CVS log for src/usr.bin/ssh/Attic/auth1.c

Request diff between arbitrary revisions

Default branch: MAIN

Revision 1.83, Sat Aug 13 17:47:41 2016 UTC (7 years, 9 months ago) by markus
Branch: MAIN
CVS Tags: HEAD
Changes since 1.82: +1 -1 lines
FILE REMOVED

remove ssh1 server code; ok djm@

Revision 1.82 / (download) - annotate - [select for diffs], Tue Jul 15 15:54:14 2014 UTC (9 years, 10 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8, OPENBSD_5_7_BASE, OPENBSD_5_7, OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.81: +2 -1 lines
Diff to previous 1.81 (colored)

Add support for Unix domain socket forwarding.  A remote TCP port
may be forwarded to a local Unix domain socket and vice versa or
both ends may be a Unix domain socket.  This is a reimplementation
of the streamlocal patches by William Ahern from:
    http://www.25thandclement.com/~william/projects/streamlocal.html
OK djm@ markus@

Revision 1.81 / (download) - annotate - [select for diffs], Thu Jul 3 11:16:55 2014 UTC (9 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.80: +2 -2 lines
Diff to previous 1.80 (colored)

make the "Too many authentication failures" message include the
user, source address, port and protocol in a format similar to the
authentication success / failure messages; bz#2199, ok dtucker

Revision 1.80 / (download) - annotate - [select for diffs], Sun Feb 2 03:44:31 2014 UTC (10 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.79: +3 -3 lines
Diff to previous 1.79 (colored)

convert memset of potentially-private data to explicit_bzero()

Revision 1.79 / (download) - annotate - [select for diffs], Sun May 19 02:42:42 2013 UTC (11 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.78: +16 -19 lines
Diff to previous 1.78 (colored)

Standardise logging of supplemental information during userauth. Keys
and ruser is now logged in the auth success/failure message alongside
the local username, remote host/port and protocol in use. Certificates
contents and CA are logged too.

Pushing all logging onto a single line simplifies log analysis as it is
no longer necessary to relate information scattered across multiple log
entries. "I like it" markus@

Revision 1.78 / (download) - annotate - [select for diffs], Fri May 17 00:13:13 2013 UTC (11 years ago) by djm
Branch: MAIN
Changes since 1.77: +5 -5 lines
Diff to previous 1.77 (colored)

bye, bye xfree(); ok markus@

Revision 1.77 / (download) - annotate - [select for diffs], Sun Dec 2 20:34:09 2012 UTC (11 years, 5 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.76: +4 -3 lines
Diff to previous 1.76 (colored)

Fixes logging of partial authentication when privsep is enabled
Previously, we recorded "Failed xxx" since we reset authenticated before
calling auth_log() in auth2.c. This adds an explcit "Partial" state.

Add a "submethod" to auth_log() to report which submethod is used
for keyboard-interactive.

Fix multiple authentication when one of the methods is
keyboard-interactive.

ok markus@

Revision 1.76 / (download) - annotate - [select for diffs], Sun Nov 4 11:09:15 2012 UTC (11 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.75: +6 -1 lines
Diff to previous 1.75 (colored)

Support multiple required authentication via an AuthenticationMethods
option. This option lists one or more comma-separated lists of
authentication method names. Successful completion of all the methods in
any list is required for authentication to complete;
feedback and ok markus@

Revision 1.75 / (download) - annotate - [select for diffs], Tue Aug 31 09:58:37 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.74: +3 -3 lines
Diff to previous 1.74 (colored)

Add buffer_get_cstring() and related functions that verify that the
string extracted from the buffer contains no embedded \0 characters*
This prevents random (possibly malicious) crap from being appended to
strings where it would not be noticed if the string is used with
a string(3) function.

Use the new API in a few sensitive places.

* actually, we allow a single one at the end of the string for now because
we don't know how many deployed implementations get this wrong, but don't
count on this to remain indefinitely.

Revision 1.74 / (download) - annotate - [select for diffs], Fri Jun 25 08:46:17 2010 UTC (13 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.73: +2 -2 lines
Diff to previous 1.73 (colored)

skip the initial check for access with an empty password when
PermitEmptyPasswords=no;

Revision 1.73 / (download) - annotate - [select for diffs], Fri Jul 4 23:30:16 2008 UTC (15 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.72: +4 -2 lines
Diff to previous 1.72 (colored)

Make protocol 1 MaxAuthTries logic match protocol 2's.

