth_rhosts_rsa now accept generic keys. | markus | 2001-12-27 | 1 | -2/+2 |
| | | |||||
| * | call fatal() for openssl allocation failures | markus | 2001-12-27 | 1 | -18/+13 |
| | | |||||
| * | be more carefull on allocation | markus | 2001-12-25 | 1 | -1/+3 |
| | | |||||
| * | basic KNF done while i was looking for something else | deraadt | 2001-12-19 | 1 | -11/+11 |
| | | |||||
| * | make it compile with more strict prototype checking | itojun | 2001-12-05 | 1 | -2/+2 |
| | | |||||
| * | Kerberos v5 support for SSH1, mostly from Assar Westerlund <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok |   dugsong | 2001-06-26 | 1 | -52/+59 |
| | | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |