OpenBSD CVS

CVS log for src/usr.bin/ssh/auth2.c


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.169 / (download) - annotate - [select for diffs], Fri May 17 00:30:23 2024 UTC (3 hours, 13 minutes ago) by djm
Branch: MAIN
CVS Tags: HEAD
Changes since 1.168: +16 -65 lines
Diff to previous 1.168 (colored)

Start the process of splitting sshd into separate binaries. This step
splits sshd into a listener and a session binary. More splits are
planned.

After this changes, the listener binary will validate the configuration,
load the hostkeys, listen on port 22 and manage MaxStartups only. All
session handling will be performed by a new sshd-session binary that the
listener fork+execs.

This reduces the listener process to the minimum necessary and sets us
up for future work on the sshd-session binary.

feedback/ok markus@ deraadt@

NB. if you're updating via source, please restart sshd after installing,
otherwise you run the risk of locking yourself out.

Revision 1.168 / (download) - annotate - [select for diffs], Mon Dec 18 14:45:49 2023 UTC (4 months, 4 weeks ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5
Changes since 1.167: +7 -1 lines
Diff to previous 1.167 (colored)

add "ext-info-in-auth@openssh.com" extension

This adds another transport protocol extension to allow a sshd to send
SSH2_MSG_EXT_INFO during user authentication, after the server has
learned the username that is being logged in to.

This lets sshd to update the acceptable signature algoritms for public
key authentication, and allows these to be varied via sshd_config(5)
"Match" directives, which are evaluated after the server learns the
username being authenticated.

Full details in the PROTOCOL file

Revision 1.167 / (download) - annotate - [select for diffs], Mon Aug 28 09:48:11 2023 UTC (8 months, 2 weeks ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_4_BASE, OPENBSD_7_4
Changes since 1.166: +9 -2 lines
Diff to previous 1.166 (colored)

limit artificial login delay to a reasonable maximum (5s) and don't
delay at all for the "none" authentication mechanism. Patch by
Dmitry Belyavskiy in bz3602 with polish/ok dtucker@

Revision 1.166 / (download) - annotate - [select for diffs], Wed Mar 8 04:43:12 2023 UTC (14 months, 1 week ago) by guenther
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE, OPENBSD_7_3
Changes since 1.165: +1 -3 lines
Diff to previous 1.165 (colored)

Delete obsolete /* ARGSUSED */ lint comments.

ok miod@ millert@

Revision 1.165 / (download) - annotate - [select for diffs], Sun Mar 5 05:34:09 2023 UTC (14 months, 1 week ago) by dtucker
Branch: MAIN
Changes since 1.164: +1 -2 lines
Diff to previous 1.164 (colored)

Remove unused compat.h includes.  We've previously removed a lot
of the really old compatibility code, and with it went the need to
include compat.h in most of the files that have it.

Revision 1.164 / (download) - annotate - [select for diffs], Wed Feb 23 11:18:13 2022 UTC (2 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1
Changes since 1.163: +4 -1 lines
Diff to previous 1.163 (colored)

avoid integer overflow of auth attempts (harmless, caught by monitor)

Revision 1.163 / (download) - annotate - [select for diffs], Sun Dec 26 23:34:41 2021 UTC (2 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.162: +35 -16 lines
Diff to previous 1.162 (colored)

split method list search functionality from authmethod_lookup() into
a separate authmethod_byname(), for cases where we don't need to
check whether a method is enabled, etc.

use this to fix the "none" authentication method regression reported
by Nam Nguyen via bugs@

ok deraadt@

Revision 1.162 / (download) - annotate - [select for diffs], Sun Dec 19 22:12:07 2021 UTC (2 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.161: +19 -9 lines
Diff to previous 1.161 (colored)

prepare for multiple names for authmethods

allow authentication methods to have one additional name beyond their
primary name.

allow lookup by this synonym

Use primary name for authentication decisions, e.g. for
PermitRootLogin=publickey

Pass actual invoked name to the authmethods, so they can tell whether they
were requested via the their primary name or synonym.

ok markus@

Revision 1.161 / (download) - annotate - [select for diffs], Sat Apr 3 06:18:40 2021 UTC (3 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.160: +3 -3 lines
Diff to previous 1.160 (colored)

highly polished whitespace, mostly fixing spaces-for-tab and bad
indentation on continuation lines. Prompted by GHPR#185

Revision 1.160 / (download) - annotate - [select for diffs], Wed Jan 27 10:05:28 2021 UTC (3 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.159: +1 -3 lines
Diff to previous 1.159 (colored)

make ssh->kex->session_id a sshbuf instead of u_char*/size_t and
use that instead of global variables containing copies of it.
feedback/ok markus@

Revision 1.159 / (download) - annotate - [select for diffs], Sun Oct 18 11:32:01 2020 UTC (3 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.158: +27 -29 lines
Diff to previous 1.158 (colored)

use the new variant log macros instead of prepending __func__ and
appending ssh_err(r) manually; ok markus@

Revision 1.158 / (download) - annotate - [select for diffs], Fri Mar 6 18:16:21 2020 UTC (4 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.157: +2 -2 lines
Diff to previous 1.157 (colored)

exit on parse failures in input_service_request; ok djm

Revision 1.157 / (download) - annotate - [select for diffs], Fri Sep 6 04:53:27 2019 UTC (4 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.156: +2 -2 lines
Diff to previous 1.156 (colored)

lots of things were relying on libcrypto headers to transitively
include various system headers (mostly stdlib.h); include them
explicitly

Revision 1.156 / (download) - annotate - [select for diffs], Fri Jun 28 05:44:09 2019 UTC (4 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.155: +2 -2 lines
Diff to previous 1.155 (colored)

asprintf returns -1, not an arbitrary value < 0.  Also upon error the
(very sloppy specification) leaves an undefined value in *ret, so it is
wrong to inspect it, the error condition is enough.
discussed a little with nicm, and then much more with millert until we
were exasperated

Revision 1.155 / (download) - annotate - [select for diffs], Mon Mar 25 22:34:52 2019 UTC (5 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.154: +9 -1 lines
Diff to previous 1.154 (colored)

Fix authentication failures when "AuthenticationMethods any" in a
Match block overrides a more restrictive global default.

Spotted by jmc@, ok markus@

Revision 1.154 / (download) - annotate - [select for diffs], Sat Jan 19 21:41:18 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.153: +4 -4 lines
Diff to previous 1.153 (colored)

convert auth.c to new packet API

with & ok markus@

Revision 1.153 / (download) - annotate - [select for diffs], Sat Jan 19 21:38:24 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.152: +54 -43 lines
Diff to previous 1.152 (colored)

convert auth2.c to new packet API

Revision 1.152 / (download) - annotate - [select for diffs], Sat Jan 19 21:31:32 2019 UTC (5 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.151: +4 -1 lines
Diff to previous 1.151 (colored)

begin landing remaining refactoring of packet parsing API, started
almost exactly six years ago.

