openssh - openssh

	Commit message (Collapse)	Author	Age	Files	Lines
*	upstream: sshd: switch GSSAPI to sshbuf API; ok djm@	markus@openbsd.org	2018-07-10	1	-3/+2
\| \| \| \|	OpenBSD-Commit-ID: e48449ab4be3f006f7ba33c66241b7d652973e30
*	- (dtucker) [auth2-gss.c gss-serv-krb5.c] Include misc.h for fwd_opts, used	Darren Tucker	2014-07-18	1	-0/+1
\| \| \| \|	in servconf.h.
*	- (dtucker) [gss-serv-krb5.c] Fall back to krb5_cc_gen_new if the Kerberos	Darren Tucker	2014-01-20	1	-0/+6
\| \| \| \| \|	implementation does not have krb5_cc_new_unique, similar to what we do in auth-krb5.c.
*	- djm@cvs.openbsd.org 2013/07/20 01:55:13	Damien Miller	2013-07-20	1	-19/+25
\| \| \| \| \|	[auth-krb5.c gss-serv-krb5.c gss-serv.c] fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@
*	- (djm) [audit-bsm.c audit.c auth-bsdauth.c auth-chall.c auth-pam.c]	Damien Miller	2006-09-01	1	-0/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	[auth-rsa.c auth-shadow.c auth-sia.c auth1.c auth2-chall.c] [auth2-gss.c auth2-kbdint.c auth2-none.c authfd.c authfile.c] [cipher-3des1.c cipher-aes.c cipher-bf1.c cipher-ctr.c clientloop.c] [dh.c dns.c entropy.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c] [kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c loginrec.c mac.c] [md5crypt.c monitor.c monitor_wrap.c readconf.c rsa.c] [scard-opensc.c scard.c session.c ssh-add.c ssh-agent.c ssh-dss.c] [ssh-keygen.c ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c] [sshconnect1.c sshconnect2.c sshd.c rc4.diff] [openbsd-compat/bsd-cray.c openbsd-compat/port-aix.c] [openbsd-compat/port-linux.c openbsd-compat/port-solaris.c] [openbsd-compat/port-uw.c] Lots of headers for SCO OSR6, mainly adding stdarg.h for log.h; compile problems reported by rac AT tenzing.org
*	- deraadt@cvs.openbsd.org 2006/08/03 03:34:42	Damien Miller	2006-08-05	1	-2/+7
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	[OVERVIEW atomicio.c atomicio.h auth-bsdauth.c auth-chall.c auth-krb5.c] [auth-options.c auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c] [auth-rsa.c auth-skey.c auth.c auth.h auth1.c auth2-chall.c auth2-gss.c] [auth2-hostbased.c auth2-kbdint.c auth2-none.c auth2-passwd.c ] [auth2-pubkey.c auth2.c authfd.c authfd.h authfile.c bufaux.c bufbn.c] [buffer.c buffer.h canohost.c channels.c channels.h cipher-3des1.c] [cipher-bf1.c cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c] [compress.c deattack.c dh.c dispatch.c dns.c dns.h fatal.c groupaccess.c] [groupaccess.h gss-genr.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c] [kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c] [key.h log.c log.h mac.c match.c md-sha256.c misc.c misc.h moduli.c] [monitor.c monitor_fdpass.c monitor_mm.c monitor_mm.h monitor_wrap.c] [monitor_wrap.h msg.c nchan.c packet.c progressmeter.c readconf.c] [readconf.h readpass.c rsa.c scard.c scard.h scp.c servconf.c servconf.h] [serverloop.c session.c session.h sftp-client.c sftp-common.c] [sftp-common.h sftp-glob.c sftp-server.c sftp.c ssh-add.c ssh-agent.c] [ssh-dss.c ssh-gss.h ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rsa.c] [ssh.c ssh.h sshconnect.c sshconnect.h sshconnect1.c sshconnect2.c] [sshd.c sshlogin.c sshlogin.h sshpty.c sshpty.h sshtty.c ttymodes.c] [uidswap.c uidswap.h uuencode.c uuencode.h xmalloc.c xmalloc.h] [loginrec.c loginrec.h openbsd-compat/port-aix.c openbsd-compat/port-tun.h] almost entirely get rid of the culture of ".h files that include .h files" ok djm, sort of ok stevesk makes the pain stop in one easy step NB. portable commit contains everything except removing includes.h, as that will take a fair bit more work as we move headers that are required for portability workarounds to defines.h. (also, this step wasn't "easy")
*	- (djm) [acss.c auth-krb5.c auth-options.c auth-pam.c auth-shadow.c]	Damien Miller	2006-07-24	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	[canohost.c channels.c cipher-acss.c defines.h dns.c gss-genr.c] [gss-serv-krb5.c gss-serv.c log.h loginrec.c logintest.c readconf.c] [servconf.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c] [ssh.c sshconnect.c sshd.c openbsd-compat/bindresvport.c] [openbsd-compat/bsd-arc4random.c openbsd-compat/bsd-misc.c] [openbsd-compat/getrrsetbyname.c openbsd-compat/glob.c] [openbsd-compat/mktemp.c openbsd-compat/port-linux.c] [openbsd-compat/port-tun.c openbsd-compat/readpassphrase.c] [openbsd-compat/setproctitle.c openbsd-compat/xmmap.c] make the portable tree compile again - sprinkle unistd.h and string.h back in. Don't redefine __unused, as it turned out to be used in headers on Linux, and replace its use in auth-pam.c with ARGSUSED
