summaryrefslogtreecommitdiffstats
path: root/auth.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* - (dtucker) [auth-passwd.c auth.c session.c sshd.c port-aix.c port-aix.h]Darren Tucker2003-07-081-21/+16
| | | | Convert aixloginmsg into platform-independant Buffer loginmsg.
* - (djm) OpenBSD CVS SyncDamien Miller2003-06-031-2/+2
| | | | | | | | | | | | | - markus@cvs.openbsd.org 2003/06/02 09:17:34 [auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c] [canohost.c monitor.c servconf.c servconf.h session.c sshd_config] [sshd_config.5] deprecate VerifyReverseMapping since it's dangerous if combined with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@ - (djm) Fix portable-specific uses of verify_reverse_mapping too
* - (djm) Add new UsePAM configuration directive to allow runtime controlDamien Miller2003-05-141-5/+5
| | | | | over usage of PAM. This allows non-root use of sshd when built with --with-pam
* - (djm) RCSID sync w/ OpenBSDDamien Miller2003-05-141-1/+1
|
* - (dtucker) Move handling of bad password authentications into a platformDarren Tucker2003-05-021-10/+5
| | | | specific record_failed_login() function (affects AIX & Unicos).
* - (djm) Fix missed log => logit occurance (reference by function pointer)Damien Miller2003-04-091-1/+1
|
* *** empty log message ***Damien Miller2003-04-091-15/+15
|
* - (djm) Revert fix for Bug #442 for now.Damien Miller2003-01-181-44/+28
|
* [auth.c] declare today at top of allowed_user() to keep older compilers happy.Tim Rice2003-01-091-1/+4
|
* - (djm) Fix my fix of the fix for the Bug #442 for PAM case. Spotted byDamien Miller2003-01-071-33/+36
| | | | dtucker@zip.com.au. Reorder for clarity too.
* - (djm) Bug #178: On AIX /etc/nologin wasnt't shown to users. Fix fromDamien Miller2003-01-071-2/+8
| | | | Ralf.Wenk@fh-karlsruhe.de and dtucker@zip.com.au
* - (djm) Fix Bug #442 for PAM caseDamien Miller2003-01-071-3/+1
|
* - (djm) Bug #442: Check for and deny access to accounts with lockedDamien Miller2003-01-071-5/+16
| | | | passwords. Patch from dtucker@zip.com.au
* - (bal) AIX does not log login attempts for unknown users (bug #432).Ben Lindstrom2002-11-091-0/+5
| | | | patch by dtucker@zip.com.au
* - markus@cvs.openbsd.org 2002/11/04 10:07:53Ben Lindstrom2002-11-091-7/+5
| | | | | | [auth.c] don't compare against pw_home if realpath fails for pw_home (seen on AFS); ok djm@
* 20021015Ben Lindstrom2002-10-161-1/+7
| | | | - (bal) Fix bug id 383 and only call loginrestrict for AIX if not root.
* - stevesk@cvs.openbsd.org 2002/09/20 18:41:29Damien Miller2002-09-211-2/+7
| | | | | | [auth.c] log illegal user here for missing privsep case (ssh2). this is executed in the monitor. ok markus@
* - stevesk@cvs.openbsd.org 2002/08/08 23:54:52Ben Lindstrom2002-08-201-2/+2
| | | | | [auth.c] typo in comment
* - (bal) Failed password attempts don't increment counter on AIX. Bug #145Ben Lindstrom2002-07-041-0/+8
|
* unbreak (aaarrrgggh - stupid vi)Damien Miller2002-05-221-1/+1
|
* rcsid syncDamien Miller2002-05-221-3/+3
|
* - markus@cvs.openbsd.org 2002/05/13 20:44:58Ben Lindstrom2002-05-151-1/+47
| | | | | | [auth-options.c auth.c auth.h] move the packet_send_debug handling from auth-options.c to auth.c; ok provos@
* - (stevesk) [auth.c] Shadow account and expiration cleanup. NowKevin Steves2002-05-101-6/+23
| | | | check for root forced expire. Still don't check for inactive.