This change stops including the old packet_* API by default and makes
each file that requires the old API include it explicitly. We will
commit file-by-file refactoring to remove the old API in consistent
steps.

with & ok markus@

Revision 1.151 / (download) - annotate - [select for diffs], Thu Jan 17 04:20:53 2019 UTC (5 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.150: +2 -1 lines
Diff to previous 1.150 (colored)

include time.h for time(3)/nanosleep(2); from Ian McKellar

Revision 1.150 / (download) - annotate - [select for diffs], Thu Sep 13 02:08:33 2018 UTC (5 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.149: +3 -3 lines
Diff to previous 1.149 (colored)

hold our collective noses and use the openssl-1.1.x API in OpenSSH;
feedback and ok tb@ jsing@ markus@

Revision 1.149 / (download) - annotate - [select for diffs], Wed Jul 11 18:53:29 2018 UTC (5 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.148: +2 -2 lines
Diff to previous 1.148 (colored)

remove legacy key emulation layer; ok djm@

Revision 1.148 / (download) - annotate - [select for diffs], Mon Jul 9 21:35:50 2018 UTC (5 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.147: +11 -11 lines
Diff to previous 1.147 (colored)

sshd: switch authentication to sshbuf API; ok djm@

Revision 1.147 / (download) - annotate - [select for diffs], Fri May 11 03:22:55 2018 UTC (6 years ago) by dtucker
Branch: MAIN
Changes since 1.146: +3 -2 lines
Diff to previous 1.146 (colored)

Explicit cast when snprintf'ing an uint64.  Prevents warnings on platforms
where int64 is long not long long.  ok djm@

Revision 1.146 / (download) - annotate - [select for diffs], Fri Apr 13 03:57:26 2018 UTC (6 years, 1 month ago) by dtucker
Branch: MAIN
Changes since 1.145: +42 -1 lines
Diff to previous 1.145 (colored)

Defend against user enumeration timing attacks.
This establishes a minimum time for each failed authentication
attempt (5ms) and adds a per-user constant derived from a host
secret (0-4ms).  Based on work by joona.kannisto at tut.fi, ok
markus@ djm@.

Revision 1.145 / (download) - annotate - [select for diffs], Sat Mar 3 03:15:51 2018 UTC (6 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.144: +2 -2 lines
Diff to previous 1.144 (colored)

switch over to the new authorized_keys options API and remove the
legacy one.

Includes a fairly big refactor of auth2-pubkey.c to retain less state
between key file lines.

feedback and ok markus@

Revision 1.144 / (download) - annotate - [select for diffs], Tue Jan 23 05:27:21 2018 UTC (6 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.143: +2 -2 lines
Diff to previous 1.143 (colored)

Drop compatibility hacks for some ancient SSH implementations, including
ssh.com <=2.* and OpenSSH <= 3.*.

These versions were all released in or before 2001 and predate the
final SSH RFCs. The hacks in question aren't necessary for RFC-
compliant SSH implementations.

ok markus@

Revision 1.143 / (download) - annotate - [select for diffs], Sat Jun 24 06:34:38 2017 UTC (6 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.142: +132 -1 lines
Diff to previous 1.142 (colored)

refactor authentication logging

optionally record successful auth methods and public credentials
used in a file accessible to user sessions

feedback and ok markus@

Revision 1.142 / (download) - annotate - [select for diffs], Wed May 31 07:00:13 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.141: +2 -2 lines
Diff to previous 1.141 (colored)

remove now obsolete ctx from ssh_dispatch_run; ok djm@

Revision 1.141 / (download) - annotate - [select for diffs], Wed May 31 05:34:14 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.140: +2 -2 lines
Diff to previous 1.140 (colored)

use the ssh_dispatch_run_fatal variant

Revision 1.140 / (download) - annotate - [select for diffs], Tue May 30 14:29:59 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.139: +13 -13 lines
Diff to previous 1.139 (colored)

switch auth2 to ssh_dispatch API; ok djm@

Revision 1.139 / (download) - annotate - [select for diffs], Tue May 30 14:23:52 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.138: +5 -7 lines
Diff to previous 1.138 (colored)

protocol handlers all get struct ssh passed; ok djm@

Revision 1.138 / (download) - annotate - [select for diffs], Tue May 30 14:18:15 2017 UTC (6 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.137: +9 -5 lines
Diff to previous 1.137 (colored)

sshd: pass struct ssh to auth functions; ok djm@

Revision 1.137 / (download) - annotate - [select for diffs], Fri Feb 3 23:05:57 2017 UTC (7 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.136: +9 -3 lines
Diff to previous 1.136 (colored)

use ssh_packet_set_log_preamble() to include connection username
in packet log messages, e.g.

Connection closed by invalid user foo 10.1.1.1 port 44056 [preauth]

ok markus@ bz#113

Revision 1.136 / (download) - annotate - [select for diffs], Mon May 2 08:49:03 2016 UTC (8 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.135: +3 -3 lines
Diff to previous 1.135 (colored)

fix signed/unsigned errors reported by clang-3.7; add
sshbuf_dup_string() to replace a common idiom of
strdup(sshbuf_ptr()) with better safety checking;
feedback and ok markus@

Revision 1.135 / (download) - annotate - [select for diffs], Mon Jan 19 20:07:45 2015 UTC (9 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8, OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.134: +7 -5 lines
Diff to previous 1.134 (colored)

move dispatch to struct ssh; ok djm@

Revision 1.134 / (download) - annotate - [select for diffs], Mon Dec 22 07:55:51 2014 UTC (9 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.133: +2 -4 lines
Diff to previous 1.133 (colored)

make internal handling of filename arguments of "none" more consistent
with ssh. "none" arguments are now replaced with NULL when the
configuration is finalised.

Simplifies checking later on (just need to test not-NULL rather than
that + strcmp) and cleans up some inconsistencies. ok markus@

Revision 1.133 / (download) - annotate - [select for diffs], Thu Dec 18 23:58:04 2014 UTC (9 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.132: +2 -2 lines
Diff to previous 1.132 (colored)

don't count partial authentication success as a failure against
MaxAuthTries; ok deraadt@

Revision 1.132 / (download) - annotate - [select for diffs], Tue Jul 15 15:54:14 2014 UTC (9 years, 10 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.131: +2 -1 lines
Diff to previous 1.131 (colored)

Add support for Unix domain socket forwarding.  A remote TCP port
may be forwarded to a local Unix domain socket and vice versa or
both ends may be a Unix domain socket.  This is a reimplementation
of the streamlocal patches by William Ahern from:
    http://www.25thandclement.com/~william/projects/streamlocal.html
OK djm@ markus@

Revision 1.131 / (download) - annotate - [select for diffs], Thu Jul 3 11:16:55 2014 UTC (9 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.130: +2 -2 lines
Diff to previous 1.130 (colored)

make the "Too many authentication failures" message include the
user, source address, port and protocol in a format similar to the
authentication success / failure messages; bz#2199, ok dtucker

Revision 1.130 / (download) - annotate - [select for diffs], Wed Jan 29 06:18:35 2014 UTC (10 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.129: +1 -10 lines
Diff to previous 1.129 (colored)

remove experimental, never-enabled JPAKE code; ok markus@

Revision 1.129 / (download) - annotate - [select for diffs], Sun May 19 02:42:42 2013 UTC (11 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.128: +2 -2 lines
Diff to previous 1.128 (colored)

Standardise logging of supplemental information during userauth. Keys
and ruser is now logged in the auth success/failure message alongside
the local username, remote host/port and protocol in use. Certificates
contents and CA are logged too.