Do not treat the first protocol 2 authentication attempt as
a failure IFF it is for method "none".

Makes MaxAuthTries' user-visible behaviour identical for
protocol 1 vs 2.

ok dtucker@

Revision 1.72 / (download) - annotate - [select for diffs], Thu May 8 12:02:23 2008 UTC (16 years ago) by djm
Branch: MAIN
Changes since 1.71: +2 -1 lines
Diff to previous 1.71 (colored)

Implement a channel success/failure status confirmation callback
mechanism. Each channel maintains a queue of callbacks, which will
be drained in order (RFC4253 guarantees confirm messages are not
reordered within an channel).

Also includes a abandonment callback to clean up if a channel is
closed without sending confirmation messages. This probably
shouldn't happen in compliant implementations, but it could be
abused to leak memory.

ok markus@ (as part of a larger diff)

Revision 1.71 / (download) - annotate - [select for diffs], Fri Sep 21 08:15:29 2007 UTC (16 years, 7 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.70: +1 -3 lines
Diff to previous 1.70 (colored)

unifdef -DBSD_AUTH
unifdef -USKEY

These options have been in use for some years;
ok markus@ "no objection" millert@

Revision 1.62.2.1 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:32 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.62: +18 -3 lines
Diff to previous 1.62 (colored) next main 1.63 (colored)

upgrade to OpenSSH 4.4

Revision 1.62.4.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:50 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.62: +18 -3 lines
Diff to previous 1.62 (colored) next main 1.63 (colored)

upgrade to OpenSSH 4.4

Revision 1.70 / (download) - annotate - [select for diffs], Thu Aug 3 03:34:41 2006 UTC (17 years, 9 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.69: +7 -3 lines
Diff to previous 1.69 (colored)

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

Revision 1.69 / (download) - annotate - [select for diffs], Tue Aug 1 23:22:47 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.68: +2 -1 lines
Diff to previous 1.68 (colored)

move #include <stdio.h> out of includes.h

Revision 1.68 / (download) - annotate - [select for diffs], Sat Jul 22 20:48:22 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.67: +2 -1 lines
Diff to previous 1.67 (colored)

move #include <string.h> out of includes.h

Revision 1.67 / (download) - annotate - [select for diffs], Thu Jul 20 15:26:14 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.66: +5 -1 lines
Diff to previous 1.66 (colored)

missed some needed #include <unistd.h> when KERBEROS5=no; issue from
massimo@cedoc.mo.it

Revision 1.66 / (download) - annotate - [select for diffs], Sat Mar 25 13:17:01 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.65: +1 -0 lines
Diff to previous 1.65 (colored)

Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
Theo nuked - our scripts to sync -portable need them in the files

Revision 1.65 / (download) - annotate - [select for diffs], Mon Mar 20 18:17:20 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.64: +5 -0 lines
Diff to previous 1.64 (colored)

sprinkle some ARGSUSED for table driven functions (which sometimes must ignore their args)

Revision 1.64 / (download) - annotate - [select for diffs], Sun Mar 19 18:52:11 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.63: +1 -1 lines
Diff to previous 1.63 (colored)

spacing

Revision 1.63 / (download) - annotate - [select for diffs], Sun Mar 19 18:51:18 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.62: +0 -1 lines
Diff to previous 1.62 (colored)

RCSID() can die

Revision 1.59.4.1 / (download) - annotate - [select for diffs], Sun Sep 4 18:39:56 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.59: +189 -127 lines
Diff to previous 1.59 (colored) next main 1.60 (colored)

upgrade to OpenSSH 4.2

Revision 1.59.2.1 / (download) - annotate - [select for diffs], Fri Sep 2 03:44:59 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.59: +189 -127 lines
Diff to previous 1.59 (colored) next main 1.60 (colored)

upgrade to OpenSSH 4.2

Revision 1.62 / (download) - annotate - [select for diffs], Sat Jul 16 01:35:24 2005 UTC (18 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_8_BASE
Branch point for: OPENBSD_3_9, OPENBSD_3_8
Changes since 1.61: +3 -3 lines
Diff to previous 1.61 (colored)

spacing

Revision 1.61 / (download) - annotate - [select for diffs], Fri Jun 17 02:44:32 2005 UTC (18 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.60: +4 -3 lines
Diff to previous 1.60 (colored)

make this -Wsign-compare clean; ok avsm@ markus@

Revision 1.60 / (download) - annotate - [select for diffs], Fri May 20 12:57:01 2005 UTC (19 years ago) by djm
Branch: MAIN
Changes since 1.59: +188 -127 lines
Diff to previous 1.59 (colored)

split protocol 1 auth methods into separate functions, makes authloop
much more readable; fixes and ok markus@

Revision 1.52.2.2 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:30 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.52.2.1: +5 -6 lines
Diff to previous 1.52.2.1 (colored) to branchpoint 1.52 (colored) next main 1.53 (colored)

upgrade to OpenSSH 3.9

Revision 1.55.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:26 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.55: +5 -6 lines
Diff to previous 1.55 (colored) next main 1.56 (colored)

upgrade to OpenSSH 3.9

Revision 1.59 / (download) - annotate - [select for diffs], Wed Jul 28 09:40:29 2004 UTC (19 years, 9 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE, OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_7, OPENBSD_3_6
Changes since 1.58: +3 -3 lines
Diff to previous 1.58 (colored)

more s/illegal/invalid/

Revision 1.58 / (download) - annotate - [select for diffs], Wed Jul 21 10:33:31 2004 UTC (19 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.57: +2 -2 lines
Diff to previous 1.57 (colored)

bz#899: Don't display invalid usernames in setproctitle
from peak AT argo.troja.mff.cuni.cz; ok markus@

Revision 1.57 / (download) - annotate - [select for diffs], Sun May 23 23:59:53 2004 UTC (19 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.56: +2 -2 lines
Diff to previous 1.56 (colored)

Add MaxAuthTries sshd config option; ok markus@

Revision 1.56 / (download) - annotate - [select for diffs], Sun May 9 01:19:27 2004 UTC (20 years ago) by djm
Branch: MAIN
Changes since 1.55: +1 -2 lines
Diff to previous 1.55 (colored)

kill some more tiny files; ok deraadt@

Revision 1.47.2.2 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:15 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.47.2.1: +5 -10 lines
Diff to previous 1.47.2.1 (colored) to branchpoint 1.47 (colored) next main 1.48 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.52.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:32 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.52: +5 -10 lines
Diff to previous 1.52 (colored)

upgrade to OpenSSH 3.8

Revision 1.55 / (download) - annotate - [select for diffs], Sat Nov 8 16:02:40 2003 UTC (20 years, 6 months ago) by jakob
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_5
Changes since 1.54: +1 -2 lines
Diff to previous 1.54 (colored)

remove unused variable (pw). ok djm@

Revision 1.54 / (download) - annotate - [select for diffs], Tue Nov 4 08:54:09 2003 UTC (20 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.53: +3 -3 lines
Diff to previous 1.53 (colored)

standardise arguments to auth methods - they should all take authctxt.
check authctxt->valid rather then pw != NULL; ok markus@

Revision 1.53 / (download) - annotate - [select for diffs], Tue Sep 23 20:17:11 2003 UTC (20 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.52: +3 -7 lines
Diff to previous 1.52 (colored)

replace fatal_cleanup() and linked list of fatal callbacks with static
cleanup_exit() function.  re-refine cleanup_exit() where appropriate,
allocate sshd's authctxt eary to allow simpler cleanup in sshd.
tested by many, ok deraadt@

Revision 1.44.2.2 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:24 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.44.2.1: +6 -116 lines
Diff to previous 1.44.2.1 (colored) to branchpoint 1.44 (colored) next main 1.45 (colored)

upgrade to OpenSSH 3.7

Revision 1.47.2.1 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:42 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.47: +6 -116 lines
Diff to previous 1.47 (colored)

upgrade to OpenSSH 3.7

Revision 1.52 / (download) - annotate - [select for diffs], Thu Aug 28 12:54:34 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.51: +1 -57 lines
Diff to previous 1.51 (colored)

remove kerberos support from ssh1, since it has been replaced with GSSAPI;
but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...

