OpenBSD CVS

CVS log for src/usr.bin/ssh/sshd_config


[BACK] Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.104 / (download) - annotate - [select for diffs], Fri Jul 2 05:11:21 2021 UTC (2 years, 10 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, HEAD
Changes since 1.103: +2 -2 lines
Diff to previous 1.103 (colored)

Remove references to ChallengeResponseAuthentication in favour of
KbdInteractiveAuthentication.  The former is what was in SSHv1, the
latter is what is in SSHv2 (RFC4256) and they were treated as somewhat
but not entirely equivalent.  We retain the old name as deprecated alias
so config files continue to work and a reference in the man page for
people looking for it.

Prompted by bz#3303 which pointed out the discrepancy between the two
when used with Match.  Man page help & ok jmc@, with & ok djm@

Revision 1.103 / (download) - annotate - [select for diffs], Mon Apr 9 20:41:22 2018 UTC (6 years, 1 month ago) by tj
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.102: +1 -2 lines
Diff to previous 1.102 (colored)

the UseLogin option was removed, so remove it here too.

ok dtucker

Revision 1.102 / (download) - annotate - [select for diffs], Fri Feb 16 02:32:40 2018 UTC (6 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.101: +1 -2 lines
Diff to previous 1.101 (colored)

stop loading DSA keys by default, remove sshd_config stanza and manpage
bits; from Colin Watson via bz#2662, ok dtucker@

Revision 1.101 / (download) - annotate - [select for diffs], Tue Mar 14 07:19:07 2017 UTC (7 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2, OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.100: +1 -2 lines
Diff to previous 1.100 (colored)

Mark the sshd_config UsePrivilegeSeparation option as deprecated,
effectively making privsep mandatory in sandboxing mode.
ok markus@ deraadt@

(note: this doesn't remove the !privsep code paths, though that will
happen eventually).

Revision 1.100 / (download) - annotate - [select for diffs], Mon Aug 15 12:32:04 2016 UTC (7 years, 9 months ago) by naddy
Branch: MAIN
Changes since 1.99: +2 -15 lines
Diff to previous 1.99 (colored)

Catch up with the SSH1 code removal and delete all mention of
protocol 1 particularities, key files and formats, command line
options, and configuration keywords from the server documentation
and examples.  ok jmc@

Revision 1.99 / (download) - annotate - [select for diffs], Mon Jul 11 03:19:44 2016 UTC (7 years, 10 months ago) by tedu
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.98: +1 -2 lines
Diff to previous 1.98 (colored)

obsolete note about fascistloggin is obsolete. ok djm dtucker

Revision 1.98 / (download) - annotate - [select for diffs], Wed Feb 17 05:29:04 2016 UTC (8 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.97: +2 -2 lines
Diff to previous 1.97 (colored)

make sandboxed privilege separation the default, not just for new
installs; "absolutely" deraadt@

Revision 1.97 / (download) - annotate - [select for diffs], Thu Aug 6 14:53:21 2015 UTC (8 years, 9 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.96: +2 -2 lines
Diff to previous 1.96 (colored)

add prohibit-password as a synonymn for without-password, since the
without-password is causing too many questions.  Harden it to ban all
but pubkey, hostbased, and GSSAPI auth (when the latter is enabled)
from djm, ok markus

Revision 1.96 / (download) - annotate - [select for diffs], Thu Jul 30 19:23:02 2015 UTC (8 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.95: +2 -2 lines
Diff to previous 1.95 (colored)

change default: PermitRootLogin without-password
matching install script changes coming as well
ok djm markus

Revision 1.95 / (download) - annotate - [select for diffs], Mon Apr 27 21:42:48 2015 UTC (9 years ago) by djm
Branch: MAIN
Changes since 1.94: +2 -2 lines
Diff to previous 1.94 (colored)

Make sshd default to PermitRootLogin=no;
ok deraadt@ rpe@

Revision 1.94 / (download) - annotate - [select for diffs], Mon Feb 2 01:57:44 2015 UTC (9 years, 3 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.93: +2 -2 lines
Diff to previous 1.93 (colored)

increasing encounters with difficult DNS setups in darknets has
convinced me UseDNS off by default is better
ok djm

Revision 1.93 / (download) - annotate - [select for diffs], Fri Jan 10 05:59:19 2014 UTC (10 years, 4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6, OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.92: +2 -1 lines
Diff to previous 1.92 (colored)

the /etc/ssh/ssh_host_ed25519_key is loaded by default too

Revision 1.92 / (download) - annotate - [select for diffs], Tue Oct 29 09:48:02 2013 UTC (10 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.91: +3 -1 lines
Diff to previous 1.91 (colored)

shd_config PermitTTY to disallow TTY allocation, mirroring the
longstanding no-pty authorized_keys option;
bz#2070, patch from Teran McKinney; ok markus@

Revision 1.91 / (download) - annotate - [select for diffs], Sat Sep 7 13:53:11 2013 UTC (10 years, 8 months ago) by sthen
Branch: MAIN
Changes since 1.90: +1 -11 lines
Diff to previous 1.90 (colored)

Remove commented-out kerberos/gssapi config options from sample config,
kerberos support is currently not enabled in ssh in OpenBSD. Discussed with
various people; ok deraadt@

Revision 1.90 / (download) - annotate - [select for diffs], Thu May 16 04:09:14 2013 UTC (11 years ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.89: +4 -1 lines
Diff to previous 1.89 (colored)

Add RekeyLimit to sshd with the same syntax as the client allowing rekeying
based on traffic volume or time.  ok djm@, help & ok jmc@ for the man page.

