summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2006-01-02clarify tun(4) opening - set the mode and bring the interface up. alsoReyk Floeter
(re)sets the tun(4) layer 2 LINK0 flag for existing tunnel interfaces. suggested and ok by djm@
2006-01-02use a common max. packet length, no binary changeDamien Miller
2006-01-01no trailing "\n" for debug()Kevin Steves
2006-01-01move <net/if.h>; ok djm@Kevin Steves
2005-12-31.Nm does not require an argument;Jason McIntyre
2005-12-31clean up ENVIRONMENT a little;Jason McIntyre
2005-12-31merge the "LOGIN SESSION AND REMOTE EXECUTION" and "SERVERJason McIntyre
AUTHENTICATION" sections into "AUTHENTICATION"; some rewording done to make the text read better, plus some improvements from djm; ok djm
2005-12-31document -MM; ok djm@Kevin Steves
2005-12-30do not suggest that interactive authentication will workJason McIntyre
with the -b flag; based on a diff from john l. scarfone; ok djm
2005-12-30add channel output filter interface.Reyk Floeter
ok djm@, suggested by markus@
2005-12-28use 'break-in' for consistency; ok deraadt@ ok and input jmc@Kevin Steves
2005-12-24eliminate some code duplicated in privsep and non-privsep paths, andDamien Miller
explicitly clear SIGALRM handler; "groovy" deraadt@
2005-12-23less mark up for -c;Jason McIntyre
2005-12-23- sync the description of -e w/ synopsisJason McIntyre
- simplify the description of -I - note that -I is only available if support compiled in, and that it isn't by default feedback/ok djm@
2005-12-22expand the description of -w somewhat;Jason McIntyre
help/ok reyk
2005-12-22put the description of "UsePrivilegedPort" in the correct place;Jason McIntyre
2005-12-21clarify precedence of -p, Port, ListenAddress; ok and help jmc@Kevin Steves
2005-12-21-Y does X11 forwarding too;Jason McIntyre
ok markus
2005-12-21options now described `above', rather than `later';Jason McIntyre
2005-12-21-L and -R descriptions are now above, not below, ~C description;Jason McIntyre
2005-12-20move info on ssh return values and config files up into the mainJason McIntyre
description;
2005-12-20.Ss -> .Sh: subsections have not made this page more readableJason McIntyre
2005-12-20merge the sections on protocols 1 and 2 into one section on authentication;Jason McIntyre
feedback djm dtucker ok deraadt markus dtucker
2005-12-20exit(255) on error to match description in ssh(1); bz #1137; ok deraadt@Darren Tucker
2005-12-17spelling: intented -> intendedKevin Steves
2005-12-17spelling: fowarding, fowardedKevin Steves
2005-12-16signpost the protocol sections;Jason McIntyre
2005-12-16make the description of -c a little nicer;Jason McIntyre
2005-12-16simplify a sentence;Jason McIntyre
2005-12-16move the option descriptions up the page: start of a restructure;Jason McIntyre
ok markus deraadt
2005-12-13if forced_tun_device is not set, it is -1 and not SSH_TUNID_ANYReyk Floeter
2005-12-12make sure protocol messages for internal channels are ignored.Markus Friedl
allow adjust messages for non-open channels; with and ok djm@
2005-12-08new sentence, new line;Jason McIntyre
2005-12-08two changes to the new ssh tunnel support. this breaks compatibilityReyk Floeter
with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@
2005-12-08keep options in order;Jason McIntyre
2005-12-08make `!command' a little clearer;Jason McIntyre
ok reyk
2005-12-07- avoid line split in SYNOPSISJason McIntyre
- add args to -w - kill trailing whitespace
2005-12-07typoReyk Floeter
2005-12-07reyk forgot to compile with -Werror (missing header)Damien Miller
2005-12-06Add brief instructions on how to use the new tun(4) forwarding overReyk Floeter
OpenSSH with OpenBSD. Please note that tunnel forwarding is still somewhat experimental and specific to the OpenBSD version of OpenSSH. Nevertheless, porting and interoperability is possible due to the availability of a tun(4)-like device for most of the other operating systems. ok jmc@, requested by djm@
2005-12-06Add support for tun(4) forwarding over OpenSSH, based on an idea andReyk Floeter
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others
2005-11-30avoid ambiguities in describing TZ;Jason McIntyre
ok djm@
2005-11-30timezone -> time zoneJason McIntyre
2005-11-29Populate default key sizes before checking them; from & ok tim@Darren Tucker
2005-11-28Update agent socket path templates to reflect reality, correct xref forDarren Tucker
the time formats. bz#1121, patch from openssh at roumenpetrov.info, ok djm@
2005-11-28Enforce DSA key length of exactly 1024 bits to comply with FIPS-186-2,Darren Tucker
increase minumum RSA key size to 768 bits and update man page to reflect these. Patch originally bz#1119 (senthilkumar_sen at hotpop.com), ok djm@, grudging ok deraadt@.
2005-11-22Correct format/arguments to debug call; spotted by shaw at vranix.com ok djm@Darren Tucker
2005-11-21Perform Kerberos calls even for invalid users to prevent leaking informationDarren Tucker
about account validity. bz #975, patch originally from Senthil Kumar, sanity checked by Simon Wilkinson, tested by djm@, biorn@, ok markus@
2005-11-15Include sys/queue.h explicitly instead of assuming some other headerTodd C. Miller
will pull it in. At the moment it gets pulled in by sys/select.h (which ssh has no business including) via event.h. OK markus@
2005-11-12avoid close(-1), as in rcp; ok cloderTheo de Raadt