summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2005-02-08Provide reason in error message if getnameinfo fails; ok markus@Darren Tucker
2005-01-30Make code match intent; ok djm@Darren Tucker
2005-01-28wording;Jason McIntyre
ok markus@
2005-01-28grammar;Jason McIntyre
2005-01-28Make it clear that the example entries in ssh_config are only some of theDarren Tucker
commonly-used options and refer the user to ssh_config(5) for more details; ok djm@
2005-01-24#if -> #ifdef so builds without HAVE_LOGIN_CAP work too; ok djm@ otto@Darren Tucker
2005-01-24Have scp and sftp wait for the spawned ssh to exit before they exitDarren Tucker
themselves. This prevents ssh from being unable to restore terminal modes (not normally a problem on OpenBSD but common with -Portable on POSIX platforms). From peak at argo.troja.mff.cuni.cz (bz#950); ok djm@ markus@
2005-01-23config option "Ciphers" should be case-sensitive; ok dtucker@Damien Miller
2005-01-22Log source of connections denied by AllowUsers, DenyUsers, AllowGroups andDarren Tucker
DenyGroups. bz #909, ok djm@
2005-01-21Warn in advance for password and account expiry; initialize loginmsgOtto Moerbeek
buffer earlier and clear it after privsep fork. ok and help dtucker@ markus@
2005-01-19Have keyboard-interactive code call the drivers even for responses forDarren Tucker
invalid logins. This allows the drivers themselves to decide how to handle them and prevent leaking information where possible. Existing behaviour for bsdauth is maintained by checking authctxt->valid in the bsdauth driver. Note that any third-party kbdint drivers will now need to be able to handle responses for invalid logins. ok markus@
2005-01-17Make debugging output continue after reexec; ok djm@Darren Tucker
2005-01-17Correct spelling: SCHNOOR->SCHNORR; ok djm@Darren Tucker
2005-01-08`login'(n) -> `log in'(v);Jason McIntyre
2005-01-05remove dead code, log connect() failures with level error, ok djm@Markus Friedl
2004-12-23bz #898: support AddressFamily in sshd_config. from peak@argo.troja.mff.cuni.czDamien Miller
ok deraadt@
2004-12-23leak; from mpechMarkus Friedl
2004-12-23check for NULL; from mpechMarkus Friedl
2004-12-22remove fallback AES support for old OpenSSL, as OpenBSD has had it for manyDamien Miller
years now; ok deraadt@
2004-12-11Fix debug call in error path of authorized_keys processing and fix relatedDarren Tucker
warnings; ok djm@
2004-12-10- fix globbed ls for paths the same lenght as the globbed path whenFederico G. Schwindt
we have a unique matching. - fix globbed ls in case of a directory when we have a unique matching. - as a side effect, if the path does not exist error (used to silently ignore). - don't do extra do_lstat() if we only have one matching file. djm@ ok
2004-12-06use 0x00 not \0 since buf[] is a bignumMarkus Friedl
2004-12-06Discard over-length authorized_keys entries rather than complaining whenDarren Tucker
they don't decode. bz #884, with & ok djm@
2004-12-05- explain that patterns can be used as arguments in get/put/ls/etcJared Yanovich
commands (prodded by Michael Knudsen) - describe ls flags as a list - other minor improvements ok jmc, djm
2004-11-29Some small fixes from moritz@jodeit.org. ok deraadt@Damien Miller
2004-11-29missing full stop;Jason McIntyre
2004-11-25leak; from mpechMarkus Friedl
2004-11-07usage():Jason McIntyre
- add -O - sync -S w/ manpage - remove -h
2004-11-07options sort, and whitespace;Jason McIntyre
2004-11-07add basic control of a running multiplex master connection; including theDamien Miller
ability to check its status and request it to exit; ok markus@
2004-11-05command editing and history support via libedit; ok markus@Damien Miller
thanks to hshoexer@ and many testers on tech@ too
2004-10-29use new buffer API to avoid fatal errors on corrupt keys in authorized_keysDamien Miller
files; ok markus@
2004-10-29introduce a new buffer API that returns an error rather than fatal()ing whenDamien Miller
presented with bad data; ok markus@
2004-10-29factor out common permission-asking code to separate function; ok markus@Damien Miller
2004-10-29fix some window size change bugs for multiplexed connections: windows sizesDamien Miller
were not being updated if they had changed after ~^Z suspends and SIGWINCH was not being processed unless the first connection had requested a tty; ok markus
2004-10-20disconnect for invalid (out of range) message types.Markus Friedl
2004-10-07don't unlink agent socket when bind() fails, spotted by rich AT rich-paul.netDamien Miller
ok markus@
2004-10-07document KbdInteractiveDevices; ok markus@Damien Miller
2004-09-25these printf args are no longer double; ok deraadt@ markus@Damien Miller
2004-09-23correctly honour -n in multiplex client mode; spotted by sturm@ ok markus@Damien Miller
2004-09-15scratch that do { } while (0) wrapper in this caseTheo de Raadt
2004-09-15use less doubles in daemons; markus@ okMichael Shalayeff
2004-09-15mention PrintLastLog only prints last login time for interactiveJared Yanovich
sessions, like PrintMotd mentions. From Michael Knudsen, with wording changed slightly to match the PrintMotd description. ok djm
2004-09-15/* fallthrough */ is something a programmer understands. ButTheo de Raadt
/* FALLTHROUGH */ is also understood by lint, so that is better.
2004-09-07cleanup multiplex control socket on SIGHUP too, spotted by sturm@Damien Miller
ok markus@ deraadt@
2004-08-30.Xsession -> .xsession;Jason McIntyre
originally from a pr from f at obiit dot org, but missed by myself; ok markus@ matthieu@
2004-08-30s/keygen/keyscan/Markus Friedl
2004-08-28don't erroneously close stdin for !reexec case, from Dave Johnson; ok markus@Damien Miller
2004-08-26get rid of references to rhosts authentication; with jmc@Markus Friedl
2004-08-23Remove duplicate getuid(), suggested by & ok markus@Darren Tucker