summaryrefslogtreecommitdiffstats
path: root/crypto
Commit message (Collapse)AuthorAgeFilesLines
...
* | | remove declaration of authlogdinoex2002-06-241-5/+1
| | | | | | | | | | | | | | | use variable from_host Reviewed by: des
* | | IPv4or6 is already defined in libssh.des2002-06-241-3/+2
| | |
* | | Resolve conflicts and document local changes.des2002-06-234-1254/+113
| | |
* | | Correctly export the environment variables set by setusercontext().des2002-06-232-8/+7
| | | | | | | | | | | | Sponsored by: DARPA, NAI Labs
* | | Resolve conflicts. Known issues:des2002-06-2345-1424/+2059
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - sshd fails to set TERM correctly. - privilege separation may break PAM and is currently turned off. - man pages have not yet been updated I will have these issues resolved, and privilege separation turned on by default, in time for DP2. Sponsored by: DARPA, NAI Labs
* | | This commit was generated by cvs2svn to compensate for changes in r98675,des2002-06-2369-692/+6637
|\ \ \ | |/ / | | | | | | which included commits to RCS files with non-trunk default branches.
| * | Vendor import of OpenSSH 3.3.des2002-06-23115-3303/+8750
| | |
| * | This commit was manufactured by cvs2svn to create branchcvs2svn2002-03-211-0/+334
| | | | | | | | | | | | 'VENDOR-crypto-openssh'.
* | | Don't risk catching a signal while handling a signal for a dying child, as wejmallett2002-05-271-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | can then end up not properly clearing wtmp/utmp entries. PR: bin/37934 Submitted by: Sandeep Kumar <skumar@juniper.net> Reviewed by: markm MFC after: 2 weeks
* | | Remove _PATH_CP now that it is defined in paths.hjedgar2002-05-121-3/+0
| | | | | | | | | | | | Reviewed by: des
* | | unbreak build:alfred2002-05-115-3/+7
| | | | | | | | | | | | | | | commands.c, sys_bsd.c: comment out/remove junk after #endif/#else network.c, terminal.c, utlities.c: include stdlib.h for exit(3)
* | | Resurrect as an empty file to unbreak the build. We have everything wedes2002-05-081-0/+1
| | | | | | | | | | | | need in paths.h.
* | | Fix an external declaration that was causing telnetd to core dump.markm2002-05-061-1/+1
| | | | | | | | | | | | | | | MFC after: 1 week PR: 37766
* | | Usual after-import fixup of SCM IDs.obrien2002-05-012-2/+2
| | |
* | | Back out previous commit.des2002-04-252-3/+3
| | |
* | | Change default challenge/response behavior of sshd by popular demand.jkh2002-04-252-3/+3
| | | | | | | | | | | | | | | | | | This brings us into sync with the behavior of sshd on other Unix platforms. Submitted by: Joshua Goodall <joshua@roughtrade.net>
* | | 1) Proberly conditionalize PAM "last login" printout.ache2002-04-231-14/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2) For "copyright" case #ifdef HAVE_LOGIN_CAP was placed on too big block, narrow it down. 3) Don't check the same conditions twice (for "copyright" and "welcome"), put them under single block. 4) Print \n between "copyright" and "welcome" as our login does. Reviewed by: des (1)
* | | Don't report last login time in PAM case. (perforce change 10057)des2002-04-221-4/+6
| | | | | | | | | | | | Sponsored by: DARPA, NAI Labs
* | | Fix warnings + wait for child so it doesn't go zombie (perforce change 10122)des2002-04-221-4/+3
| | |
* | | Move LOGIN_CAP calls before all file descriptors are closed hard, since someache2002-04-211-2/+15
| | | | | | | | | | | | | | | | | | descriptors may be used by LOGIN_CAP internally, add login_close(). Use "nocheckmail" LOGIN_CAP capability too like our login does.
* | | Fix TZ & TERM handling for use_login case of rev. 1.24ache2002-04-201-4/+6
| | |
* | | 1) Surprisingly, "CheckMail" handling code completely removed from thisache2002-04-202-2/+24
| | | | | | | | | | | | | | | | | | | | | version, so documented "CheckMail" option exists but does nothing. Bring it back to life adding code back. 2) Cosmetique. Reduce number of args in do_setusercontext()
* | | 1) Fix overlook in my prev. commit - forget HAVE_ prefix in one place in oldache2002-04-201-4/+11
| | | | | | | | | | | | | | | | | | | | | code merge. 2) In addition honor "timezone" and "term" capabilities from login.conf, not overwrite them once they set (they are TZ and TERM variables).