Revision 1.51 / (download) - annotate - [select for diffs], Tue Aug 26 09:58:43 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.50: +4 -2 lines
Diff to previous 1.50 (colored)

fix passwd auth for 'username leaks via timing'; with djm@, original patches from solar

Revision 1.50 / (download) - annotate - [select for diffs], Wed Aug 13 08:46:30 2003 UTC (20 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.49: +1 -22 lines
Diff to previous 1.49 (colored)

remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
fgsch@, miod@, henning@, jakob@ and others

Revision 1.49 / (download) - annotate - [select for diffs], Tue Jul 22 13:35:22 2003 UTC (20 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.48: +6 -41 lines
Diff to previous 1.48 (colored)

remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
test+ok henning@

Revision 1.48 / (download) - annotate - [select for diffs], Tue Apr 8 20:21:28 2003 UTC (21 years, 1 month ago) by itojun
Branch: MAIN
Changes since 1.47: +2 -2 lines
Diff to previous 1.47 (colored)

rename log() into logit() to avoid name conflict.  markus ok, from netbsd

Revision 1.40.2.3 / (download) - annotate - [select for diffs], Thu Apr 3 22:35:16 2003 UTC (21 years, 1 month ago) by miod
Branch: OPENBSD_3_1
Changes since 1.40.2.2: +3 -5 lines
Diff to previous 1.40.2.2 (colored) to branchpoint 1.40 (colored) next main 1.41 (colored)

Merge OpenSSH 3.6.1

Revision 1.44.2.1 / (download) - annotate - [select for diffs], Tue Apr 1 00:12:13 2003 UTC (21 years, 1 month ago) by margarida
Branch: OPENBSD_3_2
Changes since 1.44: +3 -5 lines
Diff to previous 1.44 (colored)

Update to OpenSSH 3.6

Revision 1.47 / (download) - annotate - [select for diffs], Thu Feb 6 21:22:42 2003 UTC (21 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE
Branch point for: OPENBSD_3_3
Changes since 1.46: +2 -3 lines
Diff to previous 1.46 (colored)

undo broken fix for #387, fixes #486

Revision 1.46 / (download) - annotate - [select for diffs], Thu Jan 23 00:03:00 2003 UTC (21 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.45: +1 -2 lines
Diff to previous 1.45 (colored)

Don't log TIS auth response; "get rid of it" - markus@

Revision 1.45 / (download) - annotate - [select for diffs], Thu Nov 21 23:03:51 2002 UTC (21 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.44: +2 -2 lines
Diff to previous 1.44 (colored)

KNF

Revision 1.25.2.4 / (download) - annotate - [select for diffs], Fri Oct 11 14:53:06 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.25.2.3: +28 -7 lines
Diff to previous 1.25.2.3 (colored) to branchpoint 1.25 (colored) next main 1.26 (colored)

Update to OpenSSH 3.5

Revision 1.40.2.2 / (download) - annotate - [select for diffs], Fri Oct 11 14:51:52 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_1
Changes since 1.40.2.1: +28 -7 lines
Diff to previous 1.40.2.1 (colored) to branchpoint 1.40 (colored)

Update to OpenSSH 3.5

Revision 1.44 / (download) - annotate - [select for diffs], Thu Sep 26 11:38:43 2002 UTC (21 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_2
Changes since 1.43: +12 -4 lines
Diff to previous 1.43 (colored)

krb4 + privsep; ok dugsong@, deraadt@

Revision 1.43 / (download) - annotate - [select for diffs], Mon Sep 9 06:48:06 2002 UTC (21 years, 8 months ago) by itojun
Branch: MAIN
Changes since 1.42: +15 -3 lines
Diff to previous 1.42 (colored)

kerberos support for privsep.  confirmed to work by lha@stacken.kth.se
patch from markus

Revision 1.42 / (download) - annotate - [select for diffs], Thu Aug 22 21:33:58 2002 UTC (21 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.41: +3 -2 lines
Diff to previous 1.41 (colored)

auth_root_allowed() is handled by the monitor in the privsep case,
so skip this for use_privsep, ok stevesk@, fixes bugzilla #387/325

Revision 1.40.2.1 / (download) - annotate - [select for diffs], Wed Jun 26 15:30:37 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.40: +2 -2 lines
Diff to previous 1.40 (colored)

Pull in OpenSSH-3.4

Revision 1.25.2.3 / (download) - annotate - [select for diffs], Sat Jun 22 07:23:16 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.25.2.2: +2 -2 lines
Diff to previous 1.25.2.2 (colored) to branchpoint 1.25 (colored)

Update OpenSSH to version 3.3 (with local changes, configuration files still
living in /etc and privsep user being nobody).

Revision 1.41 / (download) - annotate - [select for diffs], Wed Jun 19 00:27:55 2002 UTC (21 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.40: +2 -2 lines
Diff to previous 1.40 (colored)

KNF done automatically while reading....

