summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/auth.c
AgeCommit message (Expand)Author
2014-07-15Add support for Unix domain socket forwarding. A remote TCP portTodd C. Miller
2014-07-03make the "Too many authentication failures" message include theDamien Miller
2014-04-29make compiling against OpenSSL optional (make OPENSSL=no);Markus Friedl
2013-05-19Standardise logging of supplemental information during userauth. KeysDamien Miller
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-02-06Fix comment, from jfree.e1 at gmailDarren Tucker
2013-01-17add support for Key Revocation Lists (KRLs). These are a compact way toDamien Miller
2012-12-14use correct string in error message; from rustybsd at gmx.frDarren Tucker
2012-12-02Fixes logging of partial authentication when privsep is enabledDamien Miller
2012-10-30new sshd_config option AuthorizedKeysCommand to support fetchingDamien Miller
2012-05-13Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust testsDarren Tucker
2012-04-11Support "none" as an argument for AuthorizedPrincipalsFile to indicateDamien Miller
2011-05-23make secure_filename() spam debug logs lessDamien Miller
2011-05-23allow AuthorizedKeysFile to specify multiple files, separated by spaces.Damien Miller
2011-05-11remove support for authorized_keys2; it is a relic from the early daysDamien Miller
2010-11-29automatically order the hostkeys requested by the client based onDamien Miller
2010-11-23use strict_modes already passed as function argument over referencingDamien Miller
2010-08-04enable certificates for hostbased authentication, from Iain Morgan;Damien Miller
2010-06-22queue auth debug messages for bad ownership or permissions on the user'sDamien Miller
2010-05-07add some optional indirection to matching of principal names listedDamien Miller
2010-03-05make the warning for a revoked key louder and more noticableDamien Miller
2010-03-04Add a TrustedUserCAKeys option to sshd_config to specify CA keys thatDamien Miller
2010-02-09unbreak ChrootDirectory+internal-sftp by skipping check for executable shellDamien Miller
2010-01-13when using ChrootDirectory, make sure we test for the existence of theDamien Miller
2010-01-13Fix a couple of typos/mispellings in commentsDarren Tucker
2010-01-10Output a debug if we can't open an existing keyfile. bz#1694, ok djm@Darren Tucker
2008-11-04need unistd.h for close() prototypeDamien Miller
2008-07-02Merge duplicate host key file checks, based in part on a patch from RobDarren Tucker
2007-09-21unifdef -DBSD_AUTHDamien Miller
2007-08-23missed include bits from last commitDamien Miller
2007-08-23unifdef HAVE_LOGIN_CAP; ok deraadt@ millert@Damien Miller
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-08-01move #include <stdio.h> out of includes.hKevin Steves
2006-07-26move #include <sys/param.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-07-12Add support for conditional directives to sshd_config via a "Match" keyword,Darren Tucker
2006-07-11move #include <errno.h> out of includes.h; ok markus@Kevin Steves
2006-07-10move #include <stdarg.h> out of includes.h; ok markus@Kevin Steves
2006-07-06move #include <pwd.h> out of includes.h; ok markus@Kevin Steves
2006-03-30Prevent duplicate log messages when privsep=yes; ok djm@Darren Tucker
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
2006-03-25introduce xcalloc() and xasprintf() failure-checked allocations functionsDamien Miller
2006-03-20in a switch (), break after return or goto is stupidTheo de Raadt
2006-03-19RCSID() can dieTheo de Raadt
2006-02-20move #include <sys/stat.h> out of includes.h; ok markus@Kevin Steves
2006-02-08move #include <paths.h> out of includes.h; ok markus@Kevin Steves
2005-06-17make this -Wsign-compare clean; ok avsm@ markus@Damien Miller
2005-06-06introduce a generic %foo expansion function. replace existing % expansion andDamien Miller
2005-03-14Populate host for log message for logins denied by AllowUsers and DenyUsers.Darren Tucker
2005-01-22Log source of connections denied by AllowUsers, DenyUsers, AllowGroups andDarren Tucker