Pushing all logging onto a single line simplifies log analysis as it is
no longer necessary to relate information scattered across multiple log
entries. "I like it" markus@

Revision 1.128 / (download) - annotate - [select for diffs], Fri May 17 00:13:13 2013 UTC (11 years ago) by djm
Branch: MAIN
Changes since 1.127: +8 -9 lines
Diff to previous 1.127 (colored)

bye, bye xfree(); ok markus@

Revision 1.127 / (download) - annotate - [select for diffs], Thu Mar 7 19:27:25 2013 UTC (11 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.126: +55 -21 lines
Diff to previous 1.126 (colored)

add submethod support to AuthenticationMethods; ok and freedback djm@

Revision 1.126 / (download) - annotate - [select for diffs], Sun Dec 2 20:34:09 2012 UTC (11 years, 5 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.125: +12 -9 lines
Diff to previous 1.125 (colored)

Fixes logging of partial authentication when privsep is enabled
Previously, we recorded "Failed xxx" since we reset authenticated before
calling auth_log() in auth2.c. This adds an explcit "Partial" state.

Add a "submethod" to auth_log() to report which submethod is used
for keyboard-interactive.

Fix multiple authentication when one of the methods is
keyboard-interactive.

ok markus@

Revision 1.125 / (download) - annotate - [select for diffs], Sun Nov 4 11:09:15 2012 UTC (11 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.124: +200 -18 lines
Diff to previous 1.124 (colored)

Support multiple required authentication via an AuthenticationMethods
option. This option lists one or more comma-separated lists of
authentication method names. Successful completion of all the methods in
any list is required for authentication to complete;
feedback and ok markus@

Revision 1.124 / (download) - annotate - [select for diffs], Wed Dec 7 05:44:38 2011 UTC (12 years, 5 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1
Changes since 1.123: +2 -2 lines
Diff to previous 1.123 (colored)

fix some harmless and/or unreachable int overflows;
reported Xi Wang, ok markus@

Revision 1.123 / (download) - annotate - [select for diffs], Thu Mar 10 02:52:57 2011 UTC (13 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.122: +4 -2 lines
Diff to previous 1.122 (colored)

allow GSSAPI authentication to detect when a server-side failure causes
authentication failure and don't count such failures against MaxAuthTries;
bz#1244 from simon AT sxw.org.uk; ok markus@ before lock

Revision 1.122 / (download) - annotate - [select for diffs], Tue Aug 31 09:58:37 2010 UTC (13 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.121: +5 -5 lines
Diff to previous 1.121 (colored)

Add buffer_get_cstring() and related functions that verify that the
string extracted from the buffer contains no embedded \0 characters*
This prevents random (possibly malicious) crap from being appended to
strings where it would not be noticed if the string is used with
a string(3) function.

Use the new API in a few sensitive places.

* actually, we allow a single one at the end of the string for now because
we don't know how many deployed implementations get this wrong, but don't
count on this to remain indefinitely.

Revision 1.121 / (download) - annotate - [select for diffs], Mon Jun 22 05:39:28 2009 UTC (14 years, 10 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6
Changes since 1.120: +2 -2 lines
Diff to previous 1.120 (colored)

alphabetize includes; reduces diff vs portable and style(9).  ok stevesk djm

Revision 1.120 / (download) - annotate - [select for diffs], Tue Nov 4 08:22:12 2008 UTC (15 years, 6 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_5_BASE, OPENBSD_4_5
Changes since 1.119: +11 -1 lines
Diff to previous 1.119 (colored)

Add support for an experimental zero-knowledge password authentication
method using the J-PAKE protocol described in F. Hao, P. Ryan,
"Password Authenticated Key Exchange by Juggling", 16th Workshop on
Security Protocols, Cambridge, April 2008.

This method allows password-based authentication without exposing
the password to the server. Instead, the client and server exchange
cryptographic proofs to demonstrate of knowledge of the password while
revealing nothing useful to an attacker or compromised endpoint.

This is experimental, work-in-progress code and is presently
compiled-time disabled (turn on -DJPAKE in Makefile.inc).

"just commit it.  It isn't too intrusive." deraadt@

Revision 1.119 / (download) - annotate - [select for diffs], Fri Jul 4 23:30:16 2008 UTC (15 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.118: +5 -2 lines
Diff to previous 1.118 (colored)

Make protocol 1 MaxAuthTries logic match protocol 2's.

Do not treat the first protocol 2 authentication attempt as
a failure IFF it is for method "none".

Makes MaxAuthTries' user-visible behaviour identical for
protocol 1 vs 2.

ok dtucker@

Revision 1.118 / (download) - annotate - [select for diffs], Wed Jul 2 13:30:34 2008 UTC (15 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.117: +2 -2 lines
Diff to previous 1.117 (colored)

really really remove the freebie "none" auth try for protocol 2

Revision 1.117 / (download) - annotate - [select for diffs], Wed Jul 2 12:36:39 2008 UTC (15 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.116: +66 -4 lines
Diff to previous 1.116 (colored)

Make protocol 2 MaxAuthTries behaviour a little more sensible:

Check whether client has exceeded MaxAuthTries before running
an authentication method and skip it if they have, previously it
would always allow one try (for "none" auth).

Preincrement failure count before post-auth test - previously this
checked and postincremented, also to allow one "none" try.

Together, these two changes always count the "none" auth method
which could be skipped by a malicious client (e.g. an SSH worm)
to get an extra attempt at a real auth method. They also make
MaxAuthTries=0 a useful way to block users entirely (esp. in a
sshd_config Match block).

Also, move sending of any preauth banner from "none" auth method
to the first call to input_userauth_request(), so worms that skip
the "none" method get to see it too.

Revision 1.116 / (download) - annotate - [select for diffs], Sat Sep 29 00:25:51 2007 UTC (16 years, 7 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.115: +1 -2 lines
Diff to previous 1.115 (colored)

Remove unused prototype.  ok djm@

Revision 1.115 / (download) - annotate - [select for diffs], Sat Apr 14 22:01:58 2007 UTC (17 years, 1 month ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.114: +1 -3 lines
Diff to previous 1.114 (colored)

remove unused macro; from Dmitry V. Levin <ldv@altlinux.org>

Revision 1.114 / (download) - annotate - [select for diffs], Thu Mar 1 10:28:02 2007 UTC (17 years, 2 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1
Changes since 1.113: +1 -5 lines
Diff to previous 1.113 (colored)

Remove ChallengeResponseAuthentication support inside a Match
block as its interaction with KbdInteractive makes it difficult to
support.  Also, relocate the CR/kbdint option special-case code into
servconf.  "please commit" djm@, ok markus@ for the relocation.