Revision 1.89 / (download) - annotate - [select for diffs], Wed Feb 6 00:20:42 2013 UTC (11 years, 3 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.88: +2 -2 lines
Diff to previous 1.88 (colored)

Change default of MaxStartups to 10:30:100 to start doing random early
drop at 10 connections up to 100 connections.  This will make it harder
to DoS as CPUs have come a long way since the original value was set
back in 2000.  Prompted by nion at debian org, ok markus@

Revision 1.88 / (download) - annotate - [select for diffs], Tue Oct 30 21:29:55 2012 UTC (11 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.87: +4 -1 lines
Diff to previous 1.87 (colored)

new sshd_config option AuthorizedKeysCommand to support fetching
authorized_keys from a command in addition to (or instead of) from
the filesystem. The command is run as the target server user unless
another specified via a new AuthorizedKeysCommandUser option.

patch originally by jchadima AT redhat.com, reworked by me; feedback
and ok markus@

Revision 1.87 / (download) - annotate - [select for diffs], Tue Jul 10 02:19:15 2012 UTC (11 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2
Changes since 1.86: +2 -2 lines
Diff to previous 1.86 (colored)

Turn on systrace sandboxing of pre-auth sshd by default for new installs
by shipping a config that overrides the current UsePrivilegeSeparation=yes
default. Make it easier to flip the default in the future by adding too.
prodded markus@ feedback dtucker@ "get it in" deraadt@

Revision 1.86 / (download) - annotate - [select for diffs], Thu Apr 12 02:43:55 2012 UTC (12 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.85: +3 -1 lines
Diff to previous 1.85 (colored)

mention AuthorizedPrincipalsFile=none default

Revision 1.85 / (download) - annotate - [select for diffs], Thu Apr 12 02:42:32 2012 UTC (12 years, 1 month ago) by djm
Branch: MAIN
Changes since 1.84: +2 -1 lines
Diff to previous 1.84 (colored)

VersionAddendum option to allow server operators to append some arbitrary
text to the SSH-... banner; ok deraadt@ "don't care" markus@

Revision 1.84 / (download) - annotate - [select for diffs], Mon May 23 03:30:07 2011 UTC (12 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.83: +5 -2 lines
Diff to previous 1.83 (colored)

allow AuthorizedKeysFile to specify multiple files, separated by spaces.
Bring back authorized_keys2 as a default search path (to avoid breaking
existing users of this file), but override this in sshd_config so it will
be no longer used on fresh installs. Maybe in 2015 we can remove it
entierly :)

feedback and ok markus@ dtucker@

Revision 1.83 / (download) - annotate - [select for diffs], Fri May 6 01:03:35 2011 UTC (13 years ago) by dtucker
Branch: MAIN
Changes since 1.82: +2 -2 lines
Diff to previous 1.82 (colored)

clarify language about overriding defaults.  bz#1892, from Petr Cerny

Revision 1.82 / (download) - annotate - [select for diffs], Mon Sep 6 17:10:19 2010 UTC (13 years, 8 months ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.81: +2 -1 lines
Diff to previous 1.81 (colored)

add ssh_host_ecdsa_key to /etc; from Mattieu Baptiste <mattieu.b@gmail.com>
ok deraadt@

Revision 1.81 / (download) - annotate - [select for diffs], Thu Oct 8 14:03:41 2009 UTC (14 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.80: +3 -5 lines
Diff to previous 1.80 (colored)

disable protocol 1 by default (after a transition period of about 10 years)
ok deraadt

Revision 1.80 / (download) - annotate - [select for diffs], Wed Jul 2 02:24:18 2008 UTC (15 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.79: +2 -2 lines
Diff to previous 1.79 (colored)

increase default size of ssh protocol 1 ephemeral key from 768 to 1024
bits; prodded by & ok dtucker@ ok deraadt@

Revision 1.79 / (download) - annotate - [select for diffs], Thu May 8 12:21:16 2008 UTC (16 years ago) by djm
Branch: MAIN
Changes since 1.78: +2 -1 lines
Diff to previous 1.78 (colored)

Make the maximum number of sessions run-time controllable via
a sshd_config MaxSessions knob. This is useful for disabling
login/shell/subsystem access while leaving port-forwarding working
(MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or
simply increasing the number of allows multiplexed sessions.

Because some bozos are sure to configure MaxSessions in excess of the
number of available file descriptors in sshd (which, at peak, might be
as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak fds
on error paths, and make it fail gracefully on out-of-fd conditions -
sending channel errors instead of than exiting with fatal().

bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com

ok markus@

Revision 1.78 / (download) - annotate - [select for diffs], Wed May 7 06:43:35 2008 UTC (16 years ago) by pyr
Branch: MAIN
Changes since 1.77: +2 -1 lines
Diff to previous 1.77 (colored)

push the sshd_config bits in, spotted by ajacoutot@

Revision 1.77 / (download) - annotate - [select for diffs], Fri Feb 8 23:24:07 2008 UTC (16 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.76: +2 -1 lines
Diff to previous 1.76 (colored)

add sshd_config ChrootDirectory option to chroot(2) users to a directory and
tweak internal sftp server to work with it (no special files in chroot
required). ok markus@

Revision 1.76 / (download) - annotate - [select for diffs], Thu Aug 23 03:22:16 2007 UTC (16 years, 8 months ago) by djm
Branch: MAIN
Changes since 1.75: +2 -2 lines
Diff to previous 1.75 (colored)

Support "Banner=none" to disable displaying of the pre-login banner;
ok dtucker@ deraadt@

Revision 1.75 / (download) - annotate - [select for diffs], Mon Mar 19 01:01:29 2007 UTC (17 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.74: +6 -2 lines
Diff to previous 1.74 (colored)

Disable the legacy SSH protocol 1 for new installations via
a configuration override. In the future, we will change the
server's default itself so users who need the legacy protocol
will need to turn it on explicitly

