summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/auth2-gss.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* this needs kex.h nowdjm2021-01-271-1/+2
|
* make ssh->kex->session_id a sshbuf instead of u_char*/size_t anddjm2021-01-271-2/+2
| | | | | use that instead of global variables containing copies of it. feedback/ok markus@
* use the new variant log macros instead of prepending __func__ anddjm2020-10-181-13/+13
| | | | appending ssh_err(r) manually; ok markus@
* delay bailout for invalid authenticating user until after the packetdjm2018-07-311-4/+7
| | | | | containing the request has been fully parsed. Reported by Dariusz Tytko and MichaƂ Sajdak; ok deraadt
* kerberos/gssapi fixes for buffer removaldjm2018-07-101-5/+12
|
* sshd: switch GSSAPI to sshbuf API; ok djm@markus2018-07-091-40/+55
|
* refactor authentication loggingdjm2017-06-241-1/+11
| | | | | | | optionally record successful auth methods and public credentials used in a file accessible to user sessions feedback and ok markus@
* switch auth2 to ssh_dispatch API; ok djm@markus2017-05-301-21/+22
|
* protocol handlers all get struct ssh passed; ok djm@markus2017-05-301-13/+9
|
* sshd: pass struct ssh to auth functions; ok djm@markus2017-05-301-5/+9
|
* move dispatch to struct ssh; ok djm@markus2015-01-191-9/+13
|
* bz#2107 - cache OIDs of supported GSSAPI mechanisms before privsepdjm2014-02-261-7/+2
| | | | | sandboxing, as running this code in the sandbox can cause violations; ok markus@
* bye, bye xfree(); ok markus@djm2013-05-171-9/+8
|
* hush some {unused, printf type} warningsdjm2013-04-051-4/+1
|
* Fixes logging of partial authentication when privsep is enableddjm2012-12-021-4/+4
| | | | | | | | | | | | | Previously, we recorded "Failed xxx" since we reset authenticated before calling auth_log() in auth2.c. This adds an explcit "Partial" state. Add a "submethod" to auth_log() to report which submethod is used for keyboard-interactive. Fix multiple authentication when one of the methods is keyboard-interactive. ok markus@
* allow GSSAPI authentication to detect when a server-side failure causesdjm2011-03-101-1/+3
| | | | | authentication failure and don't count such failures against MaxAuthTries; bz#1244 from simon AT sxw.org.uk; ok markus@ before lock
* Allow build without -DGSSAPI; ok deraadt@dtucker2007-10-291-1/+4
|
* almost entirely get rid of the culture of ".h files that include .h files"deraadt2006-08-031-9/+7
| | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step
* standardise spacing in $OpenBSD$ tags; requested by deraadt@djm2006-03-251-1/+1
|
* GSSAPI related leaks detected by Coverity via elad AT netbsd.org;djm2006-03-201-1/+3
| | | | reviewed by simon AT sxw.org.uk; deraadt@ ok
* KNF; ok djm@stevesk2005-10-131-3/+3
|
* remove unneeded #includes; ok markus@stevesk2005-10-131-2/+1
|
* knf says that a 2nd level indent is four (not three or five) spacesdjm2005-07-171-4/+3
|
* make this -Wsign-compare clean; ok avsm@ markus@djm2005-06-171-2/+2
|
* make ssh -Wshadow clean, no functional changesavsm2004-06-211-6/+6
| | | | markus@ ok
* unexpand and delete whitespace at EOL; ok markus@djm2003-11-211-11/+11
|
* replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; test + ok jakob.markus2003-11-171-11/+57
|
* remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.ukmarkus2003-11-021-11/+11
|
* make sure the doid is larger than 2markus2003-10-211-1/+3
|
* fix leakmarkus2003-09-011-2/+4
|
* 64 bit cleanups; markus okderaadt2003-08-241-2/+4
|
* support GSS API user authentication; patches from Simon Wilkinson,markus2003-08-221-0/+243
stripped down and tested by Jakob and myself.