Revision 1.107.6.1 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:32 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.107: +14 -5 lines
Diff to previous 1.107 (colored) next main 1.108 (colored)

upgrade to OpenSSH 4.4

Revision 1.107.8.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:50 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.107: +14 -5 lines
Diff to previous 1.107 (colored) next main 1.108 (colored)

upgrade to OpenSSH 4.4

Revision 1.113 / (download) - annotate - [select for diffs], Thu Aug 3 03:34:41 2006 UTC (17 years, 9 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.112: +7 -5 lines
Diff to previous 1.112 (colored)

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

Revision 1.112 / (download) - annotate - [select for diffs], Sat Jul 22 20:48:22 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.111: +2 -1 lines
Diff to previous 1.111 (colored)

move #include <string.h> out of includes.h

Revision 1.111 / (download) - annotate - [select for diffs], Thu Jul 6 16:03:53 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.110: +5 -1 lines
Diff to previous 1.110 (colored)

move #include <pwd.h> out of includes.h; ok markus@

Revision 1.110 / (download) - annotate - [select for diffs], Sat Mar 25 13:17:01 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.109: +1 -0 lines
Diff to previous 1.109 (colored)

Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
Theo nuked - our scripts to sync -portable need them in the files

Revision 1.109 / (download) - annotate - [select for diffs], Mon Mar 20 18:17:20 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.108: +2 -0 lines
Diff to previous 1.108 (colored)

sprinkle some ARGSUSED for table driven functions (which sometimes must ignore their args)

Revision 1.108 / (download) - annotate - [select for diffs], Sun Mar 19 18:51:18 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.107: +0 -1 lines
Diff to previous 1.107 (colored)

RCSID() can die

Revision 1.102.2.2 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:30 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.102.2.1: +4 -4 lines
Diff to previous 1.102.2.1 (colored) to branchpoint 1.102 (colored) next main 1.103 (colored)

upgrade to OpenSSH 3.9

Revision 1.104.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:26 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.104: +4 -4 lines
Diff to previous 1.104 (colored) next main 1.105 (colored)

upgrade to OpenSSH 3.9

Revision 1.107 / (download) - annotate - [select for diffs], Wed Jul 28 09:40:29 2004 UTC (19 years, 9 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_8_BASE, OPENBSD_3_7_BASE, OPENBSD_3_7, OPENBSD_3_6_BASE, OPENBSD_3_6
Branch point for: OPENBSD_3_9, OPENBSD_3_8
Changes since 1.106: +2 -2 lines
Diff to previous 1.106 (colored)

more s/illegal/invalid/

Revision 1.106 / (download) - annotate - [select for diffs], Wed Jul 21 10:33:31 2004 UTC (19 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.105: +2 -2 lines
Diff to previous 1.105 (colored)

bz#899: Don't display invalid usernames in setproctitle
from peak AT argo.troja.mff.cuni.cz; ok markus@

Revision 1.105 / (download) - annotate - [select for diffs], Sun May 23 23:59:53 2004 UTC (19 years, 11 months ago) by dtucker
Branch: MAIN
Changes since 1.104: +2 -2 lines
Diff to previous 1.104 (colored)

Add MaxAuthTries sshd config option; ok markus@

Revision 1.96.2.2 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:15 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.96.2.1: +3 -20 lines
Diff to previous 1.96.2.1 (colored) to branchpoint 1.96 (colored) next main 1.97 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.102.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:32 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.102: +3 -20 lines
Diff to previous 1.102 (colored)

upgrade to OpenSSH 3.8

Revision 1.104 / (download) - annotate - [select for diffs], Tue Nov 4 08:54:09 2003 UTC (20 years, 6 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_5
Changes since 1.103: +1 -2 lines
Diff to previous 1.103 (colored)

standardise arguments to auth methods - they should all take authctxt.
check authctxt->valid rather then pw != NULL; ok markus@

Revision 1.103 / (download) - annotate - [select for diffs], Tue Sep 23 20:17:11 2003 UTC (20 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.102: +3 -19 lines
Diff to previous 1.102 (colored)

replace fatal_cleanup() and linked list of fatal callbacks with static
cleanup_exit() function.  re-refine cleanup_exit() where appropriate,
allocate sshd's authctxt eary to allow simpler cleanup in sshd.
tested by many, ok deraadt@

Revision 1.95.2.2 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:24 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.95.2.1: +20 -3 lines
Diff to previous 1.95.2.1 (colored) to branchpoint 1.95 (colored) next main 1.96 (colored)

upgrade to OpenSSH 3.7

Revision 1.96.2.1 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:42 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.96: +20 -3 lines
Diff to previous 1.96 (colored)

upgrade to OpenSSH 3.7

Revision 1.102 / (download) - annotate - [select for diffs], Tue Aug 26 09:58:43 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.101: +2 -1 lines
Diff to previous 1.101 (colored)

fix passwd auth for 'username leaks via timing'; with djm@, original patches from solar

Revision 1.101 / (download) - annotate - [select for diffs], Fri Aug 22 13:22:27 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.100: +1 -7 lines
Diff to previous 1.100 (colored)

nuke "kerberos-2@ssh.com"

Revision 1.100 / (download) - annotate - [select for diffs], Fri Aug 22 10:56:08 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.99: +17 -1 lines
Diff to previous 1.99 (colored)

support GSS API user authentication; patches from Simon Wilkinson,
stripped down and tested by Jakob and myself.

Revision 1.99 / (download) - annotate - [select for diffs], Tue Jun 24 08:23:46 2003 UTC (20 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.98: +2 -2 lines
Diff to previous 1.98 (colored)

int -> u_int; ok djm@, deraadt@, mouring@

Revision 1.98 / (download) - annotate - [select for diffs], Wed May 14 02:15:47 2003 UTC (21 years ago) by markus
Branch: MAIN
Changes since 1.97: +7 -1 lines
Diff to previous 1.97 (colored)

implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@
server interops with commercial client; ok jakob@ djm@

Revision 1.97 / (download) - annotate - [select for diffs], Tue Apr 8 20:21:28 2003 UTC (21 years, 1 month ago) by itojun
Branch: MAIN
Changes since 1.96: +2 -2 lines
Diff to previous 1.96 (colored)

rename log() into logit() to avoid name conflict.  markus ok, from netbsd

Revision 1.89.2.5 / (download) - annotate - [select for diffs], Thu Apr 3 22:35:16 2003 UTC (21 years, 1 month ago) by miod
Branch: OPENBSD_3_1
Changes since 1.89.2.4: +2 -3 lines
Diff to previous 1.89.2.4 (colored) to branchpoint 1.89 (colored) next main 1.90 (colored)

Merge OpenSSH 3.6.1

Revision 1.95.2.1 / (download) - annotate - [select for diffs], Tue Apr 1 00:12:13 2003 UTC (21 years, 1 month ago) by margarida
Branch: OPENBSD_3_2
Changes since 1.95: +2 -3 lines
Diff to previous 1.95 (colored)

Update to OpenSSH 3.6

Revision 1.96 / (download) - annotate - [select for diffs], Thu Feb 6 21:22:43 2003 UTC (21 years, 3 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE
Branch point for: OPENBSD_3_3
Changes since 1.95: +1 -2 lines
Diff to previous 1.95 (colored)

undo broken fix for #387, fixes #486

Revision 1.71.2.5 / (download) - annotate - [select for diffs], Fri Oct 11 14:53:06 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.71.2.4: +6 -5 lines
Diff to previous 1.71.2.4 (colored) to branchpoint 1.71 (colored) next main 1.72 (colored)

Update to OpenSSH 3.5

Revision 1.89.2.4 / (download) - annotate - [select for diffs], Fri Oct 11 14:51:52 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_1
Changes since 1.89.2.3: +6 -5 lines
Diff to previous 1.89.2.3 (colored) to branchpoint 1.89 (colored)

Update to OpenSSH 3.5

Revision 1.95 / (download) - annotate - [select for diffs], Thu Aug 22 21:33:58 2002 UTC (21 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_2
Changes since 1.94: +3 -2 lines
Diff to previous 1.94 (colored)

auth_root_allowed() is handled by the monitor in the privsep case,
so skip this for use_privsep, ok stevesk@, fixes bugzilla #387/325

Revision 1.94 / (download) - annotate - [select for diffs], Sun Jun 30 21:54:16 2002 UTC (21 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.93: +4 -4 lines
Diff to previous 1.93 (colored)

lint asks that we use names that do not overlap

Revision 1.89.2.3 / (download) - annotate - [select for diffs], Wed Jun 26 15:30:37 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.89.2.2: +32 -522 lines
Diff to previous 1.89.2.2 (colored) to branchpoint 1.89 (colored)

Pull in OpenSSH-3.4

Revision 1.71.2.4 / (download) - annotate - [select for diffs], Sat Jun 22 07:23:16 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.71.2.3: +32 -522 lines
Diff to previous 1.71.2.3 (colored) to branchpoint 1.71 (colored)

Update OpenSSH to version 3.3 (with local changes, configuration files still
living in /etc and privsep user being nobody).

