| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | resp is a pointer to an array of structs, not an array of pointers to structs. | des | 2003-09-24 | 1 | -9/+9 | |
| | | | ||||||
| * | | Return the correct error value when a null query fails. | des | 2003-09-24 | 1 | -1/+1 | |
| | | | ||||||
| * | | Fix broken shell code. | des | 2003-09-19 | 1 | -2/+2 | |
| | | | ||||||
| * | | This commit was generated by cvs2svn to compensate for changes in r120161, | nectar | 2003-09-17 | 2 | -6/+9 | |
| |\ \ | |/ | | | | | which included commits to RCS files with non-trunk default branches. | |||||
| | * | Correct more cases of allocation size bookkeeping being updated before | nectar | 2003-09-17 | 2 | -6/+9 | |
| | | | | | | | | | | | | | | | calling functions which can potentially fail and cause cleanups to be invoked. Submitted by: Solar Designer <solar@openwall.com> | |||||
| * | | Correct more cases of allocation size bookkeeping being updated before | nectar | 2003-09-17 | 3 | -15/+18 | |
| | | | | | | | | | | | | | | | calling functions which can potentially fail and cause cleanups to be invoked. Submitted by: Solar Designer <solar@openwall.com> | |||||
| * | | Update the OpenSSH addendum string for the buffer handling fix. | nectar | 2003-09-16 | 1 | -1/+1 | |
| | | | ||||||
| * | | This commit was generated by cvs2svn to compensate for changes in r120113, | nectar | 2003-09-16 | 1 | -5/+8 | |
| |\ \ | |/ | | | | | which included commits to RCS files with non-trunk default branches. | |||||
| | * | Do not record expanded size before attempting to reallocate associated | nectar | 2003-09-16 | 1 | -5/+8 | |
| | | | | | | | | | | | | | memory. Obtained from: OpenBSD | |||||
| * | | This commit was generated by cvs2svn to compensate for changes in r116791, | des | 2003-06-24 | 1 | -0/+1 | |
| |\ \ | |/ | | | | | which included commits to RCS files with non-trunk default branches. | |||||
| | * | Add a "return" that was missing from 3.6.1p1. Since it's been fixed in | des | 2003-06-24 | 1 | -0/+1 | |
| | | | | | | | | | the OpenSSH-portable CVS repo, I'm committing this on the vendor branch. | |||||
| * | | Fix off-by-one and initialization errors which prevented sshd from | des | 2003-05-28 | 1 | -1/+2 | |
| | | | | | | | | | | | | | | | restarting when sent a SIGHUP. Submitted by: tegge Approved by: re (jhb) | |||||
| * | | Revert unnecessary part of previous commit. | des | 2003-05-13 | 1 | -7/+7 | |
| | | | ||||||
| * | | Rename a few functions to avoid stealing common words (error, log, debug | des | 2003-05-12 | 1 | -7/+16 | |
| | | | | | | | | | | | | | | | etc.) from the application namespace for programs that use pam_ssh(8). Use #defines to avoid changing the actual source code. Approved by: re (rwatson) | |||||
| * | | Remove RCSID from files which have no other diffs to the vendor branch. | des | 2003-05-01 | 25 | -25/+0 | |
| | | | ||||||
| * | | Nit. | des | 2003-04-23 | 1 | -1/+1 | |
| | | | ||||||
| * | | Improvements to the proposed shell code. | des | 2003-04-23 | 1 | -7/+6 | |
| | | | ||||||
| * | | Regenerate. | des | 2003-04-23 | 1 | -2/+42 | |
| | | | ||||||
| * | | Resolve conflicts. | des | 2003-04-23 | 47 | -622/+827 | |
| | | | ||||||
| * | | This commit was generated by cvs2svn to compensate for changes in r113908, | des | 2003-04-23 | 90 | -1208/+3375 | |
| |\ \ | |/ | | | | | which included commits to RCS files with non-trunk default branches. | |||||
| | * | Vendor import of OpenSSH-portable 3.6.1p1. | des | 2003-04-23 | 135 | -1771/+4207 | |
| | | | ||||||
| * | | - when using a child process instead of a thread, change the child's | des | 2003-03-31 | 1 | -2/+13 | |
| | | | | | | | | | | | | | | | name to reflect its role - try to handle expired passwords a little better MFC after: 1 week | |||||
| * | | If an ssh1 client initiated challenge-response authentication but did | des | 2003-03-31 | 3 | -1/+22 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | not respond to challenge, and later successfully authenticated itself using another method, the kbdint context would never be released, leaving the PAM child process behind even after the connection ended. Fix this by automatically releasing the kbdint context if a packet of type SSH_CMSG_AUTH_TIS is follwed by anything but a packet of type SSH_CMSG_AUTH_TIS_RESPONSE. MFC after: 1 week | |||||
| * | | Paranoia: instead of a NULL conversation function, use one that always | des | 2003-02-16 | 1 | -6/+24 | |
| | | | | | | | | | | | | | | | | | returns PAM_CONV_ERR; moreover, make sure we always have the right conversation function installed before calling PAM service functions. Also unwrap some not-so-long lines. MFC after: 3 days | |||||
| * | | document the current default value for VersionAddendum. | des | 2003-02-11 | 4 | -4/+4 | |
| | | | ||||||
| * | | Set the ruid to the euid at startup as a workaround for a bug in pam_ssh. | des | 2003-02-07 | 1 | -0/+1 | |
| | | | | | | | | | MFC after: 3 days | |||||