Revision 1.72.2.2 / (download) - annotate - [select for diffs], Fri Oct 6 03:19:33 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.72.2.1: +7 -1 lines
Diff to previous 1.72.2.1 (colored) to branchpoint 1.72 (colored) next main 1.73 (colored)

upgrade to OpenSSH 4.4

Revision 1.73.2.1 / (download) - annotate - [select for diffs], Sat Sep 30 04:06:51 2006 UTC (17 years, 7 months ago) by brad
Branch: OPENBSD_3_9
Changes since 1.73: +7 -1 lines
Diff to previous 1.73 (colored) next main 1.74 (colored)

upgrade to OpenSSH 4.4

Revision 1.74 / (download) - annotate - [select for diffs], Wed Jul 19 13:07:10 2006 UTC (17 years, 10 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.73: +7 -1 lines
Diff to previous 1.73 (colored)

Add ForceCommand keyword to sshd_config, equivalent to the "command="
key option, man page entry and example in sshd_config.  Feedback & ok djm@,
man page corrections & ok jmc@

Revision 1.72.2.1 / (download) - annotate - [select for diffs], Fri Feb 3 03:01:58 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_8
Changes since 1.72: +2 -1 lines
Diff to previous 1.72 (colored)

upgrade to OpenSSH 4.3

Revision 1.70.2.2 / (download) - annotate - [select for diffs], Fri Feb 3 02:53:46 2006 UTC (18 years, 3 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.70.2.1: +2 -1 lines
Diff to previous 1.70.2.1 (colored) to branchpoint 1.70 (colored) next main 1.71 (colored)

upgrade to OpenSSH 4.3

Revision 1.73 / (download) - annotate - [select for diffs], Tue Dec 6 22:38:28 2005 UTC (18 years, 5 months ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE
Branch point for: OPENBSD_3_9
Changes since 1.72: +2 -1 lines
Diff to previous 1.72 (colored)

Add support for tun(4) forwarding over OpenSSH, based on an idea and
initial channel code bits by markus@. This is a simple and easy way to
use OpenSSH for ad hoc virtual private network connections, e.g.
administrative tunnels or secure wireless access. It's based on a new
ssh channel and works similar to the existing TCP forwarding support,
except that it depends on the tun(4) network interface on both ends of
the connection for layer 2 or layer 3 tunneling. This diff also adds
support for LocalCommand in the ssh(1) client.

ok djm@, markus@, jmc@ (manpages), tested and discussed with others

Revision 1.70.2.1 / (download) - annotate - [select for diffs], Sun Sep 4 18:40:11 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_7
Changes since 1.70: +3 -3 lines
Diff to previous 1.70 (colored)

upgrade to OpenSSH 4.2

Revision 1.69.2.2 / (download) - annotate - [select for diffs], Fri Sep 2 03:45:01 2005 UTC (18 years, 8 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.69.2.1: +3 -3 lines
Diff to previous 1.69.2.1 (colored) to branchpoint 1.69 (colored) next main 1.70 (colored)

upgrade to OpenSSH 4.2

Revision 1.72 / (download) - annotate - [select for diffs], Mon Jul 25 11:59:40 2005 UTC (18 years, 9 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE
Branch point for: OPENBSD_3_8
Changes since 1.71: +2 -2 lines
Diff to previous 1.71 (colored)

add a new compression method that delays compression until the user
has been authenticated successfully and set compression to 'delayed'
for sshd.

this breaks older openssh clients (< 3.5) if they insist on
compression, so you have to re-enable compression in sshd_config.
ok djm@

Revision 1.71 / (download) - annotate - [select for diffs], Thu May 19 02:40:52 2005 UTC (19 years ago) by djm
Branch: MAIN
Changes since 1.70: +2 -2 lines
Diff to previous 1.70 (colored)

whitespace nit, from grunk AT pestilenz.org

Revision 1.68.2.2 / (download) - annotate - [select for diffs], Thu Mar 10 17:15:05 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.68.2.1: +2 -1 lines
Diff to previous 1.68.2.1 (colored) to branchpoint 1.68 (colored) next main 1.69 (colored)

upgrade to OpenSSH 4.0

Revision 1.69.2.1 / (download) - annotate - [select for diffs], Thu Mar 10 16:28:28 2005 UTC (19 years, 2 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.69: +2 -1 lines
Diff to previous 1.69 (colored)

upgrade to OpenSSH 4.0

Revision 1.70 / (download) - annotate - [select for diffs], Thu Dec 23 23:11:00 2004 UTC (19 years, 4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE
Branch point for: OPENBSD_3_7
Changes since 1.69: +2 -1 lines
Diff to previous 1.69 (colored)

bz #898: support AddressFamily in sshd_config. from peak@argo.troja.mff.cuni.cz
ok deraadt@

Revision 1.65.2.2 / (download) - annotate - [select for diffs], Thu Aug 19 22:37:33 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.65.2.1: +2 -1 lines
Diff to previous 1.65.2.1 (colored) to branchpoint 1.65 (colored) next main 1.66 (colored)

upgrade to OpenSSH 3.9

Revision 1.68.2.1 / (download) - annotate - [select for diffs], Thu Aug 19 04:13:28 2004 UTC (19 years, 9 months ago) by brad
Branch: OPENBSD_3_5
Changes since 1.68: +2 -1 lines
Diff to previous 1.68 (colored)

upgrade to OpenSSH 3.9

Revision 1.69 / (download) - annotate - [select for diffs], Sun May 23 23:59:53 2004 UTC (19 years, 11 months ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_6
Changes since 1.68: +2 -1 lines
Diff to previous 1.68 (colored)