Revision 1.56.2.5 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:09 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.56.2.4: +58 -32 lines
Diff to previous 1.56.2.4 (colored) to branchpoint 1.56 (colored) next main 1.57 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.93 / (download) - annotate - [select for diffs], Fri May 31 11:35:15 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.92: +32 -40 lines
Diff to previous 1.92 (colored)

move Authmethod definitons to per-method file.

Revision 1.92 / (download) - annotate - [select for diffs], Sat May 25 18:51:07 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.91: +1 -483 lines
Diff to previous 1.91 (colored)

split auth2.c into one file per method; ok provos@/deraadt@

Revision 1.89.2.2 / (download) - annotate - [select for diffs], Sat May 18 04:50:37 2002 UTC (22 years ago) by jason
Branch: OPENBSD_3_1
Changes since 1.89.2.1: +0 -0 lines
Diff to previous 1.89.2.1 (colored) to branchpoint 1.89 (colored)

Update to OpenSSH-3.2.3

Revision 1.89.2.1 / (download) - annotate - [select for diffs], Sat May 18 04:12:10 2002 UTC (22 years ago) by jason
Branch: OPENBSD_3_1
Changes since 1.89: +32 -12 lines
Diff to previous 1.89 (colored)

Update to OpenSSH-3.2.2

Revision 1.71.2.3 / (download) - annotate - [select for diffs], Fri May 17 00:03:23 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.71.2.2: +58 -32 lines
Diff to previous 1.71.2.2 (colored) to branchpoint 1.71 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.91 / (download) - annotate - [select for diffs], Mon May 13 02:37:39 2002 UTC (22 years ago) by itojun
Branch: MAIN
Changes since 1.90: +2 -1 lines
Diff to previous 1.90 (colored)

less warnings.  skey_{respond,query} are public (in auth.h)

Revision 1.90 / (download) - annotate - [select for diffs], Sun May 12 23:53:45 2002 UTC (22 years ago) by djm
Branch: MAIN
Changes since 1.89: +31 -12 lines
Diff to previous 1.89 (colored)

Fix sshd Banner option for privsep; ok markus@ provos@

Revision 1.89 / (download) - annotate - [select for diffs], Tue Mar 19 14:27:39 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.88: +4 -12 lines
Diff to previous 1.88 (colored)

make getpwnamallow() allways call pwcopy()

Revision 1.88 / (download) - annotate - [select for diffs], Mon Mar 18 17:50:31 2002 UTC (22 years, 2 months ago) by provos
Branch: MAIN
Changes since 1.87: +28 -15 lines
Diff to previous 1.87 (colored)

integrate privilege separated openssh; its turned off by default for now.
work done by me and markus@

Revision 1.87 / (download) - annotate - [select for diffs], Mon Mar 18 01:12:14 2002 UTC (22 years, 2 months ago) by provos
Branch: MAIN
Changes since 1.86: +4 -3 lines
Diff to previous 1.86 (colored)

have the authentication functions return the authentication context
and then do_authenticated; okay millert@

Revision 1.86 / (download) - annotate - [select for diffs], Sun Mar 17 20:25:56 2002 UTC (22 years, 2 months ago) by provos
Branch: MAIN
Changes since 1.85: +3 -3 lines
Diff to previous 1.85 (colored)

getpwnamallow returns struct passwd * only if user valid; okay markus@

Revision 1.56.2.4 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:44 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.56.2.3: +110 -116 lines
Diff to previous 1.56.2.3 (colored) to branchpoint 1.56 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.20.2.8 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:41 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.20.2.7: +110 -116 lines
Diff to previous 1.20.2.7 (colored) to branchpoint 1.20 (colored) next main 1.21 (colored)

Merge OpenSSH 3.1.

Revision 1.71.2.2 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:46 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.71.2.1: +110 -116 lines
Diff to previous 1.71.2.1 (colored) to branchpoint 1.71 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.85 / (download) - annotate - [select for diffs], Sun Feb 24 19:14:59 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.84: +5 -4 lines
Diff to previous 1.84 (colored)

signed vs. unsigned: make size arguments u_int, ok stevesk@

Revision 1.84 / (download) - annotate - [select for diffs], Mon Feb 4 11:58:10 2002 UTC (22 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.83: +77 -64 lines
Diff to previous 1.83 (colored)

cross checking of announced vs actual pktype in pubkey/hostbaed auth; ok stevesk@

Revision 1.83 / (download) - annotate - [select for diffs], Tue Jan 29 14:32:03 2002 UTC (22 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.82: +2 -2 lines
Diff to previous 1.82 (colored)

s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@

Revision 1.82 / (download) - annotate - [select for diffs], Sun Jan 13 17:57:37 2002 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.81: +9 -18 lines
Diff to previous 1.81 (colored)

use buffer API and avoid static strings of fixed size; ok provos@/mouring@

Revision 1.81 / (download) - annotate - [select for diffs], Fri Jan 11 13:39:36 2002 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.80: +3 -14 lines
Diff to previous 1.80 (colored)

a single dispatch_protocol_error() that sends a message of type 'UNIMPLEMENTED'
dispatch_range(): set handler for a ranges message types
use dispatch_protocol_ignore() for authentication requests after
	successful authentication (the drafts requirement).
serverloop/clientloop now send a 'UNIMPLEMENTED' message instead of exiting.

Revision 1.80 / (download) - annotate - [select for diffs], Fri Dec 28 15:06:00 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.79: +8 -8 lines
Diff to previous 1.79 (colored)

remove plen from the dispatch fn. it's no longer used.

Revision 1.79 / (download) - annotate - [select for diffs], Fri Dec 28 12:14:27 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.78: +7 -7 lines
Diff to previous 1.78 (colored)

s/packet_done/packet_check_eom/ (end-of-message); ok djm@

Revision 1.78 / (download) - annotate - [select for diffs], Thu Dec 20 22:50:24 2001 UTC (22 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.77: +8 -8 lines
Diff to previous 1.77 (colored)

Conformance fix: we should send failing packet sequence number when
responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by
yakk@yakk.dot.net; ok markus@

Revision 1.77 / (download) - annotate - [select for diffs], Wed Dec 19 07:18:56 2001 UTC (22 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.76: +3 -3 lines
Diff to previous 1.76 (colored)

basic KNF done while i was looking for something else

Revision 1.76 / (download) - annotate - [select for diffs], Tue Dec 18 10:05:15 2001 UTC (22 years, 5 months ago) by jakob
Branch: MAIN
Changes since 1.75: +6 -1 lines
Diff to previous 1.75 (colored)

log fingerprint on successful public key authentication; ok markus@

Revision 1.75 / (download) - annotate - [select for diffs], Sun Dec 9 18:45:56 2001 UTC (22 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.74: +2 -8 lines
Diff to previous 1.74 (colored)

add auth2_challenge_stop(), simplifies cleanup of kbd-int sessions,
fixes memleak.

