summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/servconf.h
AgeCommit message (Expand)Author
2013-12-05bz#2161 - fix AuthorizedKeysCommand inside a Match block andDamien Miller
2013-10-29shd_config PermitTTY to disallow TTY allocation, mirroring theDamien Miller
2013-07-19add ssh-agent(1) support to sshd(8); allows encrypted hostkeys,Markus Friedl
2013-05-16Add RekeyLimit to sshd with the same syntax as the client allowing rekeyingDarren Tucker
2013-01-03add a couple of ServerOptions members that should be copied to the privsepDamien Miller
2012-12-02make AllowTcpForwarding accept "local" and "remote" in addition to itsDamien Miller
2012-11-04Support multiple required authentication via an AuthenticationMethodsDamien Miller
2012-10-30new sshd_config option AuthorizedKeysCommand to support fetchingDamien Miller
2012-07-10Turn on systrace sandboxing of pre-auth sshd by default for new installsDamien Miller
2012-06-19sshd_config: extend Match to allow AcceptEnv and {Allow,Deny}{Users,Groups}Markus Friedl
2012-05-13Add "Match LocalAddress" and "Match LocalPort" to sshd and adjust testsDarren Tucker
2012-04-12VersionAddendum option to allow server operators to append some arbitraryDamien Miller
2011-06-22introduce sandboxing of the pre-auth privsep child using systrace(4).Damien Miller
2011-05-23allow AuthorizedKeysFile to specify multiple files, separated by spaces.Damien Miller
2011-05-20use a macro to define which string options to copy between configsDamien Miller
2011-05-11remove support for authorized_keys2; it is a relic from the early daysDamien Miller
2010-11-13allow ssh and sshd to set arbitrary TOS/DSCP/QoS values instead ofDamien Miller
2010-09-22add a KexAlgorithms knob to the client and server configuration to allowDamien Miller
2010-05-07add some optional indirection to matching of principal names listedDamien Miller
2010-03-04Add a TrustedUserCAKeys option to sshd_config to specify CA keys thatDamien Miller
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
2010-01-13avoid run-time failures when specifying hostkeys via a relativeDamien Miller
2010-01-09Remove RoutingDomain from ssh since it's now not needed. It can be replacedDarren Tucker
2009-10-28Allow to set the rdomain in ssh/sftp/scp/sshd and ssh-keyscan.Reyk Floeter
2009-01-22make a2port() return -1 when it encounters an invalid port numberDamien Miller
2008-11-04Add support for an experimental zero-knowledge password authenticationDamien Miller
2008-06-10Add extended test mode (-T) and connection parameters for test mode (-C).Darren Tucker
2008-05-08Make the maximum number of sessions run-time controllable viaDamien Miller
2008-05-07Enable the AllowAgentForwarding option in sshd_config (global and matchPierre-Yves Ritschard
2008-02-13rekey arc4random and OpenSSL RNG in postauth childDamien Miller
2008-02-08add sshd_config ChrootDirectory option to chroot(2) users to a directory andDamien Miller
2007-02-19Teach Match how handle config directives that are used before authentication.Darren Tucker
2006-08-14Add ability to match groups to Match keyword in sshd_config. Feedback djm@,Darren Tucker
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-07-21Make PermitOpen take a list of permitted ports and act more like most otherDarren Tucker
2006-07-19Add ForceCommand keyword to sshd_config, equivalent to the "command="Darren Tucker
2006-07-12Add support for conditional directives to sshd_config via a "Match" keyword,Darren Tucker
2006-07-06support arguments to Subsystem commands; ok markus@Damien Miller
2006-03-25standardise spacing in $OpenBSD$ tags; requested by deraadt@Damien Miller
2005-12-06Add support for tun(4) forwarding over OpenSSH, based on an idea andReyk Floeter
2004-12-23bz #898: support AddressFamily in sshd_config. from peak@argo.troja.mff.cuni.czDamien Miller
2004-06-24re-exec sshd on accept(); initial work, final debugging and ok markus@Damien Miller
2004-05-23Add MaxAuthTries sshd config option; ok markus@Darren Tucker
2004-04-27bz #815: implement ability to pass specified environment variables from theDamien Miller
2003-12-23implement KerberosGetAFSToken server option. ok markus@, beck@Jakob Schlyter
2003-12-09rename keepalive to tcpkeepalive; the old name causes too muchMarkus Friedl
2003-09-01remove unused kerberos code; ok henning@Markus Friedl
2003-08-22support GSS API user authentication; patches from Simon Wilkinson,Markus Friedl
2003-08-13remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,Markus Friedl
2003-07-22remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);Markus Friedl