]>
andersk Git - gssapi-openssh.git/log
cphillip [Wed, 18 Sep 2002 22:19:55 +0000 (22:19 +0000)]
o Bump version to 1.2.
cphillip [Tue, 17 Sep 2002 19:04:45 +0000 (19:04 +0000)]
o Update version number of the package to 1.1.
cphillip [Tue, 17 Sep 2002 19:02:21 +0000 (19:02 +0000)]
o Fix typo in sftp-server config line.
jbasney [Fri, 13 Sep 2002 21:21:13 +0000 (21:21 +0000)]
- added --with-mechglue (experimental at this point)
- fixed places where CFLAGS was used for GSI instead of CPPFLAGS
jbasney [Fri, 13 Sep 2002 21:12:36 +0000 (21:12 +0000)]
add missing return values to GSSAPI_EXT functions
jbasney [Fri, 13 Sep 2002 21:11:57 +0000 (21:11 +0000)]
fix bad typecast in call to buffer_get_string()
jbasney [Fri, 13 Sep 2002 19:34:14 +0000 (19:34 +0000)]
define MECHGLUE when building with gssapi mechglue
jbasney [Fri, 13 Sep 2002 19:33:53 +0000 (19:33 +0000)]
skip KRB5 gssapi header magic for mechglue
jbasney [Fri, 13 Sep 2002 19:00:47 +0000 (19:00 +0000)]
rename get_progname to bsd_get_progname to prevent conflicts with
get_progname from heimdal's libroken
jbasney [Fri, 13 Sep 2002 18:58:02 +0000 (18:58 +0000)]
patch from Dan Kouril: replace gss_export_name() with gss_display_name()
jbasney [Fri, 13 Sep 2002 18:57:10 +0000 (18:57 +0000)]
HEIMDAL patch from Dan Kouril
jbasney [Fri, 13 Sep 2002 18:43:27 +0000 (18:43 +0000)]
patch from Dan Kouril for HAVE_GSSAPI_EXT and gss_export_cred()
jbasney [Thu, 12 Sep 2002 22:15:32 +0000 (22:15 +0000)]
added safe casts between size_t and int for platforms where the two are
different sizes (for example, IA64)
jbasney [Wed, 11 Sep 2002 16:28:30 +0000 (16:28 +0000)]
use local hostname when coming in on loopback interface because we won't
have 'localhost' credentials
jbasney [Mon, 9 Sep 2002 22:01:52 +0000 (22:01 +0000)]
use gethostbyaddr() to query the resolver for the official hostname
of the target host
jbasney [Mon, 9 Sep 2002 21:43:58 +0000 (21:43 +0000)]
document GssapiCleanupCreds
jbasney [Mon, 9 Sep 2002 19:54:51 +0000 (19:54 +0000)]
stash gssapi credential storage file name for GSI so we can cleanup
the credentials on exit
jbasney [Mon, 9 Sep 2002 18:54:16 +0000 (18:54 +0000)]
fix implicit username support for gssapi (was working for external-keyx only):
- if method is gssapi, wait until after gssapi exchange before trying to
set the username
- increment authctxt->attempt on each attempt (bug fix)
- only tell the monitor once that we're entering the authentication stage
jbasney [Mon, 9 Sep 2002 18:51:01 +0000 (18:51 +0000)]
fix implicit usernames for gssapi authentication (only external-keyx was
working before): wait until after gssapi exchange before setting the
username
jbasney [Mon, 9 Sep 2002 18:49:24 +0000 (18:49 +0000)]
if user is "", print "<implicit>" rather than ""
cphillip [Thu, 29 Aug 2002 16:19:39 +0000 (16:19 +0000)]
o Update version number to 1.0.
jbasney [Fri, 2 Aug 2002 19:37:58 +0000 (19:37 +0000)]
patch from Dan Kouril: Heimdal contains gss_krb5_copy_ccache(), so use it
jbasney [Fri, 2 Aug 2002 19:36:35 +0000 (19:36 +0000)]
bug fix from Dan Kouril: return GSS_LAST_ENTRY if no matching mechanism found
cphillip [Thu, 1 Aug 2002 15:28:58 +0000 (15:28 +0000)]
o Update the version number of the setup package to 0.10.
cphillip [Tue, 16 Jul 2002 21:25:07 +0000 (21:25 +0000)]
o Add new messages to print to the user in some odd cases involving the
presence/lack of the pid file. Also update some old messages so that
they are more verbose.
cphillip [Tue, 16 Jul 2002 20:24:50 +0000 (20:24 +0000)]
o Update the version number of the setup package to 0.9.
cphillip [Tue, 16 Jul 2002 20:20:34 +0000 (20:20 +0000)]
o Modularize startup and shutdown sequences into shell functions.
