]>
andersk Git - gssapi-openssh.git/log
cphillip [Wed, 3 Jul 2002 20:25:12 +0000 (20:25 +0000)]
o Rearrange output of message re: privsep to user.
o Remove check for the mode of the privsep jail.
o Add check to verify root is the owner of the privsep jail.
cphillip [Wed, 3 Jul 2002 19:53:02 +0000 (19:53 +0000)]
o Reformat privilege separation output sent to user after setup script
is finished running.
cphillip [Wed, 3 Jul 2002 18:47:03 +0000 (18:47 +0000)]
o Formatting changes to standard output of setup script.
cphillip [Wed, 3 Jul 2002 18:11:59 +0000 (18:11 +0000)]
o Add mention of official GSI-OpenSSH site.
cphillip [Wed, 3 Jul 2002 18:05:02 +0000 (18:05 +0000)]
o Add 'press return to continue' at the end of the setup script output.
cphillip [Wed, 3 Jul 2002 17:45:07 +0000 (17:45 +0000)]
o Add checks for privilege separation and enable/disable in config
file based on the system's environment.
cphillip [Tue, 2 Jul 2002 18:22:48 +0000 (18:22 +0000)]
o Ran the config file man pages through the fixpaths script to prepare
them for installation on systems.
cphillip [Tue, 2 Jul 2002 17:46:01 +0000 (17:46 +0000)]
o Add the config man pages, along with the appropriate build steps and
filelist entries.
o Update version number of the setup package to 0.8.
cphillip [Tue, 2 Jul 2002 16:22:12 +0000 (16:22 +0000)]
o Update to match the sshd_config distributed with openssh 3.4p1.
jbasney [Tue, 2 Jul 2002 13:31:01 +0000 (13:31 +0000)]
allow PAM_START more than once, since we may switch usernames
jbasney [Tue, 2 Jul 2002 13:30:41 +0000 (13:30 +0000)]
reset authctxt->valid field if we're re-using authctxt
jbasney [Tue, 2 Jul 2002 04:36:42 +0000 (04:36 +0000)]
merged Simon's openssh-3.4p1-gssapi-
20020627 .diff patch to the trunk:
It adds support for GSSAPI in privilege separation mode.
I needed to re-do the empty username support by adding mapping functions
to the monitor, since the unprivileged child can't access the grid-mapfile
or any of the authentication context.
I also grabbed some fixes from Doug Engert to make GSSAPI work over SSH1
with privilege separation.
jbasney [Mon, 1 Jul 2002 15:28:09 +0000 (15:28 +0000)]
merged OpenSSH 3.4p1 to trunk
cphillip [Mon, 24 Jun 2002 16:24:44 +0000 (16:24 +0000)]
o More comment changes.
cphillip [Mon, 24 Jun 2002 16:10:52 +0000 (16:10 +0000)]
o Add extra comments for version 0.7.
jbasney [Fri, 21 Jun 2002 22:55:57 +0000 (22:55 +0000)]
add missing optarg declaration (bug in OpenSSH source distro?)
jbasney [Fri, 21 Jun 2002 22:55:03 +0000 (22:55 +0000)]
add prototypes for userauth_external() and userauth_gssapi()
jbasney [Fri, 21 Jun 2002 22:21:36 +0000 (22:21 +0000)]
resolved conflicts with import of OpenSSH 3.3p1
jbasney [Fri, 21 Jun 2002 21:30:17 +0000 (21:30 +0000)]
Initial revision
jbasney [Fri, 21 Jun 2002 01:04:46 +0000 (01:04 +0000)]
another reference to a free'd buffer, this time when gssapi auth succeeds
jbasney [Fri, 21 Jun 2002 00:35:48 +0000 (00:35 +0000)]
fix reference to freed memory in empty username handling code
jbasney [Thu, 20 Jun 2002 22:08:18 +0000 (22:08 +0000)]
fixed inconsistent use of $(EXEEXT) with gsiscp and gsissh
jbasney [Thu, 20 Jun 2002 21:58:19 +0000 (21:58 +0000)]
rather than installing gsissh and gsiscp as copies of ssh and scp, just
make symbolic links; also, install gsissh and gsiscp man pages as symlinks
to ssh and scp man pages
jbasney [Thu, 20 Jun 2002 19:14:01 +0000 (19:14 +0000)]
also install gsissh and gsiscp binaries
cphillip [Thu, 20 Jun 2002 15:10:56 +0000 (15:10 +0000)]
o Update the package's version number to 0.7.