Revision 1.74 / (download) - annotate - [select for diffs], Wed Dec 5 03:56:39 2001 UTC (22 years, 5 months ago) by itojun
Branch: MAIN
Changes since 1.73: +2 -2 lines
Diff to previous 1.73 (colored)

make it compile with more strict prototype checking

Revision 1.73 / (download) - annotate - [select for diffs], Sat Nov 17 19:14:34 2001 UTC (22 years, 6 months ago) by stevesk
Branch: MAIN
Changes since 1.72: +3 -2 lines
Diff to previous 1.72 (colored)

enum/int type cleanup where it made sense to do so; ok markus@

Revision 1.56.2.3 / (download) - annotate - [select for diffs], Thu Nov 15 22:51:15 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.56.2.2: +1 -2 lines
Diff to previous 1.56.2.2 (colored) to branchpoint 1.56 (colored)

Merge OpenSSH 3.0.1.

Revision 1.20.2.7 / (download) - annotate - [select for diffs], Thu Nov 15 22:50:30 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.20.2.6: +1 -2 lines
Diff to previous 1.20.2.6 (colored) to branchpoint 1.20 (colored)

Merge OpenSSH 3.0.1.

This is likely to be the last commit to the 2.8-STABLE branch.

Revision 1.56.2.2 / (download) - annotate - [select for diffs], Thu Nov 15 00:15:19 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.56.2.1: +2 -2 lines
Diff to previous 1.56.2.1 (colored) to branchpoint 1.56 (colored)

Merge OpenSSH 3.0

Revision 1.20.2.6 / (download) - annotate - [select for diffs], Thu Nov 15 00:14:59 2001 UTC (22 years, 6 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.20.2.5: +2 -2 lines
Diff to previous 1.20.2.5 (colored) to branchpoint 1.20 (colored)

Merge OpenSSH 3.0

Revision 1.71.2.1 / (download) - annotate - [select for diffs], Wed Nov 14 03:24:38 2001 UTC (22 years, 6 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.71: +1 -2 lines
Diff to previous 1.71 (colored)

Pull in patches from current (Errata 002):
Update to OpenSSH-3.0.1 via errata patch (Instead of using release tarball)

Revision 1.72 / (download) - annotate - [select for diffs], Wed Nov 7 22:41:51 2001 UTC (22 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.71: +1 -2 lines
Diff to previous 1.71 (colored)

unused includes

Revision 1.56.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:54 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.56: +109 -150 lines
Diff to previous 1.56 (colored)

Pull in OpenSSH-2.9.9

Revision 1.71 / (download) - annotate - [select for diffs], Thu Sep 27 15:31:17 2001 UTC (22 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.70: +2 -2 lines
Diff to previous 1.70 (colored)

typos; from solar

Revision 1.20.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:41 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.20.2.4: +109 -150 lines
Diff to previous 1.20.2.4 (colored) to branchpoint 1.20 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.70 / (download) - annotate - [select for diffs], Thu Sep 20 13:46:48 2001 UTC (22 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.69: +3 -3 lines
Diff to previous 1.69 (colored)

key_read returns now -1 or 1

Revision 1.69 / (download) - annotate - [select for diffs], Mon Jul 23 18:14:58 2001 UTC (22 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.68: +2 -2 lines
Diff to previous 1.68 (colored)

use %lu; ok markus@

Revision 1.68 / (download) - annotate - [select for diffs], Tue Jun 26 05:50:11 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.67: +2 -2 lines
Diff to previous 1.67 (colored)

new interface for secure_filename()

Revision 1.67 / (download) - annotate - [select for diffs], Mon Jun 25 20:26:37 2001 UTC (22 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.66: +3 -3 lines
Diff to previous 1.66 (colored)

prototype cleanup; ok markus@

Revision 1.66 / (download) - annotate - [select for diffs], Sat Jun 23 15:12:17 2001 UTC (22 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.65: +27 -30 lines
Diff to previous 1.65 (colored)

more strict prototypes.  raise warning level in Makefile.inc.  markus ok'ed
TODO; cleanup headers

Revision 1.65 / (download) - annotate - [select for diffs], Sat Jun 23 03:04:43 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.64: +4 -4 lines
Diff to previous 1.64 (colored)

restore correct ignore_user_known_hosts logic.

Revision 1.64 / (download) - annotate - [select for diffs], Sat Jun 23 00:20:58 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.63: +12 -30 lines
Diff to previous 1.63 (colored)

*known_hosts2 is obsolete for hostbased authentication and
only used for backward compat. merge ssh1/2 hostkey check
and move it to auth.c

Revision 1.63 / (download) - annotate - [select for diffs], Fri Jun 22 21:55:49 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.62: +23 -9 lines
Diff to previous 1.62 (colored)

merge authorized_keys2 into authorized_keys.
authorized_keys2 is used for backward compat.
(just append authorized_keys2 to authorized_keys).

Revision 1.62 / (download) - annotate - [select for diffs], Thu Jun 7 19:57:53 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.61: +7 -9 lines
Diff to previous 1.61 (colored)

style is used for bsdauth.
disconnect on user/service change (ietf-drafts)

Revision 1.61 / (download) - annotate - [select for diffs], Thu May 31 10:30:12 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.60: +2 -2 lines
Diff to previous 1.60 (colored)

undo the .c file split, just merge the header and keep the cvs history

Revision 1.60 / (download) - annotate - [select for diffs], Wed May 30 23:31:14 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.59: +26 -30 lines
Diff to previous 1.59 (colored)

merge

Revision 1.59 / (download) - annotate - [select for diffs], Wed May 30 12:55:06 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.58: +2 -2 lines
Diff to previous 1.58 (colored)

channel layer cleanup: merge header files and split .c files

Revision 1.58 / (download) - annotate - [select for diffs], Sun May 20 17:20:35 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.57: +15 -43 lines
Diff to previous 1.57 (colored)

configurable authorized_keys{,2} location; originally from peter@; ok djm@

Revision 1.57 / (download) - annotate - [select for diffs], Fri May 18 14:13:28 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.56: +8 -8 lines
Diff to previous 1.56 (colored)

improved kbd-interactive support. work by per@appgate.com and me

Revision 1.20.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:26 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.20.2.3: +177 -16 lines
Diff to previous 1.20.2.3 (colored) to branchpoint 1.20 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.56 / (download) - annotate - [select for diffs], Thu Apr 19 00:05:11 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.55: +2 -2 lines
Diff to previous 1.55 (colored)

use local variable, no function call needed.
(btw, hostbased works now with ssh.com >= 2.0.13)

Revision 1.55 / (download) - annotate - [select for diffs], Wed Apr 18 23:43:25 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.54: +6 -14 lines
Diff to previous 1.54 (colored)

more ssh v2 hostbased-auth interop: ssh.com >= 2.1.0 works now
(however the 2.1.0 server seems to work only if debug is enabled...)

