summaryrefslogtreecommitdiff
path: root/servconf.c
Commit message (Collapse)AuthorAgeFilesLines
* - djm@cvs.openbsd.org 2005/06/17 02:44:33djm2005-06-171-3/+4
| | | | | | | | | | | [auth-rsa.c auth.c auth1.c auth2-chall.c auth2-gss.c authfd.c authfile.c] [bufaux.c canohost.c channels.c cipher.c clientloop.c dns.c gss-serv.c] [kex.c kex.h key.c mac.c match.c misc.c packet.c packet.h scp.c] [servconf.c session.c session.h sftp-client.c sftp-server.c sftp.c] [ssh-keyscan.c ssh-rsa.c sshconnect.c sshconnect1.c sshconnect2.c sshd.c] make this -Wsign-compare clean; ok avsm@ markus@ NB. auth1.c changes not committed yet (conflicts with uncommitted sync) NB2. more work may be needed to make portable Wsign-compare clean
* - markus@cvs.openbsd.org 2005/05/16 15:30:51djm2005-05-261-1/+4
| | | | | [readconf.c servconf.c] check return value from strdelim() for NULL (AddressFamily); mpech
* - deraadt@cvs.openbsd.org 2005/03/10 22:01:05dtucker2005-03-141-2/+2
| | | | | | | [misc.c ssh-keygen.c servconf.c clientloop.c auth-options.c ssh-add.c monitor.c sftp-client.c bufaux.h hostfile.c ssh.c sshconnect.c channels.c readconf.c bufaux.c sftp.c] spacing
* - djm@cvs.openbsd.org 2005/03/01 10:09:52djm2005-03-011-33/+32
| | | | | | | | | | [auth-options.c channels.c channels.h clientloop.c compat.c compat.h] [misc.c misc.h readconf.c readconf.h servconf.c ssh.1 ssh.c ssh_config.5] [sshd_config.5] bz#413: allow optional specification of bind address for port forwardings. Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports.
* - djm@cvs.openbsd.org 2004/12/23 23:11:00dtucker2005-01-191-5/+27
| | | | | | [servconf.c servconf.h sshd.c sshd_config sshd_config.5] bz #898: support AddressFamily in sshd_config. from peak@argo.troja.mff.cuni.cz; ok deraadt@
* - dtucker@cvs.openbsd.org 2004/08/13 11:09:24dtucker2004-08-131-2/+2
| | | | | | [servconf.c] Fix line numbers off-by-one in error messages, from tortay at cc.in2p3.fr ok markus@, djm@
* - dtucker@cvs.openbsd.org 2004/08/11 11:09:54dtucker2004-08-121-4/+4
| | | | | [servconf.c] Fix minor leak; "looks right" deraadt@
* - deraadt@cvs.openbsd.org 2004/07/11 17:48:47dtucker2004-07-171-2/+2
| | | | | | | | [channels.c cipher.c clientloop.c clientloop.h compat.h moduli.c readconf.c nchan.c pathnames.h progressmeter.c readconf.h servconf.c session.c sftp-client.c sftp.c ssh-agent.1 ssh-keygen.c ssh.c ssh1.h sshd.c ttymodes.h] spaces
* - djm@cvs.openbsd.org 2004/06/24 19:30:54dtucker2004-06-251-12/+36
| | | | | [servconf.c servconf.h sshd.c] re-exec sshd on accept(); initial work, final debugging and ok markus@
* - dtucker@cvs.openbsd.org 2004/05/23 23:59:53dtucker2004-05-241-2/+11
| | | | | [auth.c auth.h auth1.c auth2.c servconf.c servconf.h sshd_config sshd_config.5] Add MaxAuthTries sshd config option; ok markus@
* - deraadt@cvs.openbsd.org 2004/05/08 00:01:37dtucker2004-05-131-2/+1
| | | | | | [auth.c clientloop.c misc.h servconf.c ssh.c sshpty.h sshtty.c tildexpand.c], removed: sshtty.h tildexpand.h make two tiny header files go away; djm ok
* - djm@cvs.openbsd.org 2004/04/27 09:46:37dtucker2004-05-021-2/+17
| | | | | | | [readconf.c readconf.h servconf.c servconf.h session.c session.h ssh.c ssh_config.5 sshd_config.5] bz #815: implement ability to pass specified environment variables from the client to the server; ok markus@
* - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]dtucker2004-01-231-1/+1
| | | | | | | | Change AFS symbol to USE_AFS to prevent namespace collisions, do not include kafs.h unless necessary. From deengert at anl.gov. For consistency, all of the libkafs bits are now inside "#if defined(KRB5) && defined(USE_AFS)".
* - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c]dtucker2004-01-051-0/+4
| | | | Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@
* - jakob@cvs.openbsd.org 2003/12/23 16:12:10dtucker2003-12-311-1/+11
| | | | | [servconf.c servconf.h session.c sshd_config] implement KerberosGetAFSToken server option. ok markus@, beck@
* - markus@cvs.openbsd.org 2003/12/09 21:53:37djm2003-12-171-8/+9
| | | | | | | [readconf.c readconf.h scp.1 servconf.c servconf.h sftp.1 ssh.1] [ssh_config.5 sshconnect.c sshd.c sshd_config.5] rename keepalive to tcpkeepalive; the old name causes too much confusion; ok djm, dtucker; with help from jmc@
* - markus@cvs.openbsd.org 2003/09/29 20:19:57dtucker2003-10-021-3/+3
| | | | | [servconf.c sshd_config] GSSAPICleanupCreds -> GSSAPICleanupCredentials
* - (djm) Sync with V_3_7 branch:djm2003-09-231-1/+1
| | | | | | | | | | | - (djm) Fix SSH1 challenge kludge - (djm) Bug #671: Fix builds on OpenBSD - (djm) Bug #676: Fix PAM stack corruption - (djm) Fix bad free() in PAM code - (djm) Don't call pam_end before pam_init - (djm) Enable build with old OpenSSL again - (djm) Trim deprecated options from INSTALL. Mention UsePAM - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
* - markus@cvs.openbsd.org 2003/09/01 18:15:50djm2003-09-021-8/+1
| | | | | [readconf.c readconf.h servconf.c servconf.h ssh.c] remove unused kerberos code; ok henning@
* - markus@cvs.openbsd.org 2003/08/28 12:54:34djm2003-09-021-3/+2
| | | | | | | | [auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c] [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5] [sshconnect1.c sshd.c sshd_config sshd_config.5] remove kerberos support from ssh1, since it has been replaced with GSSAPI; but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
* - markus@cvs.openbsd.org 2003/08/22 10:56:09dtucker2003-08-261-1/+23
| | | | | | | | | [auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c session.h ssh-gss.h ssh_config.5 sshconnect2.c sshd_config sshd_config.5] support GSS API user authentication; patches from Simon Wilkinson, stripped down and tested by Jakob and myself.
* - (djm) Bug #629: Mark ssh_config option "pamauthenticationviakbdint"BEFORE_KRB5_GSSAPI_MERGEdjm2003-08-261-2/+3
| | | | | as deprecated. Remove mention from README.privsep. Patch from aet AT cc.hut.fi
* - markus@cvs.openbsd.org 2003/08/13 08:46:31dtucker2003-08-131-10/+3
| | | | | | | [auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5] remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@, fgsch@, miod@, henning@, jakob@ and others
* - (dtucker) OpenBSD CVS SyncPOST_KRB4_REMOVALdtucker2003-08-021-22/+3
| | | | | | | | | | | | | - markus@cvs.openbsd.org 2003/07/22 13:35:22 [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h] remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henning@ - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support. - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files. I hope I got this right....
* - (djm) Bug #573 - Remove unneeded Krb headers and compat goop. Patch fromdjm2003-06-041-12/+0
| | | | simon@sxw.org.uk (Also matches a change in OpenBSD a while ago)
* - (djm) OpenBSD CVS Syncdjm2003-06-031-9/+10
| | | | | | | | | | | | | - markus@cvs.openbsd.org 2003/06/02 09:17:34 [auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c] [canohost.c monitor.c servconf.c servconf.h session.c sshd_config] [sshd_config.5] deprecate VerifyReverseMapping since it's dangerous if combined with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@ - (djm) Fix portable-specific uses of verify_reverse_mapping too
* - (djm) Add warning for UsePAM when built without PAM supportdjm2003-05-161-4/+4
|
* - jakob@cvs.openbsd.org 2003/05/15 14:02:47djm2003-05-161-6/+20
| | | | | [readconf.c servconf.c] warn for unsupported config option. ok markus@
* - (djm) Enable UsePAM when built --with-pamdjm2003-05-151-0/+4
|
* - jakob@cvs.openbsd.org 2003/05/15 04:08:44djm2003-05-151-1/+5
| | | | | [readconf.c servconf.c] disable kerberos when not supported. ok markus@
* - jakob@cvs.openbsd.org 2003/05/15 01:48:10djm2003-05-151-39/+6
| | | | | | [readconf.c readconf.h servconf.c servconf.h] always parse kerberos options. ok djm@ markus@ - (djm) Always parse UsePAM
* - (djm) Add new UsePAM configuration directive to allow runtime controldjm2003-05-141-7/+11
| | | | | over usage of PAM. This allows non-root use of sshd when built with --with-pam
* - (djm) RCSID sync w/ OpenBSDdjm2003-05-141-8/+12
|
* *** empty log message ***djm2003-04-091-1/+1
|
* - markus@cvs.openbsd.org 2003/02/21 09:05:53djm2003-02-241-1/+2
| | | | | [servconf.c] print sshd_config filename in debug2 mode.
* - (djm) OpenBSD CVS Syncdjm2002-09-051-2/+2
| | | | | | | - stevesk@cvs.openbsd.org 2002/09/04 18:52:42 [servconf.c sshd.8 sshd_config.5] default LoginGraceTime to 2m; 1m may be too short for slow systems. ok markus@
* - stevesk@cvs.openbsd.org 2002/08/21 19:38:06djm2002-09-041-2/+2
| | | | | [servconf.c sshd.8 sshd_config sshd_config.5] change LoginGraceTime default to 1 minute; ok mouring@ markus@
* - markus@cvs.openbsd.org 2002/07/30 17:03:55mouring2002-08-011-2/+10
| | | | | | [auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5] add PermitUserEnvironment (off by default!); from dot@dotat.at; ok provos, deraadt
* (bal/tim) [acconfig.h configure.ac monitor_mm.c servconf.ctim2002-07-141-1/+1
| | | | | | openbsd-compat/Makefile.in] support compression on platforms that have no/broken MAP_ANON. Moved code to openbsd-compat/xmmap.c Based on patch from nalin@redhat.com of code extracted from Owl's package
* - (bal) if mmap() is substandard, don't allow compression on server side.mouring2002-06-251-1/+1
| | | | Post 'event' we will add more options.
* - deraadt@cvs.openbsd.org 2002/06/23 09:46:51mouring2002-06-231-10/+11
| | | | | [bufaux.c servconf.c] minor KNF. things the fingers do while you read
* - (djm) Warn and disable compression on platforms which can't handle bothdjm2002-06-211-0/+10
| | | | useprivilegeseparation=yes and compression=yes
* - markus@cvs.openbsd.org 2002/06/20 23:05:56mouring2002-06-211-2/+10
| | | | | [servconf.c servconf.h session.c sshd.c] allow Compression=yes/no in sshd_config
* - markus@cvs.openbsd.org 2002/05/15 21:56:38mouring2002-06-061-3/+3
| | | | | [servconf.c sshd.8 sshd_config] re-enable privsep and disable setuid for post-3.2.2
* - markus@cvs.openbsd.org 2002/05/15 21:02:53mouring2002-05-151-3/+3
| | | | | [servconf.c sshd.8 sshd_config] disable privsep and enable setuid for the 3.2.2 release
* - deraadt@cvs.openbsd.org 2002/05/04 02:39:35mouring2002-05-151-3/+3
| | | | | | [servconf.c sshd.8 sshd_config] enable privsep by default; provos ok (historical)
* - markus@cvs.openbsd.org 2002/04/22 16:16:53djm2002-04-231-2/+2
| | | | | [servconf.c sshd.8 sshd_config] do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@
* - (djm) OpenBSD CVS Syncdjm2002-04-231-2/+2
| | | | | | - deraadt@cvs.openbsd.org 2002/04/20 09:02:03 [servconf.c] No, afs requires explicit enabling
* - (djm) Add KrbV support patch from Simon Wilkinson <simon@sxw.org.uk>djm2002-04-131-1/+10
|
* - stevesk@cvs.openbsd.org 2002/03/20 19:12:25mouring2002-03-221-19/+2
| | | | | | [servconf.c servconf.h ssh.h sshd.c] for unprivileged user, group do: pw=getpwnam(SSH_PRIVSEP_USER); do_setusercontext(pw). ok provos@
View Lorry Controller Status