jbasney [Wed, 19 Jun 2002 19:29:16 +0000 (19:29 +0000)]
document feature-specific user configuration files (config.gssapi, config.krb)
and Gssapi configuration options
jbasney [Wed, 19 Jun 2002 19:28:35 +0000 (19:28 +0000)]
GSSAPI configuration options now apply to both versions of the SSH protocol
so remove statements that say they apply to version 2 only.
jbasney [Wed, 19 Jun 2002 15:34:49 +0000 (15:34 +0000)]
include misc.h for pwcopy() prototype
jbasney [Wed, 19 Jun 2002 14:41:29 +0000 (14:41 +0000)]
merging OPENSSH_3_2_3P1_MSGHDR_FIX from vendor branch to trunk
jbasney [Wed, 19 Jun 2002 14:24:31 +0000 (14:24 +0000)]
merging OPENSSH_GSSAPI_Protocol1-branch to trunk from tag
OPENSSH_GSSAPI_Protocol1_Complete; official GSI OpenSSH now lives on the
trunk; Simon's patched version of OpenSSH can now be found on
OPENSSH_GSSAPI-branch
jbasney [Wed, 19 Jun 2002 13:30:14 +0000 (13:30 +0000)]
on gssapi authentication errors, send error information back to the client
to assist with debugging
jbasney [Wed, 19 Jun 2002 13:29:25 +0000 (13:29 +0000)]
added support for add-on feature-specific user config files config.gssapi,
config.gsi, config.krb, and config.afs in ~/.ssh
jbasney [Wed, 19 Jun 2002 13:27:43 +0000 (13:27 +0000)]
whitespace change
cphillip [Tue, 18 Jun 2002 20:45:01 +0000 (20:45 +0000)]
o Add $SSHD_ARGS variable within which users can easily add arguments
to the sshd program.
cphillip [Tue, 18 Jun 2002 03:18:49 +0000 (03:18 +0000)]
o Call copyPRNGFile() before we run the key generator. (d'oh)
cphillip [Fri, 14 Jun 2002 16:37:43 +0000 (16:37 +0000)]
o Reword the message printed to the user to offer a proper warning if
the 'force' flag is used.
cphillip [Fri, 14 Jun 2002 16:26:19 +0000 (16:26 +0000)]
o Add argument passing through the shell script.
cphillip [Fri, 14 Jun 2002 15:45:58 +0000 (15:45 +0000)]
o Tar the distribution into a directory named by the tuple (package name,
package version).
cphillip [Fri, 14 Jun 2002 15:44:44 +0000 (15:44 +0000)]
o Remove extraneous newline.
cphillip [Fri, 14 Jun 2002 15:43:01 +0000 (15:43 +0000)]
o Add installation of PRNG commands file upon setup.
o Add options to setup script to allow forcing an installation.
o Do more rigorous checking of files before we attempt to read from/write
to them.
o Reorganize order in which functions are called and how the program is
structured.
cphillip [Thu, 13 Jun 2002 17:34:39 +0000 (17:34 +0000)]
o Checkpoint commit. Moved main executable parts of script to the upper
part of the file. Added more documentation per subroutine.
cphillip [Thu, 13 Jun 2002 16:02:10 +0000 (16:02 +0000)]
o Install ssh_prng_cmds.in on build, and grab the file when creating a
package.
cphillip [Thu, 13 Jun 2002 16:00:36 +0000 (16:00 +0000)]
o Update the version number of the gsi_openssh_setup package to 0.6.
cphillip [Thu, 13 Jun 2002 15:59:38 +0000 (15:59 +0000)]
o Add ssh_prng_cmds to the gsi_openssh_setup package.
cphillip [Wed, 12 Jun 2002 17:44:03 +0000 (17:44 +0000)]
o Update version label within the setup package.
cphillip [Wed, 12 Jun 2002 16:18:46 +0000 (16:18 +0000)]
o Verify that system configuration directory exists before attempting
to install files.
cphillip [Wed, 12 Jun 2002 15:55:00 +0000 (15:55 +0000)]
o Add removal of todo list at build time.
cphillip [Tue, 11 Jun 2002 21:28:04 +0000 (21:28 +0000)]
o Remove an extraneous comment.
cphillip [Mon, 10 Jun 2002 21:56:13 +0000 (21:56 +0000)]
o Initial commit of script that creates GPT source package out of the
contents of the gsi_openssh_setup package's directory.
