OpenBSD CVS

CVS log for src/usr.bin/ssh/gss-serv.c


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.32 / (download) - annotate - [select for diffs], Fri Mar 13 03:17:07 2020 UTC (4 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7, HEAD
Changes since 1.31: +2 -2 lines
Diff to previous 1.31 (colored)

spelling errors in comments; no code change
from https://fossies.org/linux/misc/openssh-8.2p1.tar.gz/codespell.html

Revision 1.31 / (download) - annotate - [select for diffs], Mon Jul 9 21:37:55 2018 UTC (5 years, 10 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.30: +2 -3 lines
Diff to previous 1.30 (colored)

sshd: switch GSSAPI to sshbuf API; ok djm@

Revision 1.30 / (download) - annotate - [select for diffs], Sat Jun 24 06:34:38 2017 UTC (6 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3, OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.29: +10 -1 lines
Diff to previous 1.29 (colored)

refactor authentication logging

optionally record successful auth methods and public credentials
used in a file accessible to user sessions

feedback and ok markus@

Revision 1.29 / (download) - annotate - [select for diffs], Fri May 22 03:50:02 2015 UTC (8 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1, OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.28: +26 -16 lines
Diff to previous 1.28 (colored)

add knob to relax GSSAPI host credential check for multihomed hosts
bz#928, patch by Simon Wilkinson; ok dtucker
(kerberos/GSSAPI is not compiled by default on OpenBSD)

Revision 1.28 / (download) - annotate - [select for diffs], Tue Jan 20 23:14:00 2015 UTC (9 years, 3 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.27: +1 -2 lines
Diff to previous 1.27 (colored)

Reduce use of <sys/param.h> and transition to <limits.h> throughout.
ok djm markus

Revision 1.27 / (download) - annotate - [select for diffs], Thu Jul 3 03:34:09 2014 UTC (9 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.26: +3 -3 lines
Diff to previous 1.26 (colored)

standardise on NI_MAXHOST for gethostname() string lengths; about
1/2 the cases were using it already. Fixes bz#2239 en passant

Revision 1.26 / (download) - annotate - [select for diffs], Wed Feb 26 20:28:44 2014 UTC (10 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.25: +20 -1 lines
Diff to previous 1.25 (colored)

bz#2107 - cache OIDs of supported GSSAPI mechanisms before privsep
sandboxing, as running this code in the sandbox can cause violations;
ok markus@

Revision 1.25 / (download) - annotate - [select for diffs], Sun Feb 2 03:44:31 2014 UTC (10 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.24: +3 -2 lines
Diff to previous 1.24 (colored)

convert memset of potentially-private data to explicit_bzero()

Revision 1.24 / (download) - annotate - [select for diffs], Sat Jul 20 01:55:13 2013 UTC (10 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.23: +2 -2 lines
Diff to previous 1.23 (colored)

fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@

Revision 1.23 / (download) - annotate - [select for diffs], Mon Aug 1 19:18:15 2011 UTC (12 years, 9 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.22: +3 -1 lines
Diff to previous 1.22 (colored)

prevent post-auth resource exhaustion (int overflow leading to 4GB malloc);
report Adam Zabrock; ok djm@, deraadt@

Revision 1.22 / (download) - annotate - [select for diffs], Thu May 8 12:02:23 2008 UTC (16 years ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9, OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.21: +2 -1 lines
Diff to previous 1.21 (colored)

Implement a channel success/failure status confirmation callback
mechanism. Each channel maintains a queue of callbacks, which will
be drained in order (RFC4253 guarantees confirm messages are not
reordered within an channel).

