summaryrefslogtreecommitdiff
path: root/auth1.c
Commit message (Collapse)AuthorAgeFilesLines
* - markus@cvs.openbsd.org 2003/02/06 21:22:43Damien Miller2003-02-241-3/+2
| | | | | [auth1.c auth2.c] undo broken fix for #387, fixes #486
* - (djm) OpenBSD CVS SyncDamien Miller2003-01-231-2/+1
| | | | | | - djm@cvs.openbsd.org 2003/01/23 00:03:00 [auth1.c] Don't log TIS auth response; "get rid of it" - markus@
* - deraadt@cvs.openbsd.org 2002/11/21 23:03:51Ben Lindstrom2002-12-231-2/+2
| | | | | | [auth-krb5.c auth1.c hostfile.h monitor_wrap.c sftp-client.c sftp-int.c ssh-add.c ssh-rsa.c sshconnect.c] KNF
* - markus@cvs.openbsd.org 2002/09/26 11:38:43Damien Miller2002-09-271-4/+11
| | | | | | [auth1.c auth.h auth-krb4.c monitor.c monitor.h monitor_wrap.c] [monitor_wrap.h] krb4 + privsep; ok dugsong@, deraadt@
* Cray fixes (bug 367) based on patch from Wendy Palm @ cray.Tim Rice2002-09-251-0/+9
| | | | This does not include the deattack.c fixes.
* - itojun@cvs.openbsd.org 2002/09/09 06:48:06Damien Miller2002-09-121-3/+15
| | | | | | | [auth1.c auth.h auth-krb5.c monitor.c monitor.h] [monitor_wrap.c monitor_wrap.h] kerberos support for privsep. confirmed to work by lha@stacken.kth.se patch from markus
* - markus@cvs.openbsd.org 2002/08/22 21:33:58Damien Miller2002-09-041-2/+3
| | | | | | [auth1.c auth2.c] auth_root_allowed() is handled by the monitor in the privsep case, so skip this for use_privsep, ok stevesk@, fixes bugzilla #387/325
* - (bal) Failed password attempts don't increment counter on AIX. Bug #145Ben Lindstrom2002-07-041-6/+0
|
* some xxx's for future privsep cleanupDamien Miller2002-06-211-0/+1
|
* - deraadt@cvs.openbsd.org 2002/06/19 00:27:55Ben Lindstrom2002-06-211-2/+2
| | | | | | | | | [auth-bsdauth.c auth-skey.c auth1.c auth2-chall.c auth2-none.c authfd.c authfd.h monitor_wrap.c msg.c nchan.c radix.c readconf.c scp.c sftp.1 ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh-keysign.c ssh.1 sshconnect.c sshconnect.h sshconnect2.c ttymodes.c xmalloc.h] KNF done automatically while reading....
* - (djm) Make privsep work with PAM (still experimental)Damien Miller2002-04-231-2/+3
|
* - markus@cvs.openbsd.org 2002/04/10 08:21:47Ben Lindstrom2002-04-101-4/+10
| | | | | | | [auth1.c compat.c compat.h] strip '@' from username only for KerbV and known broken clients, bug #204 Don't mind me.. I just commited a changelog with no patch. <sigh>
* - (stevesk) [auth-pam.c auth-pam.h auth-passwd.c auth-sia.c auth-sia.hKevin Steves2002-04-041-15/+0
| | | | auth1.c auth2.c] PAM, OSF_SIA password auth cleanup; from djm.
* - (stevesk) [auth1.c] fix password auth for protocol 1 whenKevin Steves2002-04-021-0/+1
| | | | !USE_PAM && !HAVE_OSF_SIA; merge issue.
* - (bal) 'pw' should be 'authctxt->pw' in auth1.c spotted byBen Lindstrom2002-03-271-1/+1
| | | | kent@lysator.liu.se
* - markus@cvs.openbsd.org 2002/03/19 14:27:39Ben Lindstrom2002-03-221-16/+6
| | | | | [auth.c auth1.c auth2.c] make getpwnamallow() allways call pwcopy()
* - provos@cvs.openbsd.org 2002/03/18 17:50:31Ben Lindstrom2002-03-221-10/+15
| | | | | | | | | | | [auth-bsdauth.c auth-options.c auth-rh-rsa.c auth-rsa.c auth-skey.c auth.h auth1.c auth2-chall.c auth2.c kex.c kex.h kexdh.c kexgex.c servconf.c session.h servconf.h serverloop.c session.c sshd.c] integrate privilege separated openssh; its turned off by default for now. work done by me and markus@ applied, but outside of ensure that smaller code bits migrated with their owners.. no work was tried to 'fix' it to work. =) Later project!