o Do more robust checking in case the pid file left around is stale
(eg. from a machine crash). If it is, remove it and start the server
up as usual.
cphillip [Mon, 15 Jul 2002 21:05:00 +0000 (21:05 +0000)]
o Add better handling of the globus location variable before it gets
placed into the SXXsshd script. AKA clean up the string to avoid
any abnormalities.
jbasney [Tue, 9 Jul 2002 23:02:25 +0000 (23:02 +0000)]
wrap implicit username code in #ifdef GSI for now, since Kerberos
doesn't support it yet
jbasney [Tue, 9 Jul 2002 22:57:29 +0000 (22:57 +0000)]
make installation of gsi prefixed binaries and man pages conditional
on whether we actually compiled with GSI support
jbasney [Tue, 9 Jul 2002 22:56:14 +0000 (22:56 +0000)]
add comment for implicit variable
jbasney [Tue, 9 Jul 2002 22:55:51 +0000 (22:55 +0000)]
misc.h no longer needed
jbasney [Tue, 9 Jul 2002 22:55:10 +0000 (22:55 +0000)]
wrap GSI code in #ifdef GSI
cphillip [Tue, 9 Jul 2002 20:13:20 +0000 (20:13 +0000)]
o Add '-src' on to the distribution directory's name.
cphillip [Mon, 8 Jul 2002 21:08:56 +0000 (21:08 +0000)]
o Initialize privilege separation setting at the beginning of the script
for the case where the SSHD configuration file isn't copied, and its
value is still needed for the generic output given to the user at
the end of the script's run.
cphillip [Mon, 8 Jul 2002 21:02:57 +0000 (21:02 +0000)]
o Change the check at the beginning of copyPRNGFile() from checking for
the presence of /dev/random to checking for the presence of
$sysconfdir/ssh_prng_cmds. This will allow installations of this
file all the time, since we are now unconditionally installing
ssh-rand-helper.
cphillip [Wed, 3 Jul 2002 20:25:12 +0000 (20:25 +0000)]
o Rearrange output of message re: privsep to user.
o Remove check for the mode of the privsep jail.
o Add check to verify root is the owner of the privsep jail.
cphillip [Wed, 3 Jul 2002 19:53:02 +0000 (19:53 +0000)]
o Reformat privilege separation output sent to user after setup script
is finished running.
cphillip [Wed, 3 Jul 2002 18:47:03 +0000 (18:47 +0000)]
o Formatting changes to standard output of setup script.
cphillip [Wed, 3 Jul 2002 18:11:59 +0000 (18:11 +0000)]
o Add mention of official GSI-OpenSSH site.
cphillip [Wed, 3 Jul 2002 18:05:02 +0000 (18:05 +0000)]
o Add 'press return to continue' at the end of the setup script output.
cphillip [Wed, 3 Jul 2002 17:45:07 +0000 (17:45 +0000)]
o Add checks for privilege separation and enable/disable in config
file based on the system's environment.
cphillip [Tue, 2 Jul 2002 18:22:48 +0000 (18:22 +0000)]
o Ran the config file man pages through the fixpaths script to prepare
them for installation on systems.
cphillip [Tue, 2 Jul 2002 17:46:01 +0000 (17:46 +0000)]
o Add the config man pages, along with the appropriate build steps and
filelist entries.
o Update version number of the setup package to 0.8.
cphillip [Tue, 2 Jul 2002 16:22:12 +0000 (16:22 +0000)]
o Update to match the sshd_config distributed with openssh 3.4p1.
jbasney [Tue, 2 Jul 2002 13:31:01 +0000 (13:31 +0000)]
allow PAM_START more than once, since we may switch usernames
jbasney [Tue, 2 Jul 2002 13:30:41 +0000 (13:30 +0000)]
reset authctxt->valid field if we're re-using authctxt
jbasney [Tue, 2 Jul 2002 04:36:42 +0000 (04:36 +0000)]
merged Simon's openssh-3.4p1-gssapi-
20020627 .diff patch to the trunk:
It adds support for GSSAPI in privilege separation mode.
I needed to re-do the empty username support by adding mapping functions
to the monitor, since the unprivileged child can't access the grid-mapfile
or any of the authentication context.