Revision 1.22.2.3 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:09 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.22.2.2: +21 -20 lines
Diff to previous 1.22.2.2 (colored) to branchpoint 1.22 (colored) next main 1.23 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.25.2.2 / (download) - annotate - [select for diffs], Fri May 17 00:03:23 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.25.2.1: +21 -20 lines
Diff to previous 1.25.2.1 (colored) to branchpoint 1.25 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.40 / (download) - annotate - [select for diffs], Wed Apr 10 08:21:47 2002 UTC (22 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.39: +10 -4 lines
Diff to previous 1.39 (colored)

strip '@' from username only for KerbV and known broken clients, bug #204

Revision 1.39 / (download) - annotate - [select for diffs], Tue Mar 19 14:27:39 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.38: +6 -16 lines
Diff to previous 1.38 (colored)

make getpwnamallow() allways call pwcopy()

Revision 1.38 / (download) - annotate - [select for diffs], Mon Mar 18 17:50:31 2002 UTC (22 years, 2 months ago) by provos
Branch: MAIN
Changes since 1.37: +15 -9 lines
Diff to previous 1.37 (colored)

integrate privilege separated openssh; its turned off by default for now.
work done by me and markus@

Revision 1.37 / (download) - annotate - [select for diffs], Mon Mar 18 01:12:14 2002 UTC (22 years, 2 months ago) by provos
Branch: MAIN
Changes since 1.36: +3 -4 lines
Diff to previous 1.36 (colored)

have the authentication functions return the authentication context
and then do_authenticated; okay millert@

Revision 1.36 / (download) - annotate - [select for diffs], Sun Mar 17 20:25:56 2002 UTC (22 years, 2 months ago) by provos
Branch: MAIN
Changes since 1.35: +3 -3 lines
Diff to previous 1.35 (colored)

getpwnamallow returns struct passwd * only if user valid; okay markus@

Revision 1.22.2.2 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:43 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.22.2.1: +35 -40 lines
Diff to previous 1.22.2.1 (colored) to branchpoint 1.22 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.6.2.7 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:41 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.6.2.6: +35 -40 lines
Diff to previous 1.6.2.6 (colored) to branchpoint 1.6 (colored) next main 1.7 (colored)

Merge OpenSSH 3.1.

Revision 1.25.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:46 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.25: +35 -40 lines
Diff to previous 1.25 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.35 / (download) - annotate - [select for diffs], Sun Feb 3 17:53:25 2002 UTC (22 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.34: +2 -1 lines
Diff to previous 1.34 (colored)

don't use channel_input_channel_request and callback
use new server_input_channel_req() instead:
	server_input_channel_req does generic request parsing on server side
	session_input_channel_req handles just session specific things now
ok djm@

Revision 1.34 / (download) - annotate - [select for diffs], Fri Dec 28 14:50:54 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.33: +3 -5 lines
Diff to previous 1.33 (colored)

packet_read* no longer return the packet length, since it's not used.

Revision 1.33 / (download) - annotate - [select for diffs], Fri Dec 28 13:57:33 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.32: +5 -5 lines
Diff to previous 1.32 (colored)

packet_get_bignum* no longer returns a size

Revision 1.32 / (download) - annotate - [select for diffs], Fri Dec 28 12:14:27 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.31: +8 -8 lines
Diff to previous 1.31 (colored)

s/packet_done/packet_check_eom/ (end-of-message); ok djm@

Revision 1.31 / (download) - annotate - [select for diffs], Thu Dec 27 20:39:58 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.30: +8 -9 lines
Diff to previous 1.30 (colored)

get rid of packet_integrity_check, use packet_done() instead.

Revision 1.30 / (download) - annotate - [select for diffs], Thu Dec 27 19:54:53 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.29: +2 -2 lines
Diff to previous 1.29 (colored)

auth_rhosts_rsa now accept generic keys.