Add MaxAuthTries sshd config option; ok markus@

Revision 1.59.4.2 / (download) - annotate - [select for diffs], Thu Mar 4 18:18:17 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.59.4.1: +4 -3 lines
Diff to previous 1.59.4.1 (colored) to branchpoint 1.59 (colored) next main 1.60 (colored)

upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8upgrade to OpenSSH 3.8

Revision 1.65.2.1 / (download) - annotate - [select for diffs], Sat Feb 28 03:51:34 2004 UTC (20 years, 2 months ago) by brad
Branch: OPENBSD_3_4
Changes since 1.65: +4 -3 lines
Diff to previous 1.65 (colored)

upgrade to OpenSSH 3.8

Revision 1.68 / (download) - annotate - [select for diffs], Mon Dec 29 16:39:50 2003 UTC (20 years, 4 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE
Branch point for: OPENBSD_3_5
Changes since 1.67: +2 -2 lines
Diff to previous 1.67 (colored)

KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK

Revision 1.67 / (download) - annotate - [select for diffs], Tue Dec 23 16:12:10 2003 UTC (20 years, 4 months ago) by jakob
Branch: MAIN
Changes since 1.66: +2 -1 lines
Diff to previous 1.66 (colored)

implement KerberosGetAFSToken server option. ok markus@, beck@

Revision 1.66 / (download) - annotate - [select for diffs], Mon Sep 29 20:19:57 2003 UTC (20 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.65: +2 -2 lines
Diff to previous 1.65 (colored)

GSSAPICleanupCreds -> GSSAPICleanupCredentials

Revision 1.59.2.1 / (download) - annotate - [select for diffs], Tue Sep 16 21:20:29 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_2
Changes since 1.59: +15 -13 lines
Diff to previous 1.59 (colored) next main 1.60 (colored)

upgrade to OpenSSH 3.7

Revision 1.59.4.1 / (download) - annotate - [select for diffs], Tue Sep 16 20:50:44 2003 UTC (20 years, 8 months ago) by brad
Branch: OPENBSD_3_3
Changes since 1.59: +15 -13 lines
Diff to previous 1.59 (colored)

upgrade to OpenSSH 3.7

Revision 1.65 / (download) - annotate - [select for diffs], Thu Aug 28 12:54:34 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE
Branch point for: OPENBSD_3_4
Changes since 1.64: +1 -2 lines
Diff to previous 1.64 (colored)

remove kerberos support from ssh1, since it has been replaced with GSSAPI;
but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...

Revision 1.64 / (download) - annotate - [select for diffs], Fri Aug 22 10:56:09 2003 UTC (20 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.63: +5 -1 lines
Diff to previous 1.63 (colored)

support GSS API user authentication; patches from Simon Wilkinson,
stripped down and tested by Jakob and myself.

Revision 1.63 / (download) - annotate - [select for diffs], Wed Aug 13 08:46:31 2003 UTC (20 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.62: +3 -5 lines
Diff to previous 1.62 (colored)

remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
fgsch@, miod@, henning@, jakob@ and others

Revision 1.62 / (download) - annotate - [select for diffs], Wed Jul 23 07:42:43 2003 UTC (20 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.61: +1 -5 lines
Diff to previous 1.61 (colored)

remove AFS; itojun@

Revision 1.61 / (download) - annotate - [select for diffs], Fri Jun 20 05:48:21 2003 UTC (20 years, 11 months ago) by djm
Branch: MAIN
Changes since 1.60: +10 -5 lines
Diff to previous 1.60 (colored)

sync some implemented options; ok markus@

Revision 1.60 / (download) - annotate - [select for diffs], Mon Jun 2 09:17:34 2003 UTC (20 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.59: +2 -2 lines
Diff to previous 1.59 (colored)

deprecate VerifyReverseMapping since it's dangerous if combined
with IP based access control as noted by Mike Harding; replace with
a UseDNS option, UseDNS is on by default and includes the
VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@
ok deraadt@, djm@

Revision 1.42.2.6 / (download) - annotate - [select for diffs], Fri Oct 11 14:53:07 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.42.2.5: +3 -2 lines
Diff to previous 1.42.2.5 (colored) to branchpoint 1.42 (colored) next main 1.43 (colored)

Update to OpenSSH 3.5

Revision 1.49.2.5 / (download) - annotate - [select for diffs], Fri Oct 11 14:51:53 2002 UTC (21 years, 7 months ago) by miod
Branch: OPENBSD_3_1
Changes since 1.49.2.4: +3 -2 lines
Diff to previous 1.49.2.4 (colored) to branchpoint 1.49 (colored) next main 1.50 (colored)

Update to OpenSSH 3.5

Revision 1.59 / (download) - annotate - [select for diffs], Wed Sep 25 11:17:16 2002 UTC (21 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_2_BASE
Branch point for: OPENBSD_3_3, OPENBSD_3_2
Changes since 1.58: +2 -2 lines
Diff to previous 1.58 (colored)

sync LoginGraceTime with default

Revision 1.58 / (download) - annotate - [select for diffs], Wed Aug 21 19:38:06 2002 UTC (21 years, 9 months ago) by stevesk
Branch: MAIN
Changes since 1.57: +2 -2 lines
Diff to previous 1.57 (colored)

change LoginGraceTime default to 1 minute; ok mouring@ markus@

Revision 1.57 / (download) - annotate - [select for diffs], Tue Jul 30 17:03:55 2002 UTC (21 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.56: +2 -1 lines
Diff to previous 1.56 (colored)

add PermitUserEnvironment (off by default!); from dot@dotat.at; ok provos, deraadt

Revision 1.42.2.5 / (download) - annotate - [select for diffs], Wed Jun 26 18:22:36 2002 UTC (21 years, 10 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.42.2.4: +3 -3 lines
Diff to previous 1.42.2.4 (colored) to branchpoint 1.42 (colored)

There was an update to OpenSSH 3.4, and people rejoiced.