Also includes a abandonment callback to clean up if a channel is
closed without sending confirmation messages. This probably
shouldn't happen in compliant implementations, but it could be
abused to leak memory.

ok markus@ (as part of a larger diff)

Revision 1.21 / (download) - annotate - [select for diffs], Tue Jun 12 08:20:00 2007 UTC (16 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3, OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.20: +49 -1 lines
Diff to previous 1.20 (colored)

relocate server-only GSSAPI code from libssh to server; bz #1225
patch from simon AT sxw.org.uk; ok markus@ dtucker@

Revision 1.8.2.2 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:32 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.8.2.1: +16 -10 lines
Diff to previous 1.8.2.1 (colored) to branchpoint 1.8 (colored) next main 1.9 (colored)

upgrade to OpenSSH 4.4

Revision 1.14.2.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:50 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.14: +13 -8 lines
Diff to previous 1.14 (colored) next main 1.15 (colored)

upgrade to OpenSSH 4.4

Revision 1.20 / (download) - annotate - [select for diffs], Thu Aug 3 03:34:42 2006 UTC (17 years, 9 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.19: +6 -4 lines
Diff to previous 1.19 (colored)

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

Revision 1.19 / (download) - annotate - [select for diffs], Sat Jul 22 20:48:23 2006 UTC (17 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.18: +3 -1 lines
Diff to previous 1.18 (colored)

move #include <string.h> out of includes.h

Revision 1.18 / (download) - annotate - [select for diffs], Sun Jul 2 18:36:47 2006 UTC (17 years, 10 months ago) by stevesk
Branch: MAIN
Changes since 1.17: +1 -2 lines
Diff to previous 1.17 (colored)

no "servconf.h" needed here

Revision 1.17 / (download) - annotate - [select for diffs], Thu Mar 30 09:58:15 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.16: +4 -4 lines
Diff to previous 1.16 (colored)

replace {GET,PUT}_XXBIT macros with functionally similar functions,
silencing a heap of lint warnings. also allows them to use
__bounded__ checking which can't be applied to macros; requested
by and feedback from deraadt@

Revision 1.16 / (download) - annotate - [select for diffs], Sat Mar 25 22:22:43 2006 UTC (18 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.15: +1 -1 lines
Diff to previous 1.15 (colored)

standardise spacing in $OpenBSD$ tags; requested by deraadt@

Revision 1.15 / (download) - annotate - [select for diffs], Mon Mar 20 04:08:18 2006 UTC (18 years, 2 months ago) by djm
Branch: MAIN
Changes since 1.14: +3 -1 lines
Diff to previous 1.14 (colored)

last lot of GSSAPI related leaks detected by Coverity via
elad AT netbsd.org; reviewed by simon AT sxw.org.uk; deraadt@ ok

Revision 1.14 / (download) - annotate - [select for diffs], Wed Feb 8 13:15:44 2006 UTC (18 years, 3 months ago) by stevesk
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE
Branch point for: OPENBSD_3_9
Changes since 1.13: +4 -3 lines
Diff to previous 1.13 (colored)

small KNF

Revision 1.8.2.1 / (download) - annotate - [select for diffs], Fri Feb 3 03:01:56 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.8: +11 -16 lines
Diff to previous 1.8 (colored)

upgrade to OpenSSH 4.3

Revision 1.5.6.2 / (download) - annotate - [select for diffs], Fri Feb 3 02:53:44 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.5.6.1: +11 -16 lines
Diff to previous 1.5.6.1 (colored) to branchpoint 1.5 (colored) next main 1.6 (colored)

upgrade to OpenSSH 4.3

Revision 1.13 / (download) - annotate - [select for diffs], Thu Oct 13 22:24:31 2005 UTC (18 years, 7 months ago) by stevesk
Branch: MAIN
Changes since 1.12: +6 -7 lines
Diff to previous 1.12 (colored)

KNF; ok djm@

Revision 1.12 / (download) - annotate - [select for diffs], Thu Oct 13 19:08:08 2005 UTC (18 years, 7 months ago) by stevesk
Branch: MAIN
Changes since 1.11: +1 -3 lines
Diff to previous 1.11 (colored)

unused declarations; ok deraadt@

Revision 1.11 / (download) - annotate - [select for diffs], Thu Oct 13 14:20:37 2005 UTC (18 years, 7 months ago) by stevesk
Branch: MAIN
Changes since 1.10: +5 -5 lines
Diff to previous 1.10 (colored)

spelling in comments

Revision 1.10 / (download) - annotate - [select for diffs], Thu Oct 13 14:03:01 2005 UTC (18 years, 7 months ago) by stevesk
Branch: MAIN
Changes since 1.9: +1 -3 lines
Diff to previous 1.9 (colored)