Revision 1.29 / (download) - annotate - [select for diffs], Thu Dec 27 18:22:16 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.28: +13 -18 lines
Diff to previous 1.28 (colored)

call fatal() for openssl allocation failures

Revision 1.28 / (download) - annotate - [select for diffs], Tue Dec 25 18:53:00 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.27: +3 -1 lines
Diff to previous 1.27 (colored)

be more carefull on allocation

Revision 1.27 / (download) - annotate - [select for diffs], Wed Dec 19 07:18:56 2001 UTC (22 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.26: +11 -11 lines
Diff to previous 1.26 (colored)

basic KNF done while i was looking for something else

Revision 1.26 / (download) - annotate - [select for diffs], Wed Dec 5 03:56:39 2001 UTC (22 years, 5 months ago) by itojun
Branch: MAIN
Changes since 1.25: +2 -2 lines
Diff to previous 1.25 (colored)

make it compile with more strict prototype checking

Revision 1.22.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:54 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.22: +65 -57 lines
Diff to previous 1.22 (colored)

Pull in OpenSSH-2.9.9

Revision 1.6.2.6 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:41 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.6.2.5: +65 -57 lines
Diff to previous 1.6.2.5 (colored) to branchpoint 1.6 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.25 / (download) - annotate - [select for diffs], Tue Jun 26 16:15:23 2001 UTC (22 years, 10 months ago) by dugsong
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.24: +59 -52 lines
Diff to previous 1.24 (colored)

Kerberos v5 support for SSH1, mostly from Assar Westerlund <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok

Revision 1.24 / (download) - annotate - [select for diffs], Sat Jun 23 15:12:17 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.23: +3 -3 lines
Diff to previous 1.23 (colored)

more strict prototypes.  raise warning level in Makefile.inc.  markus ok'ed
TODO; cleanup headers

Revision 1.23 / (download) - annotate - [select for diffs], Fri May 18 14:13:28 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.22: +5 -4 lines
Diff to previous 1.22 (colored)

improved kbd-interactive support. work by per@appgate.com and me

Revision 1.6.2.5 / (download) - annotate - [select for diffs], Mon May 7 21:09:26 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.6.2.4: +10 -7 lines
Diff to previous 1.6.2.4 (colored) to branchpoint 1.6 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.22 / (download) - annotate - [select for diffs], Fri Mar 23 12:02:49 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.21: +1 -4 lines
Diff to previous 1.21 (colored)

authctxt is now passed to do_authenticated

Revision 1.6.2.4 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:22 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.6.2.3: +2 -2 lines
Diff to previous 1.6.2.3 (colored) to branchpoint 1.6 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.2.2.5 / (download) - annotate - [select for diffs], Wed Mar 21 18:52:34 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.2.2.4: +2 -2 lines
Diff to previous 1.2.2.4 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.21 / (download) - annotate - [select for diffs], Wed Mar 21 11:43:44 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.20: +2 -2 lines
Diff to previous 1.20 (colored)

merge common ssh v1/2 code

Revision 1.20 / (download) - annotate - [select for diffs], Tue Mar 20 18:57:04 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.19: +9 -3 lines
Diff to previous 1.19 (colored)

add changes need for BSD_AUTH plus disabled BSD_AUTH code

Revision 1.2.2.4 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:07 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.2.2.3: +84 -130 lines
Diff to previous 1.2.2.3 (colored) to branchpoint 1.2 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.19 / (download) - annotate - [select for diffs], Thu Mar 8 18:47:12 2001 UTC (23 years, 2 months ago) by stevesk
Branch: MAIN
Changes since 1.18: +1 -2 lines
Diff to previous 1.18 (colored)

unused; ok markus@

Revision 1.18 / (download) - annotate - [select for diffs], Thu Feb 22 21:59:43 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.17: +2 -1 lines
Diff to previous 1.17 (colored)

use pwcopy in ssh.c, too

Revision 1.6.2.3 / (download) - annotate - [select for diffs], Mon Feb 19 17:18:38 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.6.2.2: +0 -0 lines
Diff to previous 1.6.2.2 (colored) to branchpoint 1.6 (colored)

Pull in OpenSSH-2.5.1

Revision 1.6.2.2 / (download) - annotate - [select for diffs], Fri Feb 16 20:12:53 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.6.2.1: +84 -130 lines
Diff to previous 1.6.2.1 (colored) to branchpoint 1.6 (colored)

Pull in OpenSSH 2.5.0

Revision 1.17 / (download) - annotate - [select for diffs], Tue Feb 13 22:49:40 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.16: +3 -3 lines
Diff to previous 1.16 (colored)

setproctitle(user) only if getpwnam succeeds

Revision 1.16 / (download) - annotate - [select for diffs], Mon Feb 12 16:16:23 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.15: +3 -2 lines
Diff to previous 1.15 (colored)

PermitRootLogin={yes,without-password,forced-commands-only,no}
(before this change, root could login even if PermitRootLogin==no)

Revision 1.15 / (download) - annotate - [select for diffs], Wed Feb 7 22:35:45 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.14: +1 -9 lines
Diff to previous 1.14 (colored)

move k_setpag() to a central place; ok dugsong@

Revision 1.14 / (download) - annotate - [select for diffs], Mon Jan 22 23:06:39 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.13: +3 -3 lines
Diff to previous 1.13 (colored)

rename skey -> challenge response.
auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.

