summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/serverloop.c
AgeCommit message (Collapse)Author
2005-12-13if forced_tun_device is not set, it is -1 and not SSH_TUNID_ANYReyk Floeter
2005-12-08two changes to the new ssh tunnel support. this breaks compatibilityReyk Floeter
with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@
2005-12-06Add support for tun(4) forwarding over OpenSSH, based on an idea andReyk Floeter
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others
2005-10-31make sure we clean up wtmp, etc. file when we receive a SIGTERM,Damien Miller
SIGINT or SIGQUIT when running without privilege separation (the normal privsep case is already OK). Patch mainly by dtucker@ and senthilkumar_sen AT hotpop.com; ok dtucker@
2005-10-30no need to escape single quotes in comments, no binary changeDamien Miller
2005-10-10fix regression I introduced in 4.2: X11 forwardings initiated afterDamien Miller
a session has exited (e.g. "(sleep 5; xterm) &") would not start. bz #1086 reported by t8m AT centrum.cz; ok markus@ dtucker@
2005-07-17knf says that a 2nd level indent is four (not three or five) spacesDamien Miller
2004-08-11some signed/unsigned int comparison cleanups; markus@ okAnil Madhavapeddy
2004-05-21bz #756: add support for the cancel-tcpip-forward request for the server andDamien Miller
the client (through the ~C commandline). reported by z3p AT twistedmatrix.com; ok markus@
2004-01-19fix mem leaks; some fixes from Pete Flugstad; tested dtucker@Markus Friedl
2003-12-09make ClientKeepAlive work for ssh -N, too (no login shell requested).Markus Friedl
1) send a bogus channel request if we find a channel 2) send a bogus global request if we don't have a channel ok + test beck@
2003-11-18Correct check for authctxt->valid. ok djm@Darren Tucker
2003-11-04standardise arguments to auth methods - they should all take authctxt.Damien Miller
check authctxt->valid rather then pw != NULL; ok markus@
2003-09-23replace fatal_cleanup() and linked list of fatal callbacks with staticMarkus Friedl
cleanup_exit() function. re-refine cleanup_exit() where appropriate, allocate sshd's authctxt eary to allow simpler cleanup in sshd. tested by many, ok deraadt@
2003-06-24int -> u_int; ok djm@, deraadt@, mouring@Markus Friedl
2003-06-04remove bitrotten commet; ok markus@Damien Miller
2003-05-11make channel_new() strdup the 'remote_name' (not the caller); ok theoMarkus Friedl
2003-04-02reapply rekeying chage, tested by henning@, ok djm@Markus Friedl
2003-04-01backout rekeying changes (for 3.6.1)Markus Friedl
2003-04-01rekeying bugfixes and automatic rekeying:Markus Friedl
* both client and server rekey _automatically_ (a) after 2^31 packets, because after 2^32 packets the sequence number for packets wraps (b) after 2^(blocksize_in_bits/4) blocks (see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt) (a) and (b) are _enabled_ by default, and only disabled for known openssh versions, that don't support rekeying properly. * client option 'RekeyLimit' * do not reply to requests during rekeying
2002-09-19log IP address also; ok markus@Kevin Steves
2002-06-24move channel counter to u_intMarkus Friedl
2002-06-11pid_t cleanup. Markus need this now to keep hacking.Mike Pechkin
markus@, millert@ ok Note: big usr.bin/ cleanup is comming. Now I'm waiting Ok from espie@ for make/.
2002-03-30check waitpid for EINTR; based on patch from peter@ifm.liu.seMarkus Friedl
2002-03-24remove unused debugMarkus Friedl
2002-03-18integrate privilege separated openssh; its turned off by default for now.Niels Provos
work done by me and markus@
2002-02-06channel_new never returns NULL, mouring@; ok djm@Markus Friedl
2002-02-03don't use channel_input_channel_request and callbackMarkus Friedl
use new server_input_channel_req() instead: server_input_channel_req does generic request parsing on server side session_input_channel_req handles just session specific things now ok djm@
2002-01-31no need for WNOHANG; ok stevesk@Markus Friedl
2002-01-16wrapper for channel_setup_fwd_listenerMarkus Friedl
2002-01-10skip client_alive_check until there are channels; ok beck@Markus Friedl
2001-12-28remove plen from the dispatch fn. it's no longer used.Markus Friedl
2001-12-28packet_read* no longer return the packet length, since it's not used.Markus Friedl
2001-12-28s/packet_done/packet_check_eom/ (end-of-message); ok djm@Markus Friedl
2001-12-27get rid of packet_integrity_check, use packet_done() instead.Markus Friedl
2001-12-21remove ifdef for USE_PIPES since fdin != fdout; ok djm@Markus Friedl
2001-12-20Conformance fix: we should send failing packet sequence number whenDamien Miller
responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by yakk@yakk.dot.net; ok markus@
2001-12-19fix race between SIGCHLD and select with an additional pipe. writingMarkus Friedl
to the pipe on SIGCHLD wakes up select(). using pselect() is not portable and siglongjmp() ugly. W. R. Stevens suggests similar solution. initial idea by pmenage@ensim.com; ok deraadt@, djm@
2001-12-19basic KNF done while i was looking for something elseTheo de Raadt
2001-12-05deal with LP64 printf issue with sig_atomic_t. from thorpejJun-ichiro itojun Hagino
2001-11-22volatile sig_atomic_tMarkus Friedl
2001-11-09don't memset too much memory, ok millert@Markus Friedl
original patch from jlk@kamens.brookline.ma.us via nalin@redhat.com
2001-10-10try to keep channels open until an exit-status message is sent.Markus Friedl
don't kill the login shells if the shells stdin/out/err is closed. this should now work: ssh -2n localhost 'exec > /dev/null 2>&1; sleep 10; exit 5'; echo ?
2001-10-09simplify session close: no more delayed session_close, no more blocking ↵Markus Friedl
wait() calls.
2001-10-09close all channels if the connection to the remote host has been closed,Markus Friedl
should fix sshd's hanging with WCHAN==wait
2001-10-04client_alive_check cleanupMarkus Friedl
2001-10-04comment out bogus conditions for selecting on connection_inMarkus Friedl
2001-09-17don't send fake dummy packets on CR (\r)Markus Friedl
bugreport from yyua@cs.sfu.ca via solar@@openwall.com
2001-07-17keep track of both maxfd and the size of the malloc'ed fdsets.Markus Friedl
update maxfd if maxfd gets closed.
2001-07-15schedule client alive for ssh2 only, greg@cheers.bungi.comMarkus Friedl