| * | | The manual page lists only 2 files, however it reads as `three files' which is | trhodes | 2003-02-05 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | obviously incorrect. PR: 46841 Submitted by: Sakamoto Seiji <s-siji@hyper.ocn.ne.jp> | |||||
| * | | Linux-PAM's pam_start(3) fails with a bogus error message if passed the | des | 2003-02-03 | 1 | -1/+2 | |
| | | | | | | | | | | | | | | | | | pam_conv argument is NULL. OpenPAM doesn't care, but to make things easier for people porting this code to other systems (or -STABLE), use a dummy struct pam_conv instead of NULL. Pointed out by: Damien Miller <djm@mindrot.org> | |||||
| * | | Bump patch date to 2003-02-01 (the day after I fixed PAM authentication | des | 2003-02-03 | 1 | -1/+1 | |
| | | | | | | | | | for ssh1) | |||||
| * | | Fix keyboard-interactive authentication for ssh1. The problem was twofold: | des | 2003-01-31 | 2 | -0/+21 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - The PAM kbdint device sometimes doesn't know authentication succeeded until you re-query it. The ssh1 kbdint code would never re-query the device, so authentication would always fail. This patch has been submitted to the OpenSSH developers. - The monitor code for PAM sometimes forgot to tell the monitor that authentication had succeeded. This caused the monitor to veto the privsep child's decision to allow the connection. These patches have been tested with OpenSSH clients on -STABLE, NetBSD and Linux, and with ssh.com's ssh1 on Solaris. Sponsored by: DARPA, NAI Labs | |||||
| * | | Force early initialization of the resolver library, since the resolver | des | 2003-01-22 | 1 | -0/+15 | |
| | | | | | | | | | | | | | | | | | configuration files will no longer be available once sshd is chrooted. PR: 39953, 40894 Submitted by: dinoex MFC after: 3 days | |||||
| * | | The previous commit contained a stupid mistake: ctxt->pam_[cp]sock was | des | 2002-12-21 | 1 | -2/+2 | |
| | | | | | | | | | | | | | initialized after the call to pthread_create() instead of before. It just happened to work with threads enabled because ctxt is shared, but of course it doesn't work when we use a child process instead of threads. | |||||
| * | | If possible, use pthreads instead of a child process for PAM. | des | 2002-12-14 | 2 | -65/+334 | |
| | | | | | | | | | | | | | | | | | | | | | | | Reimplement the necessary bits from auth_pam.c and auth2_pam.c so that they share the PAM context used by the keyboard-interactive thread. If a child process is used instead, they will (necessarily) use a separate context. Constify do_pam_account() and do_pam_session(). Sponsored by: DARPA, NAI Labs | |||||
| * | | Add a missing #include "canohost.h". | des | 2002-12-14 | 1 | -0/+1 | |
| | | | ||||||
| * | | Remove code related to the PAMAuthenticationViaKbdInt option (which we've | des | 2002-12-14 | 1 | -4/+1 | |
| | | | | | | | | | disabled). This removes the only reference to auth2_pam(). | |||||
| * | | Back out a lastlog-related change which is no longer relevant. | des | 2002-12-14 | 1 | -1/+1 | |
| | | | ||||||
| * | | Fix a rounding error in the block size calculation. | des | 2002-12-14 | 1 | -2/+2 | |
| | | | | | | | | | Submitted by: tjr | |||||
| * | | Since OpenSSH drops privileges before calling pam_open_session(3), | des | 2002-12-03 | 2 | -170/+202 | |
| | | | | | | | | | | | | | pam_lastlog(8) can't possibly work, so let OpenSSH handle lastlog. Approved by: re (rwatson) | |||||
| * | | Add caveats regarding the effect of PAM on PasswordAuthentication and | des | 2002-11-06 | 1 | -0/+23 | |
| | | | | | | | | | | | | | | | PermitRootLogin. PR: docs/43776 MFC after: 1 week | |||||
| * | | Document the current default for VersionAddendum. | des | 2002-11-05 | 1 | -0/+2 | |
| | | | ||||||
| * | | Accurately reflect our local changes and additions. | des | 2002-11-05 | 1 | -11/+9 | |
| | | | ||||||
| * | | Document the current default value for VersionAddendum. | des | 2002-11-05 | 2 | -2/+2 | |
| | | | ||||||
| * | | Switch to two-clause license, with NAI's permission. | des | 2002-11-02 | 1 | -3/+0 | |
| | | | ||||||
| * | | Resolve conflicts. | des | 2002-10-29 | 57 | -526/+1253 | |
| | | | ||||||
| * | | Protect against tag expansion + fix some brainos. | des | 2002-10-29 | 1 | -6/+6 | |
| | | | ||||||
| * | | Some tricks I use when I upgrade. | des | 2002-10-29 | 1 | -0/+20 | |
| | | | ||||||
| * | | Correct shell code to expand globs in FREEBSD-Xlist | des | 2002-10-29 | 1 | -1/+1 | |
| | | | ||||||
| * | | More cruft. | des | 2002-10-29 | 1 | -0/+2 | |
| | | | ||||||
| * | | This commit was generated by cvs2svn to compensate for changes in r106121, | des | 2002-10-29 | 78 | -1597/+3674 | |
| |\ \ | |/ | | | | | which included commits to RCS files with non-trunk default branches. | |||||
| | * | Vendor import of OpenSSH-portable 3.5p1. | des | 2002-10-29 | 133 | -2117/+4911 | |
| | | | ||||||
 |
index : FreeBSD-src | |
| Raptor Engineering's fork of pfsense FreeBSD src with pfSense changes | Raptor Engineering, LLC |
| summaryrefslogtreecommitdiffstats |
|