* | | Please repeat after me: setusercontext() modifies _current_ environment, butache2002-04-201-24/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | sshd uses separate child_env. So, to make setusercontext() really does something, environment must be switched before call and passed to child_env back after it. The error here was that modified environment not passed back to child_env, so all variables that setusercontext() adds are lost, including ones from ~/.login_conf
* | | Fix some warnings. Don't record logins twice in USE_PAM case. Stripdes2002-04-141-4/+22
| | | | | | | | | | | | | | | | | | | | | "/dev/" off the tty name before passing it to auth_ttyok or PAM. Inspired by: dinoex Sponsored by: DARPA, NAI Labs
* | | Back out previous backout. It seems I was right to begin with, and DSA isdes2002-04-121-2/+0
| | | | | | | | | | | | | | | preferrable to RSA (not least because the SECSH draft standard requires DSA while RSA is only recommended).
* | | Knowledgeable persons assure me that RSA is preferable to DSA and that wedes2002-04-111-0/+2
| | | | | | | | | | | | should transition away from DSA.
* | | Prefer DSA to RSA if both are available.des2002-04-111-1/+2
| | |
* | | Do not attempt to load an ssh2 RSA host key by default.des2002-04-111-2/+0
| | |
* | | Align for const poisoning in -lutil.ru2002-04-081-1/+1
| | |
* | | Nuke stale copy of the pam_ssh(8) source code.des2002-04-061-497/+0
| | |
* | | Revert to vendor version, what little was left of our local patches heredes2002-04-021-2/+2
| | | | | | | | | | | | | | | | | | was incorrect. Pointed out by: Markus Friedl <markus@openbsd.org>
* | | Change the FreeBSD version addendum to "FreeBSD-20020402". This shortensdes2002-04-023-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the version string to 28 characters, which is below the 40-character limit specified in the proposed SECSH standard. Some servers, however (like the one built into the Foundry BigIron line of switches) will hang when confronted with a version string longer than 24 characters, so some users may need to shorten it further. Sponsored by: DARPA, NAI Labs
* | | Make the various ssh clients understand the VersionAddendum option.des2002-04-021-1/+10
| | | | | | | | | | | | Submitted by: pb
* | | Switch over to using pam_login_access(8) module in sshd(8).ru2002-03-262-19/+4
| | | | | | | | | | | | | | | | | | (Fixes static compilation. Reduces diffs to OpenSSH.) Reviewed by: bde
* | | REALLY correct typo this time.nectar2002-03-261-2/+2
| | | | | | | | | | | | Noticed by: roam
* | | Fix typo (missing paren) affecting KRB4 && KRB5 case.nectar2002-03-251-1/+1
| | | | | | | | | | | | Approved by: des
* | | We keep moduli(5) in /etc/ssh, not /etc.des2002-03-231-1/+1
| | |
* | | Correctly set PAM_RHOST so e.g. pam_login_access(8) can do its job.des2002-03-211-0/+5
| | | | | | | | | | | | Sponsored by: DARPA, NAI Labs
* | | Use the "sshd" service instead of "csshd". The latter was only neededdes2002-03-211-1/+1
| | | | | | | | | | | | | | | | | | because of bugs (incorrect design decisions, actually) in Linux-PAM. Sponsored by: DARPA, NAI Labs
* | | Use PAM instead of S/Key (or OPIE) for SSH2.des2002-03-212-6/+341
| | | | | | | | | | | | Sponsored by: DARPA, NAI Labs
* | | Note that portions of this software weredes2002-03-201-0/+43
| | | | | | | | | | | | Sponsored by: DARPA, NAI Labs
* | | - Change the prompt from "S/Key Password: " to "OPIE Password: "des2002-03-201-1/+3
| | | | | | | | | | | | | | | | | | | | | - If the user doesn't have an OPIE key, don't challenge him. This is a workaround until I get PAM to work properly with ssh2. Sponsored by: DARPA, NAI Labs
* | | Unbreak for KRB4 ^ KRB5 case.des2002-03-191-2/+16
| | | | | | | | | | | | Sponsored by: DARPA, NAI Labs
* | | Revive this file (which is used for opie rather than skey)des2002-03-181-0/+97
| | |
* | | Fix conflicts.des2002-03-1851-6317/+6809
| | |
* | | This commit was generated by cvs2svn to compensate for changes in r92555,des2002-03-18115-3132/+5680
|\ \ \ | |/ / | | | | | | which included commits to RCS files with non-trunk default branches.
| * | Vendor import of OpenSSH 3.1des2002-03-18165-9014/+12507
| | |
* | | Diff reduction.des2002-03-162-4/+3
| | | | | | | | | | | | Sponsored by: DARPA, NAI Labs
* | | Update version string.nectar2002-03-071-1/+1
| | |
OpenPOWER on IntegriCloud