summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/auth-passwd.c
AgeCommit message (Collapse)Author
2000-10-03move fake-auth from auth1.c to individual auth methods, disables s/key in ↵Markus Friedl
debug-msg
2000-09-07cleanup copyright notices on all files. I have attempted to be accurate withTheo de Raadt
the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
2000-06-20OpenBSD tagMarkus Friedl
2000-04-14whitespace cleanupMarkus Friedl
1999-12-29check for NULL 1stMarkus Friedl
1999-12-01move skey-auth from auth-passwd.c to auth-skey.c, same for krb4Markus Friedl
1999-11-24KNF, final part 3Markus Friedl
1999-11-24much more KNFTheo de Raadt
1999-11-23KNF part 1Markus Friedl
1999-11-10remove x11- and krb-cleanup from fatal() + krb-cleanup cleanupMarkus Friedl
1999-10-19stop leak; after branch, builders take noteTheo de Raadt
1999-10-14PermitRootLogin={yes,no,without-password}, default=yes, ok deraadt,nielsMarkus Friedl
1999-10-07add skey to sshd:Markus Friedl
1) pass *pw to auth_password() not user_name, do_authentication already keeps private copy of struct passwd for current user. 2) limit authentication attemps to 5, otherwise ssh -o 'NumberOfPasswordPrompts 100000' host lets you enter 100000 passwds 3) make s/key a run-time option in /etc/sshd_config 4) generate fake skeys, for s/key for nonexisting users, too limit auth-tries for nonexisting users, too. Note that % ssh -l nonexisting-user -o 'NumberOfPasswordPrompts 100000' host has NO limits in ssh-1.2.27
1999-09-30more cullingTheo de Raadt
1999-09-29don't let pw->pw_{name,passwd} get clobberedDug Song
1999-09-29numerous sprintf, strncpy, strcpy cleanupsTheo de Raadt
1999-09-29update krb4/AFS support to ssh-1.2.27-afs-kerberos-pl1 level, clean up ↵Dug Song
unused variables, update manpages
1999-09-26i bet a lot of people didn't know what ssh 1.2.16 had a nice license.Theo de Raadt
well, except for the patent issues. someone in sweden (forget their name at the moment) cleaned out most of the patented code, and now this code removes rsa code. when this is done, it will link against libssl, but the work isn't completely done yet. then we need to bring this up to modern days, featurewise.