Revision 1.13 / (download) - annotate - [select for diffs], Sun Jan 21 19:05:43 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (colored)

split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.
rename util.[ch] -> misc.[ch]

Revision 1.12 / (download) - annotate - [select for diffs], Fri Jan 19 15:55:10 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.11: +2 -1 lines
Diff to previous 1.11 (colored)

move ssh1 definitions to ssh1.h, pathnames to pathnames.h

Revision 1.11 / (download) - annotate - [select for diffs], Thu Jan 18 16:59:59 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.10: +74 -115 lines
Diff to previous 1.10 (colored)

1) removes fake skey from sshd, since this will be much
   harder with /usr/libexec/auth/login_XXX
2) share/unify code used in ssh-1 and ssh-2 authentication (server side)
3) make addition of BSD_AUTH and other challenge reponse methods
   easier.

Revision 1.10 / (download) - annotate - [select for diffs], Sun Jan 7 19:06:25 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.9: +2 -1 lines
Diff to previous 1.9 (colored)

missing free, stevesk@pobox.com

Revision 1.9 / (download) - annotate - [select for diffs], Wed Dec 27 12:34:49 2000 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.8: +4 -4 lines
Diff to previous 1.8 (colored)

typo

Revision 1.8 / (download) - annotate - [select for diffs], Tue Dec 19 23:17:55 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.7: +6 -6 lines
Diff to previous 1.7 (colored)

replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'
with u_char.

Revision 1.6.2.1 / (download) - annotate - [select for diffs], Fri Nov 10 20:51:02 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

Pull in patch from current:
Errata:
skey logins for ssh-1 do not work.
Fix (markus):
typo; from mouring@pconline.com

Revision 1.2.2.3 / (download) - annotate - [select for diffs], Fri Nov 10 20:49:29 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.2.2.2: +2 -2 lines
Diff to previous 1.2.2.2 (colored) to branchpoint 1.2 (colored)

Pull in patch from current:
Errata:
skey logins for ssh-1 do not work.
Fix (markus):
typo; from mouring@pconline.com

Revision 1.7 / (download) - annotate - [select for diffs], Fri Nov 10 01:04:40 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

typo; from mouring@pconline.com

Revision 1.2.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 21:30:23 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.2.2.1: +63 -112 lines
Diff to previous 1.2.2.1 (colored) to branchpoint 1.2 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.6 / (download) - annotate - [select for diffs], Wed Oct 11 20:27:23 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.5: +1 -2 lines
Diff to previous 1.5 (colored)

new cipher framework

Revision 1.5 / (download) - annotate - [select for diffs], Tue Oct 3 18:03:03 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.4: +57 -111 lines
Diff to previous 1.4 (colored)

move fake-auth from auth1.c to individual auth methods, disables s/key in debug-msg

Revision 1.4 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:49 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.3: +7 -1 lines
Diff to previous 1.3 (colored)

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.2.2.1 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:17 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.2: +2 -1 lines
Diff to previous 1.2 (colored)

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.3 / (download) - annotate - [select for diffs], Sun Aug 20 18:42:40 2000 UTC (23 years, 9 months ago) by millert
Branch: MAIN
Changes since 1.2: +2 -1 lines
Diff to previous 1.2 (colored)

Add calls to setusercontext() and login_get*().  We basically call
setusercontext() in most places where previously we did a setlogin().
Add default login.conf file and put root in the "daemon" login class.

Revision 1.2 / (download) - annotate - [select for diffs], Sat Apr 29 18:11:52 2000 UTC (24 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.1: +3 -3 lines
Diff to previous 1.1 (colored)

keysize warnings error() -> log()

Revision 1.1 / (download) - annotate - [select for diffs], Wed Apr 26 21:28:32 2000 UTC (24 years ago) by markus
Branch: MAIN

split auth/sshconnect in one file per protocol version

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

Diffs between
and

Preferred Diff type:
View only Branch:
Sort log by: