894936aa50
Do not permit direct root logins. This makes ssh consistent with
...
NetBSD's default security policy in this area: if you are not on
a secure terminal, you must be able to authenticate as a user in
the "wheel" group before you may attempt to authenticate as root
using the root password.
2001-08-31 08:16:24 +00:00
e99543f805
validate certs correctly. sync with kame
2001-08-06 08:17:40 +00:00
0f6cbd66d3
need string.h for alpha. from chuck
2001-08-06 05:48:50 +00:00
d4d587fb31
(should) fix build on alpha. From: Chuck Silvers <chuq@chuq.com>
2001-08-05 18:52:13 +00:00
7c0934f7f5
While writing sushi's support for sshd.conf, I found out that the manpage
...
lies wrt to MaxStartups. Make the manpage match the code.
2001-08-03 02:29:07 +00:00
5abda287b4
Get rid of "Os KAME".
2001-08-02 12:19:45 +00:00
366bd307b0
sync with 2001/8/2 KAME racoon/libipsec.
2001-08-02 12:15:00 +00:00
7295c743a4
bring in latest racoon/libipsec from KAME. lots of lots of stability fixes.
2001-08-02 12:06:08 +00:00
3f1d5c2789
sshd is now able to log in an user if the filesystem is readonly and the tty
...
owned by root. Note that the tty still must be mode 620, and sshd does not
check which group owns the tty (more problems here?).
This closes NetBSD PR bin/13499
The fix has been commited to OpenSSH CVS. See OpenBSD's PR user/1946.
2001-07-27 23:34:27 +00:00
76371341d1
remove a (potentially) double free
2001-07-18 21:54:56 +00:00
7fc834dc03
upgrade to 0.9.6b. no shlib major/minor bump is necessary.
2001-07-11 06:50:53 +00:00
0eb42056bd
OpenSSL 0.9.6b
2001-07-11 03:54:20 +00:00
a549080f85
OpenSSL 0.9.6b
2001-07-11 03:53:32 +00:00
c1f85780da
Remove another one, noted by Love <lha@stacken.kth.se>, confirmed by thorpej.
2001-07-10 21:52:46 +00:00
7d076b538c
fix PRNG weakness. the workaround presented on bugtraq posting.
2001-07-10 14:01:26 +00:00
eed063b542
Remove some items that have been done, and improve description on some
...
others.
2001-07-09 21:01:31 +00:00
7615e78c24
Remove formatted man pages.
2001-07-08 19:20:55 +00:00
f5bb393643
add missing .El
2001-07-05 20:47:31 +00:00
d8ec602681
Note: just because our macros/groff/whatever terminates .Bl internall for a
...
new .Sh doesn't mean the ending .El should be omitted
2001-06-26 00:52:59 +00:00
d91e447e6b
PRevent one of these:
...
List open at EOF -- A .Bl directive has no matching .El
2001-06-25 23:37:27 +00:00
419e44fdc2
Mostly formatting fixes.
2001-06-24 17:44:11 +00:00
7b726945ac
There is no photurisd(8).
2001-06-24 17:29:43 +00:00
f9feddfb52
add string.h, noted by Staffan Thomen <duck@multi.fi>
2001-06-23 22:42:43 +00:00
69d60502fe
upgrade to openssh 2.9, around 2001/6/24 (from openbsd usr.bin/ssh).
...
- authorized_keys2 and known_hosts2 are obsoleted, and integrated
into those without "2".
- file name change, /etc/primes -> /etc/moduli
- cleanups
2001-06-23 19:37:38 +00:00
0d521994cf
OpenBSD 2001/6/24
2001-06-23 19:09:44 +00:00
6cc43ed622
OpenSSH 2.9 as of 2001/6/24
2001-06-23 16:36:22 +00:00
5324608adc
reject expired password/account. warn if interactive && about to expire.
...
ala login(1). From: Brian Poole <raj@cerias.purdue.edu>
XXX code duplicate with login(1) - should be solved by BSD AUTH code integration
2001-06-23 08:08:04 +00:00
fed4515da9
bump netbsd-local version number to identify X11 "cookies" fix
2001-06-20 07:49:45 +00:00
4b1c7f1857
update generated heimdal include files for 0.3f
...
update Makefile infrastructure for 0.3f
bump shared library versions
fix some merge problems
2001-06-20 02:01:18 +00:00
df54fb31c9
merge in conflicts after 0.3f import
2001-06-19 22:39:52 +00:00
c6c55d41cd
import of heimdal 0.3f
2001-06-19 22:08:08 +00:00
f9ab899fe6
import of heimdal 0.3f
2001-06-19 22:07:32 +00:00
ab32b074ec
If UseLogin is enabled, disable X11Forwarding (since xauth passing doesn't
...
work in this case, so X11Forwarding is effectively useless). Document this.
Resolves my pr [security/13172].
2001-06-18 10:26:33 +00:00
b6449b85de
Add RCS Id, adapt to NetBSD, fix punctuation and whitespace.
2001-06-15 12:50:44 +00:00
0cc24e9a9f
On note by kleink: Add primes.5 to crypto/dist/ssh instead of share/man/man5.
...
Import state of 2001-06-14.
2001-06-15 12:47:39 +00:00
82b8462ccf
apply ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/006_sshcookie.patch.
...
sshd(8) allows users to delete arbitrary files named "cookies"
if X11 forwarding is enabled. X11 forwarding is disabled by
default.
2001-06-14 02:45:30 +00:00
f7528da67e
make it compile with KRB4 and not with KRB5. from IIJ SEIL team
2001-06-14 02:42:31 +00:00
71a78ab6ea
Note that HEIMDAL should be removed after '.Os' in man pages on import.
2001-06-05 17:08:07 +00:00
8f12cb2799
not yet operational Heimdal import script
2001-06-05 17:04:24 +00:00
5e80b5d2de
Remove trailing dot in Nd.
2001-06-05 12:19:35 +00:00
4abaa1bb50
No argument for .Os.
2001-06-05 11:11:07 +00:00
04065ff226
No argument for .Os.
2001-06-05 10:13:54 +00:00
48a36de9c0
Don't give .Os an argument, not even 'NetBSD' (default includes version).
2001-06-05 10:08:03 +00:00
59dea86dc0
disable DNSSEC build, for two reasons. (1) restrictive license
...
(2) due to protocol changes BIND8 DNSSEC code is not really useful
2001-05-27 04:39:40 +00:00
de1e278afa
$NetBSD$
2001-05-26 23:26:59 +00:00
c01f1862d6
prime table for OpenSSH, from OpenBSD etc/primes
2001-05-26 23:24:21 +00:00
900d6f1790
BIND 8.2.4
2001-05-17 20:45:58 +00:00
5bb235dbab
recover $NetBSD$
2001-05-15 16:00:32 +00:00
f4532f2487
upgrade to openssh (openbsd usr.bin/ssh) 2.9, around 5/15/2001.
2001-05-15 15:26:07 +00:00
72af75e4ce
OpenSSH 2.9 as of 2001/5/15
2001-05-15 15:02:20 +00:00
d9f67f8672
reduce amount of diff with openbsd usr.bin/ssh (for -Wall -Werror clean)
...
so that we can get rid of local changes.
openssh side do not like static functions so put prototypes into each files
rather than making function static.
2001-05-15 14:50:49 +00:00
c85f9c433b
Do not discard input data from client for channels waiting for connection
...
establishment.
2001-05-08 03:02:35 +00:00
ba3d920481
fix argument number test
2001-05-04 13:09:43 +00:00
cbf5d74c87
fix argument count check after getarg change; spotted by Mark Davies
...
in bin/12696
2001-04-19 07:30:04 +00:00
b7ab24621c
do not attempt to pass null pointer to krb5 library. PR 12683
2001-04-17 12:27:37 +00:00
517c969698
Fix possible core dump in "ssh-add". Patch supplied by Wolfgang Rupprecht
...
in PR pkg/12669.
2001-04-16 03:10:14 +00:00
aae394a457
make it compile on macppc (or, platforms where char = unsigned char)
...
From: Dave Huang <khym@azeotrope.org>
2001-04-14 08:36:12 +00:00
08f45e7850
fix unterminated L<>.
2001-04-12 09:42:45 +00:00
974c617dfe
sync better with 0.9.6a.
2001-04-12 07:57:56 +00:00
35a07da1df
use openssl 0.9.6a. shlib major # is bumped for libcrypto, libssl and
...
all kerberos libraries.
2001-04-12 07:48:03 +00:00
75902e8d9b
OpenSSL 0.9.6a
2001-04-12 03:10:36 +00:00
3095531005
OpenSSL 0.9.6a
2001-04-12 03:08:43 +00:00
b9e8ac0f0f
OpenSSL 0.9.6a
2001-04-12 03:06:03 +00:00
374141fb16
duplicated calls to login_getclass.
...
From: Jim Bernard <jbernard@mines.edu>
2001-04-11 23:39:46 +00:00
00daa6e0e2
Fix date.
2001-04-11 19:37:45 +00:00
51e75c4dd0
add section to xref
2001-04-11 19:28:27 +00:00
f3e777112c
Fix date.
2001-04-11 18:23:42 +00:00
9e3025d914
des_cblock_print_file() does not really exist.
2001-04-11 10:13:28 +00:00
8acc6b96b1
refer ~/.ssh/id_rsa{.pub,}. sync with openbsd usr.bin/ssh.
2001-04-10 09:15:49 +00:00
235b9f0c2f
upgrade to openssh 2.5.4 (2001/4/10).
...
major behavior changes: (made in openssh master tree - openbsd usr.bin/ssh)
- ssh(1) now defaults to ssh protocol version 2.
if you want version 1 to take precedence, use /etc/ssh.conf to override.
- config change: ~/.ssh/id_rsa[12] is now ~/.ssh/id_rsa (changed 4/3)
- forced client rekey for protocol version 2 (~R)
- swap gid when uid swaps.
- ListenAddress syntax can take [foo]:port for IPv6 numerics.
- "ssh -D 1080" allows us to use ssh tunnel as SOCKS4 proxy.
2001-04-10 08:07:54 +00:00
d5fbc62ac3
OpenSSH 2.5.4 as of 2001/04/10
2001-04-10 07:13:48 +00:00
8626516b97
Prefer logical mark-up in one place.
2001-04-09 13:01:11 +00:00
18a4938209
Fix date.
2001-04-09 12:49:14 +00:00
f1e8ff0ae6
Fix date.
2001-04-09 12:42:35 +00:00
dfaae5d853
Fix markup bug accidentally un-done in 0.3e merge fixup.
2001-04-07 22:20:33 +00:00
f4872dded4
Reduce diffs with 0.3e (mostly, complete the merge).
2001-04-07 21:29:20 +00:00
9ad709dc65
More mishaps from the 0.3e merge.
2001-04-07 21:03:51 +00:00
14dbdf5518
Negative exit code cleanup: Replace exit(-x) with exit(x).
...
As seen on tech-userlevel.
2001-04-06 11:13:45 +00:00
01692d62bf
0.3e import leftover. heimdal experts, please check.
2001-04-06 10:10:21 +00:00
500c4f040b
sync HEAD with v0-3e tag. it seems that it was left behind when heimdal
...
0.3e is imported. without this change, lib/libhdb does not compile.
PR12560
2001-04-06 08:32:35 +00:00
6158847f3d
Prevent a NULL-pointer deref when making a TGS_REP for a ticket
...
renewal.
Patch from Assar via private mail.
2001-04-06 04:39:31 +00:00
d545f30495
Merge April 4, 2001 racoon/libipsec.
2001-04-04 19:36:39 +00:00
089a40db4b
Import racoon/libipsec as of April 4, 2001.
2001-04-04 19:33:00 +00:00
6b5ab77765
fo -> for
2001-04-02 18:25:34 +00:00
7d378dde0d
It's vs. Its.
2001-04-02 17:28:29 +00:00
315c0a92f9
if debugging (i.e, -v), use options.level instead of SYSLOG_LEVEL_INFO
...
to the first call to log_init(), otherwise debug messages from config
file parsing won't appear. (this seems to have been broken in recent
versions of openssh)
2001-04-02 03:53:36 +00:00
6fe37483a3
Set the KRB5CCNAME envrironment variable in the child if we received
...
forwarded Kerberos 5 credentials, so that the process that needs them
can actually find them.
2001-03-28 03:31:52 +00:00
8ab184566c
When we receive forwarded Kerberos credentials, stuff them into
...
a file credential cache (rather than a memory credential cache)
so that they're useful.
2001-03-28 03:17:23 +00:00
2651b336ba
Somewhat crude hack to make Kerberos 5 credential forwarding work.
2001-03-28 03:02:51 +00:00
2f7b0c6c27
Print useful Kerberos error messages.
2001-03-27 03:58:02 +00:00
0265b9e0c2
redo 1.1 -> 1.2. on RAND_file_name(), return /dev/urandom by default.
...
RAND_{load,write}_file() takes care of device file case. from openbsd.
2001-03-26 18:08:25 +00:00
522ac04d08
backout 1.1 -> 1.2 (use /dev/urandom if no value can be found),
...
/dev/urandom is not a normal file - there'll be no EOF.
noticed by Manuel Bouyer.
2001-03-21 19:49:50 +00:00
08e4590096
Cast to (long long) when using "%lld" in a printf format.
2001-03-21 00:11:06 +00:00
37da3c3c3c
sync with openssh 2.5.2 (from openbsd usr.bin/ssh, not from portable).
2001-03-19 20:03:24 +00:00
7617bcad07
OpenSSH 2.5.2 as of 3/19/2001, from openbsd usr.bin/ssh
2001-03-19 19:42:00 +00:00
9ab0878e2a
If we get a KRB5KRB_AP_ERR_BAD_INTEGRITY on a TGS req with
...
a key usage of KRB5_KU_TGS_REQ_AUTH, then try again with a
key usage of KRB5_KU_AP_REQ_AUTH. This addresses an interop
issue between new kinit(1) (0.3e) and older KDCs (such as 0.3a).
Patch from assar@netbsd.org ; see discussion on current-users.
2001-03-12 19:25:51 +00:00
bee147163e
simplify the krb5 code somewhat
2001-03-12 17:56:36 +00:00
3fba4682aa
Fix LP64 problem in Kerberos 5 TGT passing.
2001-03-09 06:28:30 +00:00
ca0ffe95fb
Merge 2002/03/08 racoon import.
2001-03-08 22:27:52 +00:00
29f3673b42
KAME racoon as of 2001/03/08.
2001-03-08 22:18:05 +00:00
cjs