Revision 1.54 / (download) - annotate - [select for diffs], Wed Apr 18 22:48:26 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.53: +3 -3 lines
Diff to previous 1.53 (colored)

no longer const

Revision 1.53 / (download) - annotate - [select for diffs], Wed Apr 18 22:03:44 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.52: +8 -4 lines
Diff to previous 1.52 (colored)

use FDQN with trailing dot in the hostbased auth packets, ok deraadt@

Revision 1.52 / (download) - annotate - [select for diffs], Thu Apr 12 19:15:24 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.51: +158 -3 lines
Diff to previous 1.51 (colored)

implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
similar to RhostRSAAuthentication unless you enable (the experimental)
HostbasedUsesNameFromPacketOnly option.  please test. :)

Revision 1.51 / (download) - annotate - [select for diffs], Fri Apr 6 21:00:08 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.50: +2 -2 lines
Diff to previous 1.50 (colored)

do gid/groups-swap in addition to uid-swap, should help if /home/group
is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks
to olar@openwall.com is comments.  we had many requests for this.

Revision 1.50 / (download) - annotate - [select for diffs], Wed Apr 4 20:32:56 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.49: +2 -5 lines
Diff to previous 1.49 (colored)

we don't care about missing bannerfiles; from tsoome@ut.ee, ok deraadt@

Revision 1.49 / (download) - annotate - [select for diffs], Wed Mar 28 22:43:31 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.48: +12 -5 lines
Diff to previous 1.48 (colored)

check auth_root_allowed for kbd-int auth, too.

Revision 1.20.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:22 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.20.2.2: +6 -4 lines
Diff to previous 1.20.2.2 (colored) to branchpoint 1.20 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.8.2.4 / (download) - annotate - [select for diffs], Wed Mar 21 18:52:35 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.8.2.3: +6 -4 lines
Diff to previous 1.8.2.3 (colored) to branchpoint 1.8 (colored) next main 1.9 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.48 / (download) - annotate - [select for diffs], Wed Mar 21 11:43:44 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.47: +2 -2 lines
Diff to previous 1.47 (colored)

merge common ssh v1/2 code

Revision 1.47 / (download) - annotate - [select for diffs], Tue Mar 20 18:57:04 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.46: +9 -3 lines
Diff to previous 1.46 (colored)

add changes need for BSD_AUTH plus disabled BSD_AUTH code

Revision 1.8.2.3 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:08 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.8.2.2: +131 -131 lines
Diff to previous 1.8.2.2 (colored) to branchpoint 1.8 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.46 / (download) - annotate - [select for diffs], Sun Mar 11 13:25:36 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.45: +3 -1 lines
Diff to previous 1.45 (colored)

debug

Revision 1.45 / (download) - annotate - [select for diffs], Sun Mar 4 01:46:29 2001 UTC (23 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.44: +2 -2 lines
Diff to previous 1.44 (colored)

Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch] to avoid
header conflicts in portable; ok markus@

Revision 1.44 / (download) - annotate - [select for diffs], Thu Mar 1 02:45:10 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.43: +2 -2 lines
Diff to previous 1.43 (colored)

KNF

Revision 1.43 / (download) - annotate - [select for diffs], Thu Feb 22 21:59:44 2001 UTC (23 years, 2 months ago) by markus
Branch: MAIN
Changes since 1.42: +2 -2 lines
Diff to previous 1.42 (colored)

use pwcopy in ssh.c, too

Revision 1.20.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:18:39 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.20.2.1: +0 -0 lines
Diff to previous 1.20.2.1 (colored) to branchpoint 1.20 (colored)

Pull in OpenSSH-2.5.1

Revision 1.20.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:12:54 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.20: +131 -131 lines
Diff to previous 1.20 (colored)

Pull in OpenSSH 2.5.0

Revision 1.42 / (download) - annotate - [select for diffs], Tue Feb 13 22:49:40 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.41: +2 -2 lines
Diff to previous 1.41 (colored)

setproctitle(user) only if getpwnam succeeds

Revision 1.41 / (download) - annotate - [select for diffs], Mon Feb 12 16:16:23 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.40: +3 -2 lines
Diff to previous 1.40 (colored)

PermitRootLogin={yes,without-password,forced-commands-only,no}
(before this change, root could login even if PermitRootLogin==no)

Revision 1.40 / (download) - annotate - [select for diffs], Sat Feb 10 12:52:02 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.39: +4 -4 lines
Diff to previous 1.39 (colored)

offer passwd before s/key

Revision 1.39 / (download) - annotate - [select for diffs], Thu Feb 8 18:20:01 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.38: +2 -2 lines
Diff to previous 1.38 (colored)

strict checking

Revision 1.38 / (download) - annotate - [select for diffs], Thu Feb 8 18:12:30 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.37: +2 -2 lines
Diff to previous 1.37 (colored)

fix typo

Revision 1.37 / (download) - annotate - [select for diffs], Wed Feb 7 22:35:46 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.36: +1 -8 lines
Diff to previous 1.36 (colored)

move k_setpag() to a central place; ok dugsong@

Revision 1.36 / (download) - annotate - [select for diffs], Sun Feb 4 15:32:22 2001 UTC (23 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.35: +4 -4 lines
Diff to previous 1.35 (colored)

unexpand and remove end-of-line whitespace; ok markus@

Revision 1.35 / (download) - annotate - [select for diffs], Sun Feb 4 13:30:11 2001 UTC (23 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.34: +1 -2 lines
Diff to previous 1.34 (colored)

remove duplicate #include's; ok markus@

Revision 1.34 / (download) - annotate - [select for diffs], Mon Jan 22 23:06:39 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.33: +7 -2 lines
Diff to previous 1.33 (colored)

rename skey -> challenge response.
auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.

Revision 1.33 / (download) - annotate - [select for diffs], Mon Jan 22 08:32:53 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.32: +1 -3 lines
Diff to previous 1.32 (colored)

no need to include; from mouring@etoh.eviladmin.org

Revision 1.32 / (download) - annotate - [select for diffs], Sun Jan 21 19:05:44 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.31: +5 -5 lines
Diff to previous 1.31 (colored)

split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.
rename util.[ch] -> misc.[ch]

Revision 1.31 / (download) - annotate - [select for diffs], Sat Jan 20 17:34:25 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.30: +2 -2 lines
Diff to previous 1.30 (colored)

typo

Revision 1.30 / (download) - annotate - [select for diffs], Sat Jan 20 15:55:20 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.29: +3 -3 lines
Diff to previous 1.29 (colored)

pass the filename to auth_parse_options()

Revision 1.29 / (download) - annotate - [select for diffs], Fri Jan 19 15:55:10 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.28: +5 -4 lines
Diff to previous 1.28 (colored)

move ssh1 definitions to ssh1.h, pathnames to pathnames.h

Revision 1.28 / (download) - annotate - [select for diffs], Thu Jan 18 17:00:00 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.27: +29 -83 lines
Diff to previous 1.27 (colored)

1) removes fake skey from sshd, since this will be much
   harder with /usr/libexec/auth/login_XXX
2) share/unify code used in ssh-1 and ssh-2 authentication (server side)
3) make addition of BSD_AUTH and other challenge reponse methods
   easier.