cphillip [Mon, 10 Jun 2002 21:51:25 +0000 (21:51 +0000)]
o Add the config files to the file capture list.
cphillip [Mon, 10 Jun 2002 20:58:15 +0000 (20:58 +0000)]
o Add moduli, ssh_config, and sshd_config from the mainline gsi_openssh
package.
o Rework setup script to accurately handle parsing sshd_config.in and
writing it to $GL/etc/ssh/sshd_config, along with copying ssh_config
and moduli to $GL/etc/ssh.
o Update version numbers of setup package to reflect these changes.
jbasney [Fri, 7 Jun 2002 20:40:03 +0000 (20:40 +0000)]
update OPENSSH_GSSAPI_Protocol1-branch with latest from branch
jbasney [Fri, 7 Jun 2002 20:38:36 +0000 (20:38 +0000)]
- don't try to find Globus directory if it isn't specified
- link statically with all GSI libraries (missed some on previous checkin)
jbasney [Fri, 7 Jun 2002 19:33:23 +0000 (19:33 +0000)]
add backwards compatibility with old GSI-enabled SSH daemons that didn't handle
empty username strings per the draft specification; the client will now
only send an empty username string if the server is new enough to handle it
jbasney [Fri, 7 Jun 2002 19:31:02 +0000 (19:31 +0000)]
do implicit username mapping if options.implicit is set (i.e., if user
doesn't specify username on the cmdline)
jbasney [Fri, 7 Jun 2002 19:29:51 +0000 (19:29 +0000)]
change debug msg to log msg so system logs include GSI certificate subject
to username mapping
jbasney [Fri, 7 Jun 2002 18:37:16 +0000 (18:37 +0000)]
updating OPENSSH_GSSAPI_Protocol1-branch with latest on the trunk (OpenSSH 3.2.3p1)
cphillip [Fri, 7 Jun 2002 14:38:07 +0000 (14:38 +0000)]
o Add restart option to init.d script.
jbasney [Thu, 6 Jun 2002 20:32:04 +0000 (20:32 +0000)]
rename getopt exported variables in openbsd-compat library with BSD
prefixes to match the BSD prefix on BSDgetopt() function to avoid
conflicts with getopt in libc
(this code was previously in includes.h)
cphillip [Thu, 6 Jun 2002 19:48:45 +0000 (19:48 +0000)]
o Alter comment for chkconfig so that GSI-OpenSSH is stated instead of
OpenSSH.
jbasney [Thu, 6 Jun 2002 19:41:09 +0000 (19:41 +0000)]
minor one-line formatting change to match with Simon's patch
jbasney [Thu, 6 Jun 2002 19:40:42 +0000 (19:40 +0000)]
remove duplicate call to copy_environment(), probably added by a merge error
jbasney [Thu, 6 Jun 2002 19:22:30 +0000 (19:22 +0000)]
- remove a few one-line merge errors
- fix path to static Globus libs
jbasney [Thu, 6 Jun 2002 19:16:39 +0000 (19:16 +0000)]
merged trunk with OpenSSH 3.2.3p1 from vendor branch (OPENSSH_PORTABLE_DIST)
cphillip [Tue, 4 Jun 2002 16:32:46 +0000 (16:32 +0000)]
o Add chkconfig comments to the sshd startup script.
bhe [Sat, 18 May 2002 22:27:24 +0000 (22:27 +0000)]
revision: solve the implicit user name problem of
external-kex and gssapi
switch back to old username if both fail
auth2.c sshconnect2.c and gss-serv.c are modified
auth2.c defines two new variables to hold the old username
and recover to old username when both fail
sshconnect2.c send empty usernames to server for
external-kex and gssapi with implicit username option
gss-serv.c check the username again in the verification
jbasney [Sat, 18 May 2002 02:43:53 +0000 (02:43 +0000)]
merged trunk with OpenSSH 3.2.2p1 from vendor branch (OPENSSH_PORTABLE_DIST)
jbasney [Fri, 17 May 2002 16:21:34 +0000 (16:21 +0000)]
Initial revision
cphillip [Tue, 14 May 2002 20:01:04 +0000 (20:01 +0000)]
o Update version of setup package.
cphillip [Tue, 14 May 2002 20:00:28 +0000 (20:00 +0000)]
o Remove extraneous port argument left in from debugging.
cphillip [Tue, 14 May 2002 19:54:45 +0000 (19:54 +0000)]
o Sub in the correct path to $gpath/var for PidFile entry in sshd_config
at install time.
