summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/auth2.c
AgeCommit message (Collapse)Author
2001-04-06do gid/groups-swap in addition to uid-swap, should help if /home/groupMarkus Friedl
is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks to olar@openwall.com is comments. we had many requests for this.
2001-04-04we don't care about missing bannerfiles; from tsoome@ut.ee, ok deraadt@Markus Friedl
2001-03-28check auth_root_allowed for kbd-int auth, too.Markus Friedl
2001-03-21merge common ssh v1/2 codeMarkus Friedl
2001-03-20add changes need for BSD_AUTH plus disabled BSD_AUTH codeMarkus Friedl
2001-03-11debugMarkus Friedl
2001-03-04Rename pty.[ch] -> sshpty.[ch] and login.[ch] to sshlogin.[ch] to avoidDamien Miller
header conflicts in portable; ok markus@
2001-03-01KNFTheo de Raadt
2001-02-22use pwcopy in ssh.c, tooMarkus Friedl
2001-02-13setproctitle(user) only if getpwnam succeedsMarkus Friedl
2001-02-12PermitRootLogin={yes,without-password,forced-commands-only,no}Markus Friedl
(before this change, root could login even if PermitRootLogin==no)
2001-02-10offer passwd before s/keyMarkus Friedl
2001-02-08strict checkingMarkus Friedl
2001-02-08fix typoMarkus Friedl
2001-02-07move k_setpag() to a central place; ok dugsong@Markus Friedl
2001-02-04unexpand and remove end-of-line whitespace; ok markus@Kevin Steves
2001-02-04remove duplicate #include's; ok markus@Kevin Steves
2001-01-22rename skey -> challenge response.Markus Friedl
auto-enable kbd-interactive for ssh2 if challenge-reponse is enabled.
2001-01-22no need to include; from mouring@etoh.eviladmin.orgMarkus Friedl
2001-01-21split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.Markus Friedl
rename util.[ch] -> misc.[ch]
2001-01-20typoMarkus Friedl
2001-01-20pass the filename to auth_parse_options()Markus Friedl
2001-01-19move ssh1 definitions to ssh1.h, pathnames to pathnames.hMarkus Friedl
2001-01-181) removes fake skey from sshd, since this will be muchMarkus Friedl
harder with /usr/libexec/auth/login_XXX 2) share/unify code used in ssh-1 and ssh-2 authentication (server side) 3) make addition of BSD_AUTH and other challenge reponse methods easier.
2001-01-13support supplementary group in {Allow,Deny}GroupsMarkus Friedl
from stevesk@pobox.com
2001-01-13enable kerberos passwd auth in ssh2, use k_setpag; ok hin, dugsong, from ↵Markus Friedl
ksulliva@psc.edu
2001-01-08implement option 'Banner /etc/issue.net' for ssh2, move version toMarkus Friedl
2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner is enabled).
2000-12-28count authentication failures onlyMarkus Friedl
2000-12-19replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'Markus Friedl
with u_char.
2000-12-03support f-secure/ssh.com 2.0.12; ok niels@Markus Friedl
2000-11-12add support for RSA to SSH2. please test.Markus Friedl
there are now 3 types of keys: RSA1 is used by ssh-1 only, RSA and DSA are used by SSH2. you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA keys for SSH2 and use the RSA keys for hostkeys or for user keys. SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before. IdentityFile2, HostDsaKey and DSAAuthentication are obsolete. you can use multiple IdentityFile and HostKey for all types of keys. the option DSAAuthentication is replaced by PubkeyAuthetication.
2000-10-14OpenSSH_2.3; note that is is not complete, but the version number needs to ↵Markus Friedl
be changed for interoperability reasons
2000-10-11new cipher frameworkMarkus Friedl
2000-10-11add support for s/key (kbd-interactive) to ssh2, based on work by ↵Markus Friedl
mkiernan@avantgo.com and me
2000-10-11clear auth options unless auth sucessfullMarkus Friedl
2000-09-27use key_type()Markus Friedl
2000-09-21add context to dispatch_runMarkus Friedl
2000-09-07cleanup copyright notices on all files. I have attempted to be accurate withTheo de Raadt
the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
2000-08-20Add calls to setusercontext() and login_get*(). We basically callTodd C. Miller
setusercontext() in most places where previously we did a setlogin(). Add default login.conf file and put root in the "daemon" login class.
2000-07-07clean code is good codeTodd T. Fries
2000-06-19make userauth+pubkey interop with ssh.com-2.2.0Markus Friedl
2000-06-18split auth-rsa option parsing into auth-optionsMarkus Friedl
add options support to authorized_keys2
2000-06-18implement bug compatibility with ssh-2.0.13 pubkey, server sideMarkus Friedl
2000-05-08bug compat w/ ssh-2.0.13 x11, split out bugsMarkus Friedl
2000-05-06add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8Markus Friedl
2000-05-05log failure before sending the replyMarkus Friedl
2000-05-01Add missing #ifdefs; ok - markusDamien Miller
2000-05-01disable kerb,s/key in ssh2Markus Friedl
2000-04-27cleanup logging for sshd/2, respect PasswordAuth noMarkus Friedl
2000-04-27xfree DSA blobsMarkus Friedl