Revision 1.49.2.4 / (download) - annotate - [select for diffs], Wed Jun 26 15:30:39 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.49.2.3: +4 -3 lines
Diff to previous 1.49.2.3 (colored) to branchpoint 1.49 (colored)

Pull in OpenSSH-3.4

Revision 1.42.2.4 / (download) - annotate - [select for diffs], Sat Jun 22 07:23:18 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.42.2.3: +3 -2 lines
Diff to previous 1.42.2.3 (colored) to branchpoint 1.42 (colored)

Update OpenSSH to version 3.3 (with local changes, configuration files still
living in /etc and privsep user being nobody).

Revision 1.49.2.3 / (download) - annotate - [select for diffs], Sat Jun 22 04:33:15 2002 UTC (21 years, 11 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.49.2.2: +2 -2 lines
Diff to previous 1.49.2.2 (colored) to branchpoint 1.49 (colored)

- create /var/empty directory before install
- enable privsep by default

Revision 1.56 / (download) - annotate - [select for diffs], Thu Jun 20 23:37:12 2002 UTC (21 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.55: +2 -1 lines
Diff to previous 1.55 (colored)

add Compression

Revision 1.55 / (download) - annotate - [select for diffs], Thu Jun 20 20:03:34 2002 UTC (21 years, 11 months ago) by stevesk
Branch: MAIN
Changes since 1.54: +3 -3 lines
Diff to previous 1.54 (colored)

refer to config file man page

Revision 1.38.2.3 / (download) - annotate - [select for diffs], Sun Jun 2 22:56:11 2002 UTC (21 years, 11 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.38.2.2: +4 -5 lines
Diff to previous 1.38.2.2 (colored) to branchpoint 1.38 (colored) next main 1.39 (colored)

Upgrade to OpenSSH 3.2.3.

Except for improbable compilation error fixes, this should be the last
commit made to the 2.9-STABLE branche. Have fun upgrading.

Revision 1.49.2.2 / (download) - annotate - [select for diffs], Sat May 18 04:50:38 2002 UTC (22 years ago) by jason
Branch: OPENBSD_3_1
Changes since 1.49.2.1: +0 -0 lines
Diff to previous 1.49.2.1 (colored) to branchpoint 1.49 (colored)

Update to OpenSSH-3.2.3

Revision 1.49.2.1 / (download) - annotate - [select for diffs], Sat May 18 04:12:11 2002 UTC (22 years ago) by jason
Branch: OPENBSD_3_1
Changes since 1.49: +3 -5 lines
Diff to previous 1.49 (colored)

Update to OpenSSH-3.2.2

Revision 1.42.2.3 / (download) - annotate - [select for diffs], Fri May 17 00:03:25 2002 UTC (22 years ago) by miod
Branch: OPENBSD_3_0
Changes since 1.42.2.2: +4 -5 lines
Diff to previous 1.42.2.2 (colored) to branchpoint 1.42 (colored)

Update OpenSSH to version 3.2.2.

Revision 1.54 / (download) - annotate - [select for diffs], Wed May 15 21:56:38 2002 UTC (22 years ago) by markus
Branch: MAIN
Changes since 1.53: +2 -2 lines
Diff to previous 1.53 (colored)

re-enable privsep and disable setuid for post-3.2.2

Revision 1.53 / (download) - annotate - [select for diffs], Wed May 15 21:02:53 2002 UTC (22 years ago) by markus
Branch: MAIN
Changes since 1.52: +2 -2 lines
Diff to previous 1.52 (colored)

disable privsep and enable setuid for the 3.2.2 release

Revision 1.52 / (download) - annotate - [select for diffs], Sat May 4 02:39:35 2002 UTC (22 years ago) by deraadt
Branch: MAIN
Changes since 1.51: +2 -2 lines
Diff to previous 1.51 (colored)

enable privsep by default; provos ok

Revision 1.51 / (download) - annotate - [select for diffs], Mon Apr 22 16:16:53 2002 UTC (22 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.50: +2 -3 lines
Diff to previous 1.50 (colored)

do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@

Revision 1.50 / (download) - annotate - [select for diffs], Sun Apr 21 16:19:27 2002 UTC (22 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.49: +2 -3 lines
Diff to previous 1.49 (colored)

document default AFSTokenPassing no; ok deraadt@

Revision 1.49 / (download) - annotate - [select for diffs], Thu Mar 21 20:51:12 2002 UTC (22 years, 2 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.48: +2 -1 lines
Diff to previous 1.48 (colored)

add privsep (off)

Revision 1.38.2.2 / (download) - annotate - [select for diffs], Sat Mar 9 00:20:45 2002 UTC (22 years, 2 months ago) by miod
Branch: OPENBSD_2_9
Changes since 1.38.2.1: +52 -40 lines
Diff to previous 1.38.2.1 (colored) to branchpoint 1.38 (colored)

Merge OpenSSH 3.1, keeping /etc as configuration files directory.
(i.e. OpenSSH 3.1 + openbsd29_3.1.patch)

Revision 1.21.2.6 / (download) - annotate - [select for diffs], Fri Mar 8 17:04:43 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_2_8
Changes since 1.21.2.5: +52 -40 lines
Diff to previous 1.21.2.5 (colored) to branchpoint 1.21 (colored) next main 1.22 (colored)

Merge OpenSSH 3.1.

Revision 1.42.2.2 / (download) - annotate - [select for diffs], Fri Mar 8 15:17:18 2002 UTC (22 years, 2 months ago) by brad
Branch: OPENBSD_3_0
Changes since 1.42.2.1: +5 -5 lines
Diff to previous 1.42.2.1 (colored) to branchpoint 1.42 (colored)

apply the necessary openbsd30_3.1.patch patch.
--
Ok'd by markus@

Revision 1.42.2.1 / (download) - annotate - [select for diffs], Thu Mar 7 17:37:48 2002 UTC (22 years, 2 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.42: +53 -41 lines
Diff to previous 1.42 (colored)

Update to OpenSSH-3.1 on 3.0-stable branch

Revision 1.48 / (download) - annotate - [select for diffs], Tue Feb 19 02:50:59 2002 UTC (22 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.47: +2 -2 lines
Diff to previous 1.47 (colored)

stategy is not an english word

Revision 1.47 / (download) - annotate - [select for diffs], Sat Feb 9 17:37:34 2002 UTC (22 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.46: +5 -5 lines
Diff to previous 1.46 (colored)

move ssh config files to /etc/ssh

Revision 1.46 / (download) - annotate - [select for diffs], Tue Jan 29 14:32:03 2002 UTC (22 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.45: +2 -2 lines
Diff to previous 1.45 (colored)

s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@

Revision 1.45 / (download) - annotate - [select for diffs], Sun Jan 27 14:57:46 2002 UTC (22 years, 3 months ago) by stevesk
Branch: MAIN
Changes since 1.44: +2 -1 lines
Diff to previous 1.44 (colored)

add X11UseLocalhost; ok markus@

Revision 1.44 / (download) - annotate - [select for diffs], Wed Jan 16 17:40:23 2002 UTC (22 years, 4 months ago) by stevesk
Branch: MAIN
Changes since 1.43: +51 -40 lines
Diff to previous 1.43 (colored)

The stategy now used for options in the default sshd_config shipped
with OpenSSH is to specify options with their default value where
possible, but leave them commented.  Uncommented options change a
default value.  Subsystem is currently the only default option
changed.  ok markus@

Revision 1.43 / (download) - annotate - [select for diffs], Wed Dec 19 07:18:56 2001 UTC (22 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.42: +2 -2 lines
Diff to previous 1.42 (colored)

basic KNF done while i was looking for something else

Revision 1.38.2.1 / (download) - annotate - [select for diffs], Thu Sep 27 19:03:56 2001 UTC (22 years, 7 months ago) by jason
Branch: OPENBSD_2_9
Changes since 1.38: +27 -19 lines
Diff to previous 1.38 (colored)

Pull in OpenSSH-2.9.9

Revision 1.21.2.5 / (download) - annotate - [select for diffs], Thu Sep 27 00:15:43 2001 UTC (22 years, 7 months ago) by miod
Branch: OPENBSD_2_8
Changes since 1.21.2.4: +27 -19 lines
Diff to previous 1.21.2.4 (colored) to branchpoint 1.21 (colored)

Pull in OpenSSH 2.9.9 to the 2.8 branch.

Revision 1.42 / (download) - annotate - [select for diffs], Thu Sep 20 20:57:51 2001 UTC (22 years, 8 months ago) by mouring
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.41: +1 -2 lines
Diff to previous 1.41 (colored)

CheckMail removed.  OKed stevesk@

Revision 1.41 / (download) - annotate - [select for diffs], Fri Jun 22 21:55:50 2001 UTC (22 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.40: +1 -2 lines
Diff to previous 1.40 (colored)

merge authorized_keys2 into authorized_keys.
authorized_keys2 is used for backward compat.
(just append authorized_keys2 to authorized_keys).

Revision 1.40 / (download) - annotate - [select for diffs], Thu May 31 13:08:04 2001 UTC (22 years, 11 months ago) by markus
Branch: MAIN
Changes since 1.39: +28 -21 lines
Diff to previous 1.39 (colored)

group options and add some more comments

Revision 1.39 / (download) - annotate - [select for diffs], Sun May 20 17:20:36 2001 UTC (23 years ago) by markus
Branch: MAIN
Changes since 1.38: +4 -1 lines
Diff to previous 1.38 (colored)

configurable authorized_keys{,2} location; originally from peter@; ok djm@

Revision 1.21.2.4 / (download) - annotate - [select for diffs], Mon May 7 21:09:38 2001 UTC (23 years ago) by jason
Branch: OPENBSD_2_8
Changes since 1.21.2.3: +4 -1 lines
Diff to previous 1.21.2.3 (colored) to branchpoint 1.21 (colored)

Pull in OpenSSH-2.9 to 2.8 branch.

Revision 1.38 / (download) - annotate - [select for diffs], Sun Apr 15 21:41:29 2001 UTC (23 years, 1 month ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE
Branch point for: OPENBSD_2_9
Changes since 1.37: +2 -2 lines
Diff to previous 1.37 (colored)

2,1, not 1,2

Revision 1.37 / (download) - annotate - [select for diffs], Sun Apr 15 21:05:49 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.36: +2 -2 lines
Diff to previous 1.36 (colored)

default for protocol is 1,2; ok markus@

Revision 1.36 / (download) - annotate - [select for diffs], Thu Apr 12 19:15:26 2001 UTC (23 years, 1 month ago) by markus
Branch: MAIN
Changes since 1.35: +3 -1 lines
Diff to previous 1.35 (colored)

implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)
similar to RhostRSAAuthentication unless you enable (the experimental)
HostbasedUsesNameFromPacketOnly option.  please test. :)

Revision 1.35 / (download) - annotate - [select for diffs], Sun Mar 25 13:16:11 2001 UTC (23 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.34: +2 -1 lines
Diff to previous 1.34 (colored)

PrintLastLog option; from chip@valinux.com with some minor
changes by me.  ok markus@

Revision 1.21.2.3 / (download) - annotate - [select for diffs], Wed Mar 21 19:46:31 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.21.2.2: +2 -2 lines
Diff to previous 1.21.2.2 (colored) to branchpoint 1.21 (colored)

Pull in OpenSSH-2.5.2 for 2.8 branch.