* - markus@cvs.openbsd.org 2002/03/19 15:31:47Ben Lindstrom2002-03-221-2/+4
| | | | | [auth.c] check for NULL; from provos@
* - markus@cvs.openbsd.org 2002/03/19 14:27:39Ben Lindstrom2002-03-221-2/+3
| | | | | [auth.c auth1.c auth2.c] make getpwnamallow() allways call pwcopy()
* - markus@cvs.openbsd.org 2002/03/19 10:49:35Ben Lindstrom2002-03-221-5/+5
| | | | | | | [auth-krb5.c auth-rh-rsa.c auth.c cipher.c key.c misc.h packet.c session.c sftp-client.c sftp-glob.h sftp.c ssh-add.c ssh.c sshconnect2.c sshd.c ttymodes.c] KNF whitespace
* - provos@cvs.openbsd.org 2002/03/18 03:41:08Ben Lindstrom2002-03-221-3/+23
| | | | | [auth.c session.c] move auth_approval into getpwnamallow with help from millert@
* - provos@cvs.openbsd.org 2002/03/17 20:25:56Ben Lindstrom2002-03-221-1/+13
| | | | | [auth.c auth.h auth1.c auth2.c] getpwnamallow returns struct passwd * only if user valid; okay markus@
* - itojun@cvs.openbsd.org 2002/03/15 11:00:38Ben Lindstrom2002-03-221-2/+3
| | | | | [auth.c] fix file type checking (use S_ISREG). ok by markus
* - markus@cvs.openbsd.org 2002/03/01 13:12:10Ben Lindstrom2002-03-051-3/+9
| | | | | | | [auth.c match.c match.h] undo the 'delay hostname lookup' change match.c must not use compress.c (via canonhost.c/packet.c) thanks to wilfried@
* - stevesk@cvs.openbsd.org 2002/02/28 20:56:00Ben Lindstrom2002-03-051-6/+25
| | | | | [auth.c] log user not allowed details, from dwd@bell-labs.com; ok markus@
* - stevesk@cvs.openbsd.org 2002/02/28 19:36:28Ben Lindstrom2002-03-051-9/+3
| | | | | | [auth.c match.c match.h] delay hostname lookup until we see a ``@'' in DenyUsers and AllowUsers for sshd -u0; ok markus@
* - markus@cvs.openbsd.org 2002/01/29 14:32:03Damien Miller2002-02-051-2/+2
| | | | | [auth2.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c canohost.c servconf.c servconf.h session.c sshd.8 sshd_config] s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@
* - deraadt@cvs.openbsd.org 2001/12/19 07:18:56Damien Miller2001-12-211-4/+4
| | | | | | | | | | | | [auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h] [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c] [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c] [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c] [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c] [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c] [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config] [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c] basic KNF done while i was looking for something else
* - stevesk@cvs.openbsd.org 2001/11/17 19:14:34Ben Lindstrom2001-12-061-2/+2
| | | | | [auth2.c auth.c readconf.c servconf.c ssh-agent.c ssh-keygen.c] enum/int type cleanup where it made sense to do so; ok markus@
* - markus@cvs.openbsd.org 2001/11/08 20:02:24Damien Miller2001-11-121-2/+2
| | | | | | | | [auth.c] don't print ROOT in CAPS for the authentication messages, i.e. Accepted publickey for ROOT from 127.0.0.1 port 42734 ssh2 becomes Accepted publickey for root from 127.0.0.1 port 42734 ssh2
* - markus@cvs.openbsd.org 2001/10/03 10:01:20Ben Lindstrom2001-10-031-3/+8
| | | | | [auth.c] use realpath() for homedir, too. from jinmei@isl.rdc.toshiba.co.jp
* - markus@cvs.openbsd.org 2001/07/11 18:26:15Damien Miller2001-07-141-10/+7
| | | | | | [auth.c] no need to call dirname(pw->pw_dir). note that dirname(3) modifies its argument on some systems.
* - (djm) Revert dirname fix, a better one is on its way.Damien Miller2001-07-141-5/+1
|
* - (djm) dirname(3) may modify its argument on glibc and other systems.Damien Miller2001-07-111-1/+5
| | | | Patch from markus@, spotted by Tom Holroyd <tomh@po.crl.go.jp>
* - markus@cvs.openbsd.org 2001/06/27 04:48:53Ben Lindstrom2001-07-041-3/+11
| | | | | [auth.c match.c sshd.8] tridge@samba.org
* - provos@cvs.openbsd.org 2001/06/25 17:54:47Ben Lindstrom2001-07-041-2/+13
| | | | | | [auth.c auth.h auth-rsa.c] terminate secure_filename checking after checking homedir. that way it works on AFS. okay markus@
* - markus@cvs.openbsd.org 2001/06/23 00:20:57Ben Lindstrom2001-06-251-1/+42
| | | | | | | [auth2.c auth.c auth.h auth-rh-rsa.c] *known_hosts2 is obsolete for hostbased authentication and only used for backward compat. merge ssh1/2 hostkey check and move it to auth.c
* - (bal) NeXT/MacOS X lack libgen.h and dirname(). Patch by Mark MillerBen Lindstrom2001-06-101-0/+2
| | | | <markm@swoon.net>
* - markus@cvs.openbsd.org 2001/05/24 11:12:42Ben Lindstrom2001-06-051-2/+2
| | | | | [auth.c] fix comment; from jakob@
* - markus@cvs.openbsd.org 2001/05/20 17:20:36Ben Lindstrom2001-06-051-1/+134
| | | | | | | [auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8 sshd_config] configurable authorized_keys{,2} location; originally from peter@; ok djm@
* - markus@cvs.openbsd.org 2001/03/19 17:07:23Damien Miller2001-03-191-11/+2
| | | | | [auth.c readconf.c] undo /etc/shell and proto 2,1 change for openssh-2.5.2
* - markus@cvs.openbsd.org 2001/03/17 17:27:59Ben Lindstrom2001-03-181-2/+11
| | | | | [auth.c] check /etc/shells, too
* - deraadt@cvs.openbsd.org 2001/03/02 18:54:31Ben Lindstrom2001-03-051-2/+2
| | | | | | | [atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8] make copyright lines the same format
* - markus@cvs.openbsd.org 2001/02/22 21:59:44Ben Lindstrom2001-03-051-21/+1
| | | | | [auth.c auth.h auth1.c auth2.c misc.c misc.h ssh.c] use pwcopy in ssh.c, too
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-02 09:54:17 +0100