I also grabbed some fixes from Doug Engert to make GSSAPI work over SSH1
with privilege separation.
jbasney [Mon, 1 Jul 2002 15:28:09 +0000 (15:28 +0000)]
merged OpenSSH 3.4p1 to trunk
cphillip [Mon, 24 Jun 2002 16:24:44 +0000 (16:24 +0000)]
o More comment changes.
cphillip [Mon, 24 Jun 2002 16:10:52 +0000 (16:10 +0000)]
o Add extra comments for version 0.7.
jbasney [Fri, 21 Jun 2002 22:55:57 +0000 (22:55 +0000)]
add missing optarg declaration (bug in OpenSSH source distro?)
jbasney [Fri, 21 Jun 2002 22:55:03 +0000 (22:55 +0000)]
add prototypes for userauth_external() and userauth_gssapi()
jbasney [Fri, 21 Jun 2002 22:21:36 +0000 (22:21 +0000)]
resolved conflicts with import of OpenSSH 3.3p1
jbasney [Fri, 21 Jun 2002 21:30:17 +0000 (21:30 +0000)]
Initial revision
jbasney [Fri, 21 Jun 2002 01:04:46 +0000 (01:04 +0000)]
another reference to a free'd buffer, this time when gssapi auth succeeds
jbasney [Fri, 21 Jun 2002 00:35:48 +0000 (00:35 +0000)]
fix reference to freed memory in empty username handling code
jbasney [Thu, 20 Jun 2002 22:08:18 +0000 (22:08 +0000)]
fixed inconsistent use of $(EXEEXT) with gsiscp and gsissh
jbasney [Thu, 20 Jun 2002 21:58:19 +0000 (21:58 +0000)]
rather than installing gsissh and gsiscp as copies of ssh and scp, just
make symbolic links; also, install gsissh and gsiscp man pages as symlinks
to ssh and scp man pages
jbasney [Thu, 20 Jun 2002 19:14:01 +0000 (19:14 +0000)]
also install gsissh and gsiscp binaries
cphillip [Thu, 20 Jun 2002 15:10:56 +0000 (15:10 +0000)]
o Update the package's version number to 0.7.
jbasney [Wed, 19 Jun 2002 19:29:16 +0000 (19:29 +0000)]
document feature-specific user configuration files (config.gssapi, config.krb)
and Gssapi configuration options
jbasney [Wed, 19 Jun 2002 19:28:35 +0000 (19:28 +0000)]
GSSAPI configuration options now apply to both versions of the SSH protocol
so remove statements that say they apply to version 2 only.
jbasney [Wed, 19 Jun 2002 15:34:49 +0000 (15:34 +0000)]
include misc.h for pwcopy() prototype
jbasney [Wed, 19 Jun 2002 14:41:29 +0000 (14:41 +0000)]
merging OPENSSH_3_2_3P1_MSGHDR_FIX from vendor branch to trunk
jbasney [Wed, 19 Jun 2002 14:24:31 +0000 (14:24 +0000)]
merging OPENSSH_GSSAPI_Protocol1-branch to trunk from tag
OPENSSH_GSSAPI_Protocol1_Complete; official GSI OpenSSH now lives on the
trunk; Simon's patched version of OpenSSH can now be found on
OPENSSH_GSSAPI-branch
jbasney [Wed, 19 Jun 2002 13:30:14 +0000 (13:30 +0000)]
on gssapi authentication errors, send error information back to the client
to assist with debugging
jbasney [Wed, 19 Jun 2002 13:29:25 +0000 (13:29 +0000)]
added support for add-on feature-specific user config files config.gssapi,
config.gsi, config.krb, and config.afs in ~/.ssh
jbasney [Wed, 19 Jun 2002 13:27:43 +0000 (13:27 +0000)]
whitespace change
cphillip [Tue, 18 Jun 2002 20:45:01 +0000 (20:45 +0000)]
o Add $SSHD_ARGS variable within which users can easily add arguments
to the sshd program.
cphillip [Tue, 18 Jun 2002 03:18:49 +0000 (03:18 +0000)]
o Call copyPRNGFile() before we run the key generator. (d'oh)
cphillip [Fri, 14 Jun 2002 16:37:43 +0000 (16:37 +0000)]
o Reword the message printed to the user to offer a proper warning if
the 'force' flag is used.
cphillip [Fri, 14 Jun 2002 16:26:19 +0000 (16:26 +0000)]
o Add argument passing through the shell script.
cphillip [Fri, 14 Jun 2002 15:45:58 +0000 (15:45 +0000)]
o Tar the distribution into a directory named by the tuple (package name,
package version).
cphillip [Fri, 14 Jun 2002 15:44:44 +0000 (15:44 +0000)]
o Remove extraneous newline.
cphillip [Fri, 14 Jun 2002 15:43:01 +0000 (15:43 +0000)]
o Add installation of PRNG commands file upon setup.
o Add options to setup script to allow forcing an installation.
o Do more rigorous checking of files before we attempt to read from/write
to them.
o Reorganize order in which functions are called and how the program is
structured.