Revision 1.16.2.4 / (download) - annotate - [select for diffs], Wed Mar 21 18:53:17 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.16.2.3: +2 -2 lines
Diff to previous 1.16.2.3 (colored) to branchpoint 1.16 (colored) next main 1.17 (colored)

Pull in OpenSSH-2.5.2 for 2.7 branch.

Revision 1.16.2.3 / (download) - annotate - [select for diffs], Mon Mar 12 15:44:18 2001 UTC (23 years, 2 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.16.2.2: +12 -5 lines
Diff to previous 1.16.2.2 (colored) to branchpoint 1.16 (colored)

OpenSSH-2.5.1 for 2.7 patch branch

Revision 1.34 / (download) - annotate - [select for diffs], Sat Feb 24 10:37:26 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.33: +2 -2 lines
Diff to previous 1.33 (colored)

ssh2 rsa key before dsa key

Revision 1.33 / (download) - annotate - [select for diffs], Thu Feb 22 18:09:06 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.32: +2 -2 lines
Diff to previous 1.32 (colored)

activate RSA 2 key

Revision 1.21.2.2 / (download) - annotate - [select for diffs], Mon Feb 19 17:19:40 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.21.2.1: +0 -0 lines
Diff to previous 1.21.2.1 (colored) to branchpoint 1.21 (colored)

Pull in OpenSSH-2.5.1

Revision 1.21.2.1 / (download) - annotate - [select for diffs], Fri Feb 16 20:13:23 2001 UTC (23 years, 3 months ago) by jason
Branch: OPENBSD_2_8
Changes since 1.21: +12 -5 lines
Diff to previous 1.21 (colored)

Pull in OpenSSH 2.5.0

Revision 1.32 / (download) - annotate - [select for diffs], Tue Feb 6 22:07:50 2001 UTC (23 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.31: +3 -3 lines
Diff to previous 1.31 (colored)

enable sftp-server by default

Revision 1.31 / (download) - annotate - [select for diffs], Sun Feb 4 21:26:07 2001 UTC (23 years, 3 months ago) by djm
Branch: MAIN
Changes since 1.30: +2 -2 lines
Diff to previous 1.30 (colored)

type: ok markus@

Revision 1.30 / (download) - annotate - [select for diffs], Sat Feb 3 10:19:51 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.29: +3 -3 lines
Diff to previous 1.29 (colored)

Skey is now called ChallengeResponse

Revision 1.29 / (download) - annotate - [select for diffs], Sat Feb 3 10:08:37 2001 UTC (23 years, 3 months ago) by markus
Branch: MAIN
Changes since 1.28: +2 -1 lines
Diff to previous 1.28 (colored)

make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@

Revision 1.28 / (download) - annotate - [select for diffs], Fri Feb 2 12:57:52 2001 UTC (23 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.27: +3 -2 lines
Diff to previous 1.27 (colored)

point at sshd(8) and ssh(1)

Revision 1.27 / (download) - annotate - [select for diffs], Mon Jan 29 01:58:19 2001 UTC (23 years, 3 months ago) by niklas
Branch: MAIN
Changes since 1.26: +2 -0 lines
Diff to previous 1.26 (colored)

$OpenBSD$

Revision 1.26 / (download) - annotate - [select for diffs], Sat Jan 13 18:57:48 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.25: +0 -1 lines
Diff to previous 1.25 (colored)

oops

Revision 1.25 / (download) - annotate - [select for diffs], Sat Jan 13 18:56:48 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.24: +1 -0 lines
Diff to previous 1.24 (colored)

support supplementary group in {Allow,Deny}Groups
from stevesk@pobox.com

Revision 1.24 / (download) - annotate - [select for diffs], Mon Jan 8 22:29:05 2001 UTC (23 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.23: +1 -0 lines
Diff to previous 1.23 (colored)

implement option 'Banner /etc/issue.net' for ssh2, move version to
2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner
is enabled).

Revision 1.23 / (download) - annotate - [select for diffs], Wed Nov 15 20:15:31 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.22: +2 -1 lines
Diff to previous 1.22 (colored)

add entry for HostKey /etc/ssh_host_dsa_key, and comment for ssh-2 rsa keys

Revision 1.22 / (download) - annotate - [select for diffs], Sun Nov 12 19:50:39 2000 UTC (23 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.21: +1 -0 lines
Diff to previous 1.21 (colored)

add support for RSA to SSH2.  please test.

there are now 3 types of keys: RSA1 is used by ssh-1 only,
RSA and DSA are used by SSH2.

you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA
keys for SSH2 and use the RSA keys for hostkeys or for user keys.

SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before.

IdentityFile2, HostDsaKey and DSAAuthentication are obsolete.
you can use multiple IdentityFile and HostKey for all types of keys.

the option DSAAuthentication is replaced by PubkeyAuthetication.

Revision 1.16.2.2 / (download) - annotate - [select for diffs], Wed Nov 8 21:31:33 2000 UTC (23 years, 6 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.16.2.1: +3 -1 lines
Diff to previous 1.16.2.1 (colored) to branchpoint 1.16 (colored)

openssh-2.3.0 (again) for 2.7 branch

Revision 1.21 / (download) - annotate - [select for diffs], Wed Oct 11 20:14:39 2000 UTC (23 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE
Branch point for: OPENBSD_2_8
Changes since 1.20: +1 -0 lines
Diff to previous 1.20 (colored)

add support for s/key (kbd-interactive) to ssh2, based on work by mkiernan@avantgo.com and me

Revision 1.16.2.1 / (download) - annotate - [select for diffs], Fri Sep 1 18:23:25 2000 UTC (23 years, 8 months ago) by jason
Branch: OPENBSD_2_7
Changes since 1.16: +3 -0 lines
Diff to previous 1.16 (colored)

Pull in the rest of openssh-2.2.0 to 2.7 branch (luvin' cvs...)