Revision 1.27 / (download) - annotate - [select for diffs], Sat Jan 13 18:56:48 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.26: +2 -2 lines
Diff to previous 1.26 (colored)

support supplementary group in {Allow,Deny}Groups
from stevesk@pobox.com

Revision 1.26 / (download) - annotate - [select for diffs], Sat Jan 13 18:21:48 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.25: +7 -4 lines
Diff to previous 1.25 (colored)

enable kerberos passwd auth in ssh2, use k_setpag; ok hin, dugsong, from ksulliva@psc.edu

Revision 1.25 / (download) - annotate - [select for diffs], Mon Jan 8 22:29:05 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.24: +36 -1 lines
Diff to previous 1.24 (colored)

implement option 'Banner /etc/issue.net' for ssh2, move version to
2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
is enabled).

Revision 1.24 / (download) - annotate - [select for diffs], Thu Dec 28 14:25:51 2000 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.23: +9 -7 lines
Diff to previous 1.23 (colored)

count authentication failures only

Revision 1.23 / (download) - annotate - [select for diffs], Tue Dec 19 23:17:55 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.22: +7 -7 lines
Diff to previous 1.22 (colored)

replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'
with u_char.

Revision 1.22 / (download) - annotate - [select for diffs], Sun Dec 3 11:15:02 2000 UTC (23 years, 5 months ago) by markus
Branch: MAIN
Changes since 1.21: +25 -8 lines
Diff to previous 1.21 (colored)

support f-secure/ssh.com 2.0.12; ok niels@

Revision 1.21 / (download) - annotate - [select for diffs], Sun Nov 12 19:50:37 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.20: +19 -19 lines
Diff to previous 1.20 (colored)

add support for RSA to SSH2.  please test.

there are now 3 types of keys: RSA1 is used by ssh-1 only,
RSA and DSA are used by SSH2.

you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
keys for SSH2 and use the RSA keys for hostkeys or for user keys.

SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.

IdentityFile2, HostDsaKey and DSAAuthentication are obsolete.
you can use multiple IdentityFile and HostKey for all types of keys.

the option DSAAuthentication is replaced by PubkeyAuthetication.

Revision 1.8.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 21:30:25 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.8.2.1: +260 -124 lines
Diff to previous 1.8.2.1 (colored) to branchpoint 1.8 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.20 / (download) - annotate - [select for diffs], Sat Oct 14 12:16:56 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.19: +4 -4 lines
Diff to previous 1.19 (colored)

OpenSSH_2.3; note that is is not complete, but the version number needs to be changed for interoperability reasons

Revision 1.19 / (download) - annotate - [select for diffs], Wed Oct 11 20:27:23 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.18: +1 -2 lines
Diff to previous 1.18 (colored)

new cipher framework

Revision 1.18 / (download) - annotate - [select for diffs], Wed Oct 11 20:14:38 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.17: +241 -104 lines
Diff to previous 1.17 (colored)

add support for s/key (kbd-interactive) to ssh2, based on work by mkiernan@avantgo.com and me

Revision 1.17 / (download) - annotate - [select for diffs], Wed Oct 11 19:59:52 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.16: +3 -1 lines
Diff to previous 1.16 (colored)

clear auth options unless auth sucessfull

Revision 1.16 / (download) - annotate - [select for diffs], Wed Sep 27 21:41:34 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.15: +8 -6 lines
Diff to previous 1.15 (colored)

use key_type()

Revision 1.15 / (download) - annotate - [select for diffs], Thu Sep 21 11:25:32 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.14: +8 -8 lines
Diff to previous 1.14 (colored)

add context to dispatch_run

Revision 1.14 / (download) - annotate - [select for diffs], Thu Sep 7 20:27:49 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.13: +2 -6 lines
Diff to previous 1.13 (colored)

cleanup copyright notices on all files.  I have attempted to be accurate with
the details.  everything is now under Tatu's licence (which I copied from his
readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd
developers under a 2-term bsd licence.  We're not changing any rules, just
being accurate.

Revision 1.8.2.1 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:17 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.8: +47 -22 lines
Diff to previous 1.8 (colored)

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.13 / (download) - annotate - [select for diffs], Sun Aug 20 18:42:40 2000 UTC (23 years, 9 months ago) by millert
Branch: MAIN
Changes since 1.12: +2 -1 lines
Diff to previous 1.12 (colored)

Add calls to setusercontext() and login_get*().  We basically call
setusercontext() in most places where previously we did a setlogin().
Add default login.conf file and put root in the "daemon" login class.

Revision 1.12 / (download) - annotate - [select for diffs], Fri Jul 7 03:55:03 2000 UTC (23 years, 10 months ago) by todd
Branch: MAIN
Changes since 1.11: +1 -1 lines
Diff to previous 1.11 (colored)

clean code is good code

Revision 1.11 / (download) - annotate - [select for diffs], Mon Jun 19 00:50:11 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.10: +6 -3 lines
Diff to previous 1.10 (colored)

make userauth+pubkey interop with ssh.com-2.2.0

Revision 1.10 / (download) - annotate - [select for diffs], Sun Jun 18 04:05:02 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.9: +25 -5 lines
Diff to previous 1.9 (colored)

split auth-rsa option parsing into auth-options
add options support to authorized_keys2

Revision 1.9 / (download) - annotate - [select for diffs], Sun Jun 18 01:09:10 2000 UTC (23 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.8: +17 -16 lines
Diff to previous 1.8 (colored)

implement bug compatibility with ssh-2.0.13 pubkey, server side

Revision 1.8 / (download) - annotate - [select for diffs], Mon May 8 17:42:24 2000 UTC (24 years ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.7: +5 -1 lines
Diff to previous 1.7 (colored)

bug compat w/ ssh-2.0.13 x11, split out bugs

Revision 1.7 / (download) - annotate - [select for diffs], Sat May 6 17:45:36 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8

Revision 1.6 / (download) - annotate - [select for diffs], Fri May 5 18:50:57 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.5: +29 -17 lines
Diff to previous 1.5 (colored)

log failure before sending the reply

Revision 1.5 / (download) - annotate - [select for diffs], Mon May 1 23:13:39 2000 UTC (24 years ago) by djm
Branch: MAIN
Changes since 1.4: +5 -1 lines
Diff to previous 1.4 (colored)

Add missing #ifdefs; ok - markus

Revision 1.4 / (download) - annotate - [select for diffs], Mon May 1 07:45:08 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.3: +5 -1 lines
Diff to previous 1.3 (colored)

disable kerb,s/key in ssh2

Revision 1.3 / (download) - annotate - [select for diffs], Thu Apr 27 15:23:02 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.2: +35 -13 lines
Diff to previous 1.2 (colored)

cleanup logging for sshd/2, respect PasswordAuth no

Revision 1.2 / (download) - annotate - [select for diffs], Thu Apr 27 08:01:25 2000 UTC (24 years ago) by markus
Branch: MAIN
Changes since 1.1: +32 -30 lines
Diff to previous 1.1 (colored)

xfree DSA blobs

Revision 1.1 / (download) - annotate - [select for diffs], Wed Apr 26 21:28:32 2000 UTC (24 years ago) by markus
Branch: MAIN

split auth/sshconnect in one file per protocol version

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.