summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/servconf.c
AgeCommit message (Collapse)Author
2003-09-01remove unused kerberos code; ok henning@Markus Friedl
2003-08-28remove kerberos support from ssh1, since it has been replaced with GSSAPI;Markus Friedl
but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
2003-08-22support GSS API user authentication; patches from Simon Wilkinson,Markus Friedl
stripped down and tested by Jakob and myself.
2003-08-13remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,Markus Friedl
fgsch@, miod@, henning@, jakob@ and others
2003-07-22remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);Markus Friedl
test+ok henning@
2003-06-02deprecate VerifyReverseMapping since it's dangerous if combinedMarkus Friedl
with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@
2003-05-15warn for unsupported config option. ok markus@Jakob Schlyter
2003-05-15disable kerberos when not supported. ok markus@Jakob Schlyter
2003-05-15always parse kerberos options. ok djm@ markus@Jakob Schlyter
2003-04-09Don't include <krb.h> when compiling with Kerberos 5 supportHans Insulander
2003-04-08rename log() into logit() to avoid name conflict. markus ok, from netbsdJun-ichiro itojun Hagino
2003-02-21print sshd_config filename in debug2 mode.Markus Friedl
2002-09-04default LoginGraceTime to 2m; 1m may be too short for slow systems.Kevin Steves
ok markus@
2002-08-21change LoginGraceTime default to 1 minute; ok mouring@ markus@Kevin Steves
2002-07-30add PermitUserEnvironment (off by default!); from dot@dotat.at; ok provos, ↵Markus Friedl
deraadt
2002-06-23minor KNF. things the fingers do while you readTheo de Raadt
2002-06-20allow Compression=yes/no in sshd_configMarkus Friedl
2002-05-15re-enable privsep and disable setuid for post-3.2.2Markus Friedl
2002-05-15disable privsep and enable setuid for the 3.2.2 releaseMarkus Friedl
2002-05-04enable privsep by default; provos okTheo de Raadt
2002-04-22do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@Markus Friedl
2002-04-20No, afs requires explicit enablingTheo de Raadt
2002-03-20for unprivileged user, group do:Kevin Steves
pw=getpwnam(SSH_PRIVSEP_USER); do_setusercontext(pw). ok provos@
2002-03-19_PATH_PRIVSEP_CHROOT_DIR; ok provos@Kevin Steves
2002-03-18UnprivUser/UnprivGroup usable now--specify numeric user/group; okKevin Steves
provos@
2002-03-18integrate privilege separated openssh; its turned off by default for now.Niels Provos
work done by me and markus@
2002-02-04add SYSLOG_FACILITY_NOT_SET = -1, SYSLOG_LEVEL_NOT_SET = -1,Markus Friedl
fixes arm/netbsd; based on patch from bjh21@netbsd.org; ok djm@
2002-01-29s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@Markus Friedl
2002-01-27add X11UseLocalhost; ok markus@Kevin Steves
2002-01-22typo in error message; from djast@cs.toronto.eduKevin Steves
2002-01-04protocol 2 HostKey code default is now /etc/ssh_host_rsa_key andKevin Steves
/etc/ssh_host_dsa_key like we have in sshd_config. ok markus@
2002-01-04remove #ifdef _PATH_XAUTH/#endif; ok markus@Kevin Steves
2001-12-19basic KNF done while i was looking for something elseTheo de Raadt
2001-12-06add -o to sshd, too. ok deraadt@Markus Friedl
2001-12-05minor KNFTheo de Raadt
2001-11-17enum/int type cleanup where it made sense to do so; ok markus@Kevin Steves
2001-11-12enable authorized_keys2 again. tested by fries@Markus Friedl
2001-11-11make AuthorizedKeysFile2 fallback to AuthorizedKeysFile if ↵Markus Friedl
AuthorizedKeysFile is specified.
2001-08-16deprecate CheckMail. ok markus@Jakob Schlyter
----------------------------------------------------------------------
2001-07-11make it compilable in all 4 combination of KRB4/KRB5 settings. dugsong okJun-ichiro itojun Hagino
XXX isn't it sensitive to the order of -I/usr/include/kerberosIV and -I/usr/include/kerberosV?
2001-07-08fix ``MaxStartups max''; ok markus@Kevin Steves
2001-06-26#include <kafs.h>Dug Song
2001-06-26Kerberos v5 support for SSH1, mostly from Assar Westerlund ↵Dug Song
<assar@freebsd.org> and Bjorn Gronvall <bg@sics.se>. markus@ ok
2001-06-23more strict prototypes. raise warning level in Makefile.inc. markus ok'edJun-ichiro itojun Hagino
TODO; cleanup headers
2001-06-08move the path for xauth to pathnames.hMarkus Friedl
2001-05-20configurable authorized_keys{,2} location; originally from peter@; ok djm@Markus Friedl
2001-05-19sshd command-line arguments and configuration file options thatKevin Steves
specify time may be expressed using a sequence of the form: time[qualifier], where time is a positive integer value and qualifier is one of the following: <none>,s,m,h,d,w Examples: 600 600 seconds (10 minutes) 10m 10 minutes 1h30m 1 hour 30 minutes (90 minutes) ok markus@
2001-05-18improved kbd-interactive support. work by per@appgate.com and meMarkus Friedl
2001-05-03remove "\n" from fatal()Kevin Steves
2001-04-15use fatal() or error() vs. fprintf(); ok markus@Kevin Steves