cphillip [Thu, 13 Jun 2002 17:34:39 +0000 (17:34 +0000)]
o Checkpoint commit. Moved main executable parts of script to the upper
part of the file. Added more documentation per subroutine.
cphillip [Thu, 13 Jun 2002 16:02:10 +0000 (16:02 +0000)]
o Install ssh_prng_cmds.in on build, and grab the file when creating a
package.
cphillip [Thu, 13 Jun 2002 16:00:36 +0000 (16:00 +0000)]
o Update the version number of the gsi_openssh_setup package to 0.6.
cphillip [Thu, 13 Jun 2002 15:59:38 +0000 (15:59 +0000)]
o Add ssh_prng_cmds to the gsi_openssh_setup package.
cphillip [Wed, 12 Jun 2002 17:44:03 +0000 (17:44 +0000)]
o Update version label within the setup package.
cphillip [Wed, 12 Jun 2002 16:18:46 +0000 (16:18 +0000)]
o Verify that system configuration directory exists before attempting
to install files.
cphillip [Wed, 12 Jun 2002 15:55:00 +0000 (15:55 +0000)]
o Add removal of todo list at build time.
cphillip [Tue, 11 Jun 2002 21:28:04 +0000 (21:28 +0000)]
o Remove an extraneous comment.
cphillip [Mon, 10 Jun 2002 21:56:13 +0000 (21:56 +0000)]
o Initial commit of script that creates GPT source package out of the
contents of the gsi_openssh_setup package's directory.
cphillip [Mon, 10 Jun 2002 21:51:25 +0000 (21:51 +0000)]
o Add the config files to the file capture list.
cphillip [Mon, 10 Jun 2002 20:58:15 +0000 (20:58 +0000)]
o Add moduli, ssh_config, and sshd_config from the mainline gsi_openssh
package.
o Rework setup script to accurately handle parsing sshd_config.in and
writing it to $GL/etc/ssh/sshd_config, along with copying ssh_config
and moduli to $GL/etc/ssh.
o Update version numbers of setup package to reflect these changes.
jbasney [Fri, 7 Jun 2002 20:40:03 +0000 (20:40 +0000)]
update OPENSSH_GSSAPI_Protocol1-branch with latest from branch
jbasney [Fri, 7 Jun 2002 20:38:36 +0000 (20:38 +0000)]
- don't try to find Globus directory if it isn't specified
- link statically with all GSI libraries (missed some on previous checkin)
jbasney [Fri, 7 Jun 2002 19:33:23 +0000 (19:33 +0000)]
add backwards compatibility with old GSI-enabled SSH daemons that didn't handle
empty username strings per the draft specification; the client will now
only send an empty username string if the server is new enough to handle it
jbasney [Fri, 7 Jun 2002 19:31:02 +0000 (19:31 +0000)]
do implicit username mapping if options.implicit is set (i.e., if user
doesn't specify username on the cmdline)
jbasney [Fri, 7 Jun 2002 19:29:51 +0000 (19:29 +0000)]
change debug msg to log msg so system logs include GSI certificate subject
to username mapping
jbasney [Fri, 7 Jun 2002 18:37:16 +0000 (18:37 +0000)]
updating OPENSSH_GSSAPI_Protocol1-branch with latest on the trunk (OpenSSH 3.2.3p1)
cphillip [Fri, 7 Jun 2002 14:38:07 +0000 (14:38 +0000)]
o Add restart option to init.d script.
jbasney [Thu, 6 Jun 2002 20:32:04 +0000 (20:32 +0000)]
rename getopt exported variables in openbsd-compat library with BSD
prefixes to match the BSD prefix on BSDgetopt() function to avoid
conflicts with getopt in libc
(this code was previously in includes.h)
cphillip [Thu, 6 Jun 2002 19:48:45 +0000 (19:48 +0000)]
o Alter comment for chkconfig so that GSI-OpenSSH is stated instead of
OpenSSH.
jbasney [Thu, 6 Jun 2002 19:41:09 +0000 (19:41 +0000)]
minor one-line formatting change to match with Simon's patch
jbasney [Thu, 6 Jun 2002 19:40:42 +0000 (19:40 +0000)]
remove duplicate call to copy_environment(), probably added by a merge error
jbasney [Thu, 6 Jun 2002 19:22:30 +0000 (19:22 +0000)]
- remove a few one-line merge errors
- fix path to static Globus libs
jbasney [Thu, 6 Jun 2002 19:16:39 +0000 (19:16 +0000)]
merged trunk with OpenSSH 3.2.3p1 from vendor branch (OPENSSH_PORTABLE_DIST)
This page took 0.162753 seconds and 4 git commands to generate.