summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshd_config
AgeCommit message (Collapse)Author
2005-12-06Add support for tun(4) forwarding over OpenSSH, based on an idea andReyk Floeter
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others
2005-07-25add a new compression method that delays compression until the userMarkus Friedl
has been authenticated successfully and set compression to 'delayed' for sshd. this breaks older openssh clients (< 3.5) if they insist on compression, so you have to re-enable compression in sshd_config. ok djm@
2005-05-19whitespace nit, from grunk AT pestilenz.orgDamien Miller
2004-12-23bz #898: support AddressFamily in sshd_config. from peak@argo.troja.mff.cuni.czDamien Miller
ok deraadt@
2004-05-23Add MaxAuthTries sshd config option; ok markus@Darren Tucker
2003-12-29KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OKTodd C. Miller
2003-12-23implement KerberosGetAFSToken server option. ok markus@, beck@Jakob Schlyter
2003-09-29GSSAPICleanupCreds -> GSSAPICleanupCredentialsMarkus Friedl
2003-08-28remove kerberos support from ssh1, since it has been replaced with GSSAPI;Markus Friedl
but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
2003-08-22support GSS API user authentication; patches from Simon Wilkinson,Markus Friedl
stripped down and tested by Jakob and myself.
2003-08-13remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,Markus Friedl
fgsch@, miod@, henning@, jakob@ and others
2003-07-23remove AFS; itojun@Markus Friedl
2003-06-20sync some implemented options; ok markus@Damien Miller
2003-06-02deprecate VerifyReverseMapping since it's dangerous if combinedMarkus Friedl
with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@
2002-09-25sync LoginGraceTime with defaultMarkus Friedl
2002-08-21change LoginGraceTime default to 1 minute; ok mouring@ markus@Kevin Steves
2002-07-30add PermitUserEnvironment (off by default!); from dot@dotat.at; ok provos, ↵Markus Friedl
deraadt
2002-06-20add CompressionMarkus Friedl
2002-06-20refer to config file man pageKevin Steves
2002-05-15re-enable privsep and disable setuid for post-3.2.2Markus Friedl
2002-05-15disable privsep and enable setuid for the 3.2.2 releaseMarkus Friedl
2002-05-04enable privsep by default; provos okTheo de Raadt
2002-04-22do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@Markus Friedl
2002-04-21document default AFSTokenPassing no; ok deraadt@Kevin Steves
2002-03-21add privsep (off)Markus Friedl
2002-02-19stategy is not an english wordTheo de Raadt
2002-02-09move ssh config files to /etc/sshTheo de Raadt
2002-01-29s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@Markus Friedl
2002-01-27add X11UseLocalhost; ok markus@Kevin Steves
2002-01-16The stategy now used for options in the default sshd_config shippedKevin Steves
with OpenSSH is to specify options with their default value where possible, but leave them commented. Uncommented options change a default value. Subsystem is currently the only default option changed. ok markus@
2001-12-19basic KNF done while i was looking for something elseTheo de Raadt
2001-09-20CheckMail removed. OKed stevesk@mouring
2001-06-22merge authorized_keys2 into authorized_keys.Markus Friedl
authorized_keys2 is used for backward compat. (just append authorized_keys2 to authorized_keys).
2001-05-31group options and add some more commentsMarkus Friedl
2001-05-20configurable authorized_keys{,2} location; originally from peter@; ok djm@Markus Friedl
2001-04-152,1, not 1,2Theo de Raadt
2001-04-15default for protocol is 1,2; ok markus@Kevin Steves
2001-04-12implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2)Markus Friedl
similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :)
2001-03-25PrintLastLog option; from chip@valinux.com with some minorKevin Steves
changes by me. ok markus@
2001-02-24ssh2 rsa key before dsa keyTheo de Raadt
2001-02-22activate RSA 2 keyTheo de Raadt
2001-02-06enable sftp-server by defaultTheo de Raadt
2001-02-04type: ok markus@Damien Miller
2001-02-03Skey is now called ChallengeResponseMarkus Friedl
2001-02-03make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@Markus Friedl
2001-02-02point at sshd(8) and ssh(1)Theo de Raadt
2001-01-29$OpenBSD$Niklas Hallqvist
2001-01-13oopsMarkus Friedl
2001-01-13support supplementary group in {Allow,Deny}GroupsMarkus Friedl
from stevesk@pobox.com
2001-01-08implement option 'Banner /etc/issue.net' for ssh2, move version toMarkus Friedl
2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner is enabled).