* - provos@cvs.openbsd.org 2002/03/18 01:12:14Ben Lindstrom2002-03-221-4/+3
| | | | | | [auth.h auth1.c auth2.c sshd.c] have the authentication functions return the authentication context and then do_authenticated; okay millert@
* - provos@cvs.openbsd.org 2002/03/17 20:25:56Ben Lindstrom2002-03-221-3/+3
| | | | | [auth.c auth.h auth1.c auth2.c] getpwnamallow returns struct passwd * only if user valid; okay markus@
* Stupid djm commits experimental code to head instead of branchDamien Miller2002-03-131-22/+8
| | | | revert
* Import of Niels Provos' 20020312 ssh-complete.diffDamien Miller2002-03-131-8/+22
| | | | PAM, Cygwin and OSF SIA will not work for sure
* - (djm) Bug #114 - not starting PAM for SSH protocol 1 invalid usersDamien Miller2002-02-141-2/+1
|
* - (djm) Cleanup after sync:Damien Miller2002-02-051-1/+1
| | | | - :%s/reverse_mapping_check/verify_reverse_mapping/g
* - markus@cvs.openbsd.org 2002/02/03 17:53:25Damien Miller2002-02-051-1/+2
| | | | | | | | | [auth1.c serverloop.c session.c session.h] don't use channel_input_channel_request and callback use new server_input_channel_req() instead: server_input_channel_req does generic request parsing on server side session_input_channel_req handles just session specific things now ok djm@
* - markus@cvs.openbsd.org 2001/12/28 14:50:54Damien Miller2002-01-221-5/+3
| | | | | [auth1.c auth-rsa.c channels.c dispatch.c kex.c kexdh.c kexgex.c packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c sshconnect2.c sshd.c] packet_read* no longer return the packet length, since it's not used.
* - markus@cvs.openbsd.org 2001/12/28 13:57:33Damien Miller2002-01-221-5/+5
| | | | | [auth1.c kexdh.c kexgex.c packet.c packet.h sshconnect1.c sshd.c] packet_get_bignum* no longer returns a size
* - markus@cvs.openbsd.org 2001/12/27 20:39:58Damien Miller2002-01-221-8/+8
| | | | | [auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c] get rid of packet_integrity_check, use packet_done() instead.
* - markus@cvs.openbsd.org 2001/12/27 20:39:58Damien Miller2002-01-221-9/+8
| | | | | [auth1.c auth-rsa.c channels.c clientloop.c packet.c packet.h serverloop.c session.c ssh.c sshconnect1.c sshd.c ttymodes.c] get rid of packet_integrity_check, use packet_done() instead.
* - markus@cvs.openbsd.org 2001/12/27 19:54:53Damien Miller2002-01-221-2/+2
| | | | | [auth1.c auth.h auth-rh-rsa.c] auth_rhosts_rsa now accept generic keys.
