summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/auth1.c
AgeCommit message (Expand)Author
2014-07-15Add support for Unix domain socket forwarding. A remote TCP portTodd C. Miller
2014-07-03make the "Too many authentication failures" message include theDamien Miller
2014-02-02convert memset of potentially-private data to explicit_bzero()Damien Miller
2013-05-19Standardise logging of supplemental information during userauth. KeysDamien Miller
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2012-12-02Fixes logging of partial authentication when privsep is enabledDamien Miller
2012-11-04Support multiple required authentication via an AuthenticationMethodsDamien Miller
2010-08-31Add buffer_get_cstring() and related functions that verify that theDamien Miller
2010-06-25skip the initial check for access with an empty password whenDamien Miller
2008-07-04Make protocol 1 MaxAuthTries logic match protocol 2's.Damien Miller
2008-05-08Implement a channel success/failure status confirmation callbackDamien Miller
2007-09-21unifdef -DBSD_AUTHDamien Miller
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-08-01move #include <stdio.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-07-20missed some needed #include <unistd.h> when KERBEROS5=no; issue fromKevin Steves
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
2006-03-20sprinkle some ARGSUSED for table driven functions (which sometimes must ignor...Theo de Raadt
2006-03-19spacingTheo de Raadt
2006-03-19RCSID() can dieTheo de Raadt
2005-07-16spacingDamien Miller
2005-06-17make this -Wsign-compare clean; ok avsm@ markus@Damien Miller
2005-05-20split protocol 1 auth methods into separate functions, makes authloopDamien Miller
2004-07-28more s/illegal/invalid/Markus Friedl
2004-07-21bz#899: Don't display invalid usernames in setproctitleDamien Miller
2004-05-23Add MaxAuthTries sshd config option; ok markus@Darren Tucker
2004-05-09kill some more tiny files; ok deraadt@Damien Miller
2003-11-08remove unused variable (pw). ok djm@Jakob Schlyter
2003-11-04standardise arguments to auth methods - they should all take authctxt.Damien Miller
2003-09-23replace fatal_cleanup() and linked list of fatal callbacks with staticMarkus Friedl
2003-08-28remove kerberos support from ssh1, since it has been replaced with GSSAPI;Markus Friedl
2003-08-26fix passwd auth for 'username leaks via timing'; with djm@, original patches ...Markus Friedl
2003-08-13remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,Markus Friedl
2003-07-22remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);Markus Friedl
2003-04-08rename log() into logit() to avoid name conflict. markus ok, from netbsdJun-ichiro itojun Hagino
2003-02-06undo broken fix for #387, fixes #486Markus Friedl
2003-01-23Don't log TIS auth response; "get rid of it" - markus@Damien Miller
2002-11-21KNFTheo de Raadt
2002-09-26krb4 + privsep; ok dugsong@, deraadt@Markus Friedl
2002-09-09kerberos support for privsep. confirmed to work by lha@stacken.kth.seJun-ichiro itojun Hagino
2002-08-22auth_root_allowed() is handled by the monitor in the privsep case,Markus Friedl
2002-06-19KNF done automatically while reading....Theo de Raadt
2002-04-10strip '@' from username only for KerbV and known broken clients, bug #204Markus Friedl
2002-03-19make getpwnamallow() allways call pwcopy()Markus Friedl
2002-03-18integrate privilege separated openssh; its turned off by default for now.Niels Provos
2002-03-18have the authentication functions return the authentication contextNiels Provos
2002-03-17getpwnamallow returns struct passwd * only if user valid; okay markus@Niels Provos
2002-02-03don't use channel_input_channel_request and callbackMarkus Friedl
2001-12-28packet_read* no longer return the packet length, since it's not used.Markus Friedl
2001-12-28packet_get_bignum* no longer returns a sizeMarkus Friedl