remove unneeded #includes; ok markus@

Revision 1.9 / (download) - annotate - [select for diffs], Mon Sep 19 11:48:10 2005 UTC (18 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.8: +2 -2 lines
Diff to previous 1.8 (colored)

typo

Revision 1.5.6.1 / (download) - annotate - [select for diffs], Sun Sep 4 18:40:02 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.5: +16 -5 lines
Diff to previous 1.5 (colored)

upgrade to OpenSSH 4.2

Revision 1.5.4.1 / (download) - annotate - [select for diffs], Fri Sep 2 03:45:00 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.5: +16 -5 lines
Diff to previous 1.5 (colored) next main 1.6 (colored)

upgrade to OpenSSH 4.2

Revision 1.8 / (download) - annotate - [select for diffs], Tue Aug 30 22:08:05 2005 UTC (18 years, 8 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE
Branch point for: OPENBSD_3_8
Changes since 1.7: +13 -2 lines
Diff to previous 1.7 (colored)

destroy credentials if krb5_kuserok() call fails. Stops credentials being
delegated to users who are not authorised for GSSAPIAuthentication when
GSSAPIDeletegateCredentials=yes and another authentication mechanism succeeds;
bz#1073 reported by paul.moore AT centrify.com, fix by simon AT sxw.org.uk,
tested todd@ biorn@ jakob@; ok deraadt@

Revision 1.7 / (download) - annotate - [select for diffs], Sun Jul 17 07:17:55 2005 UTC (18 years, 10 months ago) by djm
Branch: MAIN
Changes since 1.6: +3 -3 lines
Diff to previous 1.6 (colored)

knf says that a 2nd level indent is four (not three or five) spaces

Revision 1.6 / (download) - annotate - [select for diffs], Fri Jun 17 02:44:32 2005 UTC (18 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.5: +2 -2 lines
Diff to previous 1.5 (colored)

make this -Wsign-compare clean; ok avsm@ markus@

Revision 1.3.4.2 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:15 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.3.4.1: +13 -5 lines
Diff to previous 1.3.4.1 (colored) to branchpoint 1.3 (colored) next main 1.4 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.3.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:33 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.3: +13 -5 lines
Diff to previous 1.3 (colored) next main 1.4 (colored)

upgrade to OpenSSH 3.8

Revision 1.5 / (download) - annotate - [select for diffs], Mon Nov 17 11:06:07 2003 UTC (20 years, 6 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE, OPENBSD_3_6_BASE, OPENBSD_3_5_BASE, OPENBSD_3_5
Branch point for: OPENBSD_3_7, OPENBSD_3_6
Changes since 1.4: +11 -1 lines
Diff to previous 1.4 (colored)

replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; test + ok jakob.

Revision 1.4 / (download) - annotate - [select for diffs], Tue Sep 23 20:17:11 2003 UTC (20 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.3: +3 -5 lines
Diff to previous 1.3 (colored)

replace fatal_cleanup() and linked list of fatal callbacks with static
cleanup_exit() function.  re-refine cleanup_exit() where appropriate,
allocate sshd's authctxt eary to allow simpler cleanup in sshd.
tested by many, ok deraadt@

Revision 1.3.6.1 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:25 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.3: +1 -1 lines
Diff to previous 1.3 (colored) next main 1.4 (colored)

upgrade to OpenSSH 3.7

Revision 1.3.4.1 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:43 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.3: +1 -1 lines
Diff to previous 1.3 (colored)

upgrade to OpenSSH 3.7

Revision 1.3 / (download) - annotate - [select for diffs], Sun Aug 31 13:31:57 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4, OPENBSD_3_3, OPENBSD_3_2
Changes since 1.2: +22 -22 lines
Diff to previous 1.2 (colored)

whitspace KNF

Revision 1.2 / (download) - annotate - [select for diffs], Sun Aug 31 13:30:18 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.1: +4 -3 lines
Diff to previous 1.1 (colored)

correct string termination in parse_ename(); sxw@inf.ed.ac.uk

Revision 1.1 / (download) - annotate - [select for diffs], Fri Aug 22 10:56:09 2003 UTC (20 years, 9 months ago) by markus
Branch: MAIN

support GSS API user authentication; patches from Simon Wilkinson,
stripped down and tested by Jakob and myself.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.