* - markus@cvs.openbsd.org 2001/12/27 18:22:16Damien Miller2002-01-221-18/+13
| | | | | [auth1.c authfile.c auth-rsa.c dh.c kexdh.c kexgex.c key.c rsa.c scard.c ssh-agent.c sshconnect1.c sshd.c ssh-dss.c] call fatal() for openssl allocation failures
* - markus@cvs.openbsd.org 2001/12/25 18:53:00Damien Miller2002-01-221-1/+3
| | | | | [auth1.c] be more carefull on allocation
* - (djm) Apply Cygwin pointer deref fix from Corinna VinschenDamien Miller2001-12-291-2/+2
| | | | <vinschen@redhat.com> Could be abused to guess valid usernames
* - deraadt@cvs.openbsd.org 2001/12/19 07:18:56Damien Miller2001-12-211-10/+10
| | | | | | | | | | | | [auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h] [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c] [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c] [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c] [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c] [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c] [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config] [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c] basic KNF done while i was looking for something else
* - itojun@cvs.openbsd.org 2001/12/05 03:56:39Ben Lindstrom2001-12-061-2/+2
| | | | | | [auth1.c auth2.c canohost.c channels.c deattack.c packet.c scp.c sshconnect2.c] make it compile with more strict prototype checking
* - (djm) AIX login{success,failed} changes. Move loginsuccess call toDamien Miller2001-11-131-12/+0
| | | | | | do_authenticated. Call loginfailed for protocol 2 failures > MAX like we do for protocol 1. Reports from Ralf Wenk <wera0003@fh-karlsruhe.de>, K.Wolkersdorfer@fz-juelich.de and others
* - (djm) Fix early (and double) free of remote user when using Kerberos.Damien Miller2001-11-131-2/+0
| | | | Patch from Simon Wilkinson <simon@sxw.org.uk>
* - dugsong@cvs.openbsd.org 2001/06/26 16:15:25Ben Lindstrom2001-07-041-51/+58
| | | | | | | [auth1.c auth.h auth-krb4.c auth-passwd.c readconf.c readconf.h servconf.c servconf.h session.c sshconnect1.c sshd.c] Kerberos v5 support for SSH1, mostly from Assar Westerlund <assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
* - itojun@cvs.openbsd.org 2001/06/23 15:12:20Ben Lindstrom2001-06-251-3/+3
| | | | | | | | | | | | | [auth1.c auth2.c auth2-chall.c authfd.c authfile.c auth-rhosts.c canohost.c channels.c cipher.c clientloop.c deattack.c dh.c hostfile.c kex.c kexdh.c kexgex.c key.c nchan.c packet.c radix.c readpass.c scp.c servconf.c serverloop.c session.c sftp.c sftp-client.c sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c sshconnect1.c sshconnect2.c sshconnect.c sshd.c ssh-keygen.c ssh-keyscan.c] more strict prototypes. raise warning level in Makefile.inc. markus ok'ed TODO; cleanup headers
* - markus@cvs.openbsd.org 2001/05/18 14:13:29Ben Lindstrom2001-06-051-4/+5
| | | | | | [auth-chall.c auth.h auth1.c auth2-chall.c auth2.c readconf.c readconf.h servconf.c servconf.h sshconnect1.c sshconnect2.c sshd.c] improved kbd-interactive support. work by per@appgate.com and me
* - markus@cvs.openbsd.org 2001/03/23 12:02:49Ben Lindstrom2001-03-241-4/+1
| | | | | [auth1.c] authctxt is now passed to do_authenticated
* - markus@cvs.openbsd.org 2001/03/21 11:43:45Ben Lindstrom2001-03-221-2/+2
| | | | | [auth1.c auth2.c session.c session.h] merge common ssh v1/2 code
* - (bal) auth-chall.c auth-passwd.c auth.h auth1.c auth2.c session.c CVS IDBen Lindstrom2001-03-221-1/+1
| | | | resync
* - stevesk@cvs.openbsd.org 2001/03/08 18:47:12Ben Lindstrom2001-03-081-2/+1
| | | | | [auth1.c] unused; ok markus@
* - markus@cvs.openbsd.org 2001/02/22 21:59:44Ben Lindstrom2001-03-051-1/+2
| | | | | [auth.c auth.h auth1.c auth2.c misc.c misc.h ssh.c] use pwcopy in ssh.c, too
* - (djm) Merge BSD_AUTH support from Markus Friedl and David J. MacKenzieDamien Miller2001-02-181-2/+8
| | | | enable with --with-bsd-auth.
* - markus@cvs.openssh.org 2001/02/13 22:49:40Ben Lindstrom2001-02-151-3/+3
| | | | | [auth1.c auth2.c] setproctitle(user) only if getpwnam succeeds
* - markus@cvs.openbsd.org 2001/02/12 16:16:23Ben Lindstrom2001-02-151-2/+3
| | | | | | | [auth-passwd.c auth.c auth.h auth1.c auth2.c servconf.c servconf.h ssh-keygen.c sshd.8] PermitRootLogin={yes,without-password,forced-commands-only,no} (before this change, root could login even if PermitRootLogin==no)
* - (djm) Split out and improve OSF SIA auth code. Patch from Chris AdamsDamien Miller2001-02-141-14/+4
| | | | <cmadams@hiwaay.net> with a little modification and KNF.
* - (stevesk) auth1.c: fix PAM passwordless check.Kevin Steves2001-02-131-1/+1
|
* - (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike BattersbyDamien Miller2001-02-121-2/+2
| | | | <mib@unimelb.edu.au>
View Lorry Controller Status