summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/auth-options.c
AgeCommit message (Collapse)Author
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
Theo nuked - our scripts to sync -portable need them in the files
2006-03-19RCSID() can dieTheo de Raadt
2005-12-08two changes to the new ssh tunnel support. this breaks compatibilityReyk Floeter
with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@
2005-12-06Add support for tun(4) forwarding over OpenSSH, based on an idea andReyk Floeter
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others
2005-03-10spacingTheo de Raadt
2005-03-10spacingTheo de Raadt
2005-03-01bz#413: allow optional specification of bind address for port forwardings.Damien Miller
Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports. ok markus@
2003-06-02deprecate VerifyReverseMapping since it's dangerous if combinedMarkus Friedl
with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@
2003-04-08rename log() into logit() to avoid name conflict. markus ok, from netbsdJun-ichiro itojun Hagino
2002-07-30add PermitUserEnvironment (off by default!); from dot@dotat.at; ok provos, ↵Markus Friedl
deraadt
2002-07-21unneeded includesKevin Steves
2002-05-13move the packet_send_debug handling from auth-options.c to auth.c; ok provos@Markus Friedl
2002-03-19clean up prototypesMarkus Friedl
2002-03-18integrate privilege separated openssh; its turned off by default for now.Niels Provos
work done by me and markus@
2002-01-29s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@Markus Friedl
2001-08-30validate ports for permitopen key file option. add host/portKevin Steves
alternative syntax for IPv6. ok markus@
2001-06-24move ip+hostname check to match.cMarkus Friedl
2001-05-31undo the .c file split, just merge the header and keep the cvs historyMarkus Friedl
2001-05-30channel layer cleanup: merge header files and split .c filesMarkus Friedl
2001-03-18ignore permitopen="host:port" if AllowTcpForwarding==noMarkus Friedl
2001-03-16implement "permitopen" key option, restricts -L style forwarding toMarkus Friedl
to specified host:port pairs. based on work by harlan@genua.de
2001-03-13missing xfree, deny key on parse error; ok stevesk@Markus Friedl
2001-02-09reset options if no option is given; from han.holl@prismant.nlMarkus Friedl
2001-02-03make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@Markus Friedl
2001-01-21split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.Markus Friedl
rename util.[ch] -> misc.[ch]
2001-01-20pass the filename to auth_parse_options()Markus Friedl
2001-01-19move ssh1 definitions to ssh1.h, pathnames to pathnames.hMarkus Friedl
2001-01-13fix commentMarkus Friedl
2000-12-19replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'Markus Friedl
with u_char.
2000-11-15case insensitive key options; from stevesk@sweden.hp.comMarkus Friedl
2000-10-09clear options on every call.Markus Friedl
2000-09-07some more Copyright fixesMarkus Friedl
2000-09-07cleanup copyright notices on all files. I have attempted to be accurate withTheo de Raadt
the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
2000-06-20OpenBSD tagMarkus Friedl
2000-06-18split auth-rsa option parsing into auth-optionsMarkus Friedl
add options support to authorized_keys2