Revision 1.20 / (download) - annotate - [select for diffs], Thu Aug 31 21:52:24 2000 UTC (23 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.19: +2 -1 lines
Diff to previous 1.19 (colored)

implement a SFTP server. interops with sftp2, scp2 and the windows
client from ssh.com

Revision 1.19 / (download) - annotate - [select for diffs], Fri Aug 4 20:30:35 2000 UTC (23 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.18: +1 -1 lines
Diff to previous 1.18 (colored)

MaxStartups

Revision 1.18 / (download) - annotate - [select for diffs], Sat Jul 22 09:14:37 2000 UTC (23 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.17: +1 -0 lines
Diff to previous 1.17 (colored)

random early drop; ok theo, niels

Revision 1.17 / (download) - annotate - [select for diffs], Sat Jun 17 22:52:34 2000 UTC (23 years, 11 months ago) by jakob
Branch: MAIN
Changes since 1.16: +2 -0 lines
Diff to previous 1.16 (colored)

add support for ssh v2 subsystems. ok markus@.

Revision 1.16 / (download) - annotate - [select for diffs], Mon Apr 17 13:46:53 2000 UTC (24 years, 1 month ago) by todd
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE
Branch point for: OPENBSD_2_7
Changes since 1.15: +1 -0 lines
Diff to previous 1.15 (colored)

show 'Protocol' as an example, ok markus@

Revision 1.15 / (download) - annotate - [select for diffs], Tue Jan 4 00:08:01 2000 UTC (24 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.14: +2 -1 lines
Diff to previous 1.14 (colored)

ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new features:
sshd allows multiple ListenAddress and Port options.  note that libwrap is
not IPv6-ready. (based on patches from fujiwara@rcac.tdi.co.jp)

Revision 1.14 / (download) - annotate - [select for diffs], Thu Nov 11 22:58:39 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.13: +2 -0 lines
Diff to previous 1.13 (colored)

IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok deraadt,millert

Revision 1.13 / (download) - annotate - [select for diffs], Wed Nov 10 23:36:45 1999 UTC (24 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.12: +5 -2 lines
Diff to previous 1.12 (colored)

add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
obsoletes QuietMode and FascistLogging in sshd.

Revision 1.12 / (download) - annotate - [select for diffs], Sun Oct 17 20:48:08 1999 UTC (24 years, 7 months ago) by dugsong
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.11: +0 -3 lines
Diff to previous 1.11 (colored)

remove AllowHosts, DenyHosts, SilentDeny server access control cruft - replace with LIBWRAP moved to child. ok markus@ deraat@

Revision 1.11 / (download) - annotate - [select for diffs], Mon Oct 11 21:07:37 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.10: +0 -2 lines
Diff to previous 1.10 (colored)

UseLogin, default=no, from kpa@gmx.net, ok deraadt@

Revision 1.10 / (download) - annotate - [select for diffs], Thu Oct 7 22:46:33 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.9: +2 -3 lines
Diff to previous 1.9 (colored)

You have Mail. Email fuer Dich. Karsten Patzwaldt <kpa@gmx.net> default=no

Revision 1.9 / (download) - annotate - [select for diffs], Thu Oct 7 21:45:03 1999 UTC (24 years, 7 months ago) by markus
Branch: MAIN
Changes since 1.8: +2 -0 lines
Diff to previous 1.8 (colored)

add skey to sshd:

1) pass *pw to auth_password() not user_name, do_authentication already
   keeps private copy of struct passwd for current user.
2) limit authentication attemps to 5, otherwise
        ssh -o 'NumberOfPasswordPrompts 100000' host
   lets you enter 100000 passwds
3) make s/key a run-time option in /etc/sshd_config
4) generate fake skeys,
   for s/key for nonexisting users, too
   limit auth-tries for nonexisting users, too.
Note that
% ssh -l nonexisting-user -o 'NumberOfPasswordPrompts 100000' host
has NO limits in ssh-1.2.27

Revision 1.8 / (download) - annotate - [select for diffs], Mon Oct 4 18:31:02 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.7: +2 -2 lines
Diff to previous 1.7 (colored)

nicer default

Revision 1.7 / (download) - annotate - [select for diffs], Fri Oct 1 22:23:48 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.6: +0 -1 lines
Diff to previous 1.6 (colored)

randomseed is really gone now

Revision 1.6 / (download) - annotate - [select for diffs], Wed Sep 29 01:37:05 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.5: +11 -5 lines
Diff to previous 1.5 (colored)

show other krb options

Revision 1.5 / (download) - annotate - [select for diffs], Tue Sep 28 19:59:06 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.4: +1 -1 lines
Diff to previous 1.4 (colored)

PasswordAuthentication on by default

Revision 1.4 / (download) - annotate - [select for diffs], Tue Sep 28 18:07:22 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.3: +5 -1 lines
Diff to previous 1.3 (colored)

correct defaults

Revision 1.3 / (download) - annotate - [select for diffs], Tue Sep 28 17:58:51 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +2 -1 lines
Diff to previous 1.2 (colored)

change X options to nice defaults

Revision 1.2 / (download) - annotate - [select for diffs], Sun Sep 26 22:32:03 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.1: +3 -3 lines
Diff to previous 1.1 (colored)

/etc has always been in the same place

Revision 1.1 / (download) - annotate - [select for diffs], Sun Sep 26 22:29:51 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN

distribution target

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.