cphillip [Tue, 14 May 2002 19:48:46 +0000 (19:48 +0000)]
o Rework PID_FILE so that we rely on sshd to create it for us.
cphillip [Tue, 14 May 2002 19:25:56 +0000 (19:25 +0000)]
o Check for localstatedir before creating the PID_FILE.
cphillip [Tue, 14 May 2002 19:04:01 +0000 (19:04 +0000)]
o Bugfix.
cphillip [Tue, 14 May 2002 18:58:47 +0000 (18:58 +0000)]
o Make the setup script more resilient to errors.
cphillip [Tue, 14 May 2002 18:53:29 +0000 (18:53 +0000)]
o Set SXXsshd to executable upon setup.
cphillip [Tue, 14 May 2002 18:52:52 +0000 (18:52 +0000)]
o Only try to execute ssh-keygen if the file is executable.
cphillip [Tue, 14 May 2002 18:49:52 +0000 (18:49 +0000)]
o Bug fix to make the script more stable and to update PID_FILE.
cphillip [Tue, 14 May 2002 18:24:53 +0000 (18:24 +0000)]
o Install SXXsshd into $GL/sbin, not $GL/bin.
cphillip [Tue, 14 May 2002 18:24:15 +0000 (18:24 +0000)]
o Changes to install SXXsshd.in in $GL/sbin.
cphillip [Tue, 14 May 2002 18:15:24 +0000 (18:15 +0000)]
o Add SXXsshd as part of build and install.
cphillip [Tue, 14 May 2002 18:13:03 +0000 (18:13 +0000)]
o Add sshd startup script to setup package.
cphillip [Tue, 7 May 2002 21:26:04 +0000 (21:26 +0000)]
o Update output of the setup script to make the user aware of the
globus-user-env.sh script.
cphillip [Tue, 7 May 2002 21:18:05 +0000 (21:18 +0000)]
o Update path to post install program.
cphillip [Tue, 7 May 2002 18:53:58 +0000 (18:53 +0000)]
o Package metadata versioning was all wrong. Now it's fixed.
cphillip [Tue, 7 May 2002 18:50:56 +0000 (18:50 +0000)]
o Remove setup dependencies from gsi_openssh_setup.
cphillip [Tue, 7 May 2002 17:59:02 +0000 (17:59 +0000)]
o Move setup files into $GL/setup/gsi_openssh_setup/.
cphillip [Thu, 2 May 2002 18:11:45 +0000 (18:11 +0000)]
o Formatting changes.
cphillip [Thu, 2 May 2002 18:04:06 +0000 (18:04 +0000)]
o Set the LD_LIBRARY_PATH variable before we start running any programs.
cphillip [Thu, 2 May 2002 17:48:35 +0000 (17:48 +0000)]
o Remove restriction on execution. Regular users can now run this setup
script.
cphillip [Thu, 2 May 2002 16:43:24 +0000 (16:43 +0000)]
o Rearrange functioning of determineKeys() and add conditionals to only
print user messages when we actually will _do_ something in
copyKeyFiles() and genKeys().
cphillip [Thu, 2 May 2002 15:37:56 +0000 (15:37 +0000)]
o Update regex in fixpaths() to only pick out an entire line that fits
our profile.
cphillip [Thu, 2 May 2002 15:33:54 +0000 (15:33 +0000)]
o Rearrange output of the setup script to more accurately reflect a
simple /bin/sh environment.
cphillip [Thu, 2 May 2002 15:05:39 +0000 (15:05 +0000)]
o Remove config and moduli files from filelist.
cphillip [Wed, 1 May 2002 21:50:43 +0000 (21:50 +0000)]
o Update version number of dependency on globus_core_setup.
cphillip [Wed, 1 May 2002 21:29:25 +0000 (21:29 +0000)]
o Update version number of the package metadata file.
o Change the version number of the setup package proper.
cphillip [Wed, 1 May 2002 21:23:39 +0000 (21:23 +0000)]
o Remove contrib and config build copy steps.
cphillip [Wed, 1 May 2002 18:44:02 +0000 (18:44 +0000)]
o Oops. Cleanup commit.
cphillip [Wed, 1 May 2002 18:37:58 +0000 (18:37 +0000)]
o Checkpoint commit of changes to setup-openssh.pl.
cphillip [Tue, 30 Apr 2002 19:41:17 +0000 (19:41 +0000)]
o Remove config files since they are now sent in the gsi-openssh package.
This page took 0.21679 seconds and 4 git commands to generate.