Age | Commit message (Collapse) | Author | |
---|---|---|---|
2005-12-06 | Add support for tun(4) forwarding over OpenSSH, based on an idea and | Reyk Floeter | |
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others | |||
2005-07-25 | add a new compression method that delays compression until the user | Markus Friedl | |
has been authenticated successfully and set compression to 'delayed' for sshd. this breaks older openssh clients (< 3.5) if they insist on compression, so you have to re-enable compression in sshd_config. ok djm@ | |||
2005-05-19 | whitespace nit, from grunk AT pestilenz.org | Damien Miller | |
2004-12-23 | bz #898: support AddressFamily in sshd_config. from peak@argo.troja.mff.cuni.cz | Damien Miller | |
ok deraadt@ | |||
2004-05-23 | Add MaxAuthTries sshd config option; ok markus@ | Darren Tucker | |
2003-12-29 | KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK | Todd C. Miller | |
2003-12-23 | implement KerberosGetAFSToken server option. ok markus@, beck@ | Jakob Schlyter | |
2003-09-29 | GSSAPICleanupCreds -> GSSAPICleanupCredentials | Markus Friedl | |
2003-08-28 | remove kerberos support from ssh1, since it has been replaced with GSSAPI; | Markus Friedl | |
but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ... | |||
2003-08-22 | support GSS API user authentication; patches from Simon Wilkinson, | Markus Friedl | |
stripped down and tested by Jakob and myself. | |||
2003-08-13 | remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@, | Markus Friedl | |
fgsch@, miod@, henning@, jakob@ and others | |||
2003-07-23 | remove AFS; itojun@ | Markus Friedl | |
2003-06-20 | sync some implemented options; ok markus@ | Damien Miller | |
2003-06-02 | deprecate VerifyReverseMapping since it's dangerous if combined | Markus Friedl | |
with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@ | |||
2002-09-25 | sync LoginGraceTime with default | Markus Friedl | |
2002-08-21 | change LoginGraceTime default to 1 minute; ok mouring@ markus@ | Kevin Steves | |
2002-07-30 | add PermitUserEnvironment (off by default!); from dot@dotat.at; ok provos, ↵ | Markus Friedl | |
deraadt | |||
2002-06-20 | add Compression | Markus Friedl | |
2002-06-20 | refer to config file man page | Kevin Steves | |
2002-05-15 | re-enable privsep and disable setuid for post-3.2.2 | Markus Friedl | |
2002-05-15 | disable privsep and enable setuid for the 3.2.2 release | Markus Friedl | |
2002-05-04 | enable privsep by default; provos ok | Theo de Raadt | |
2002-04-22 | do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@ | Markus Friedl | |
2002-04-21 | document default AFSTokenPassing no; ok deraadt@ | Kevin Steves | |
2002-03-21 | add privsep (off) | Markus Friedl | |
2002-02-19 | stategy is not an english word | Theo de Raadt | |
2002-02-09 | move ssh config files to /etc/ssh | Theo de Raadt | |
2002-01-29 | s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@ | Markus Friedl | |
2002-01-27 | add X11UseLocalhost; ok markus@ | Kevin Steves | |
2002-01-16 | The stategy now used for options in the default sshd_config shipped | Kevin Steves | |
with OpenSSH is to specify options with their default value where possible, but leave them commented. Uncommented options change a default value. Subsystem is currently the only default option changed. ok markus@ | |||
2001-12-19 | basic KNF done while i was looking for something else | Theo de Raadt | |
2001-09-20 | CheckMail removed. OKed stevesk@ | mouring | |
2001-06-22 | merge authorized_keys2 into authorized_keys. | Markus Friedl | |
authorized_keys2 is used for backward compat. (just append authorized_keys2 to authorized_keys). | |||
2001-05-31 | group options and add some more comments | Markus Friedl | |
2001-05-20 | configurable authorized_keys{,2} location; originally from peter@; ok djm@ | Markus Friedl | |
2001-04-15 | 2,1, not 1,2 | Theo de Raadt | |
2001-04-15 | default for protocol is 1,2; ok markus@ | Kevin Steves | |
2001-04-12 | implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2) | Markus Friedl | |
similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :) | |||
2001-03-25 | PrintLastLog option; from chip@valinux.com with some minor | Kevin Steves | |
changes by me. ok markus@ | |||
2001-02-24 | ssh2 rsa key before dsa key | Theo de Raadt | |
2001-02-22 | activate RSA 2 key | Theo de Raadt | |
2001-02-06 | enable sftp-server by default | Theo de Raadt | |
2001-02-04 | type: ok markus@ | Damien Miller | |
2001-02-03 | Skey is now called ChallengeResponse | Markus Friedl | |
2001-02-03 | make ReverseMappingCheck optional in sshd_config; ok djm@,dugsong@ | Markus Friedl | |
2001-02-02 | point at sshd(8) and ssh(1) | Theo de Raadt | |
2001-01-29 | $OpenBSD$ | Niklas Hallqvist | |
2001-01-13 | oops | Markus Friedl | |
2001-01-13 | support supplementary group in {Allow,Deny}Groups | Markus Friedl | |
from stevesk@pobox.com | |||
2001-01-08 | implement option 'Banner /etc/issue.net' for ssh2, move version to | Markus Friedl | |
2.3.1 (needed for bugcompat detection, 2.3.0 would fail if Banner is enabled). |