*	- stevesk@cvs.openbsd.org 2006/07/02 18:36:47	Damien Miller	2006-07-10	1	-1/+1
\| \| \| \| \| \|	[gss-serv-krb5.c gss-serv.c] no "servconf.h" needed here (gss-serv-krb5.c change not applied, portable needs the server options)
*	- djm@cvs.openbsd.org 2006/03/25 22:22:43	Damien Miller	2006-03-26	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	[atomicio.h auth-options.h auth.h auth2-gss.c authfd.h authfile.h] [bufaux.h buffer.h canohost.h channels.h cipher.h clientloop.h] [compat.h compress.h crc32.c crc32.h deattack.h dh.h dispatch.h] [dns.c dns.h getput.h groupaccess.h gss-genr.c gss-serv-krb5.c] [gss-serv.c hostfile.h includes.h kex.h key.h log.h mac.h match.h] [misc.h monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h msg.h] [myproposal.h packet.h pathnames.h progressmeter.h readconf.h rsa.h] [scard.h servconf.h serverloop.h session.h sftp-common.h sftp.h] [ssh-gss.h ssh.h ssh1.h ssh2.h sshconnect.h sshlogin.h sshpty.h] [ttymodes.h uidswap.h uuencode.h xmalloc.h] standardise spacing in $OpenBSD$ tags; requested by deraadt@
*	- (dtucker) [gss-serv-krb5.c] Bug #1166: Correct #ifdefs for gssapi_krb5.h	Darren Tucker	2006-03-03	1	-2/+2
\| \| \| \|	includes. Patch from gentoo.riverrat at gmail.com.
*	- stevesk@cvs.openbsd.org 2005/10/13 19:08:08	Damien Miller	2005-11-05	1	-1/+1
\| \| \| \| \| \|	[gss-serv-krb5.c gss-serv.c] unused declarations; ok deraadt@ (id sync only for gss-serv-krb5.c)
*	- (dtucker) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Remove	Darren Tucker	2005-07-07	1	-3/+0
\| \| \| \| \| \|	calls to krb5_init_ets, which has not been required since krb-1.1.x and most Kerberos versions no longer export in their public API. From sxw at inf.ed.ac.uk, ok djm@
*	- [auth-krb5.c auth.h gss-serv-krb5.c] Move KRB5CCNAME generation for the MIT	Darren Tucker	2005-07-07	1	-28/+4
\| \| \| \| \|	Kerberos code path into a common function and expand mkstemp template to be consistent with the rest of OpenSSH. From sxw at inf.ed.ac.uk, ok djm@
*	- (dtucker) [auth-krb5.c gss-serv-krb5.c openbsd-compat/xmmap.c]	Darren Tucker	2004-08-14	1	-1/+5
\| \| \| \|	Explicitly set umask for mkstemp; ok djm@
*	- djm@cvs.openbsd.org 2004/07/21 10:36:23	Damien Miller	2004-07-21	1	-2/+2
\| \| \| \| \|	[gss-serv-krb5.c] fix function declaration
*	- (bal) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Check to see	Ben Lindstrom	2004-04-07	1	-0/+2
\| \| \| \| \| \| \| \| \|	if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X) are starting to restrict it as internal since it is not needed by developers any more. (Patch based on Apple tree) - (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since krb5 on MacOS/X conflicts. There may be a better solution, but this will work for now.
*	- (dtucker) [configure.ac gss-serv-krb5.c ssh-gss.h] Define GSSAPI when found	Darren Tucker	2004-02-24	1	-2/+6
\| \| \| \| \| \| \| \|	with krb5-config, hunt down gssapi.h and friends. Based partially on patch from deengert at anl.gov. For the MIT Kerberos bug against krb5-config related to this see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=2240
*	- (djm) Bug #698: Specify FILE: for KRB5CCNAME; patch from	Damien Miller	2004-02-17	1	-2/+5
\| \| \| \|	stadal@suse.cz and simon@sxw.org.uk
*	- djm@cvs.openbsd.org 2003/11/21 11:57:03	Damien Miller	2003-11-21	1	-7/+7
\| \| \| \| \| \|	[everything] unexpand and delete whitespace at EOL; ok markus@ (done locally and RCS IDs synced)
*	- (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h	Darren Tucker	2003-08-26	1	-0/+37
\| \| \| \| \|	configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
*	- markus@cvs.openbsd.org 2003/08/22 10:56:09	Darren Tucker	2003-08-26	1	-0/+168
	[auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c session.h ssh-gss.h ssh_config.5 sshconnect2.c sshd_config sshd_config.5] support GSS API user authentication; patches from Simon Wilkinson, stripped down and tested by Jakob and myself.