X-Git-Url: http://andersk.mit.edu/gitweb/openssh.git/blobdiff_plain/fd573618ec6c2f424ee79f0d0cdbc81878047f80..73fd487192c5c9da355906c67e7634515dd78853:/ChangeLog diff --git a/ChangeLog b/ChangeLog index 6f900e9f..a0f973a4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,116 @@ +20040123 + - (djm) Do pam_session processing for systems with HAVE_LOGIN_CAP; from + ralf.hack AT pipex.net; ok dtucker@ + - (djm) Bug #776: Update contrib/redhat/openssh.spec to dynamically detect + Kerberos location (and thus work with Fedora Core 1); + from jason AT devrandom.org + - (dtucker) [configure.ac] Bug #788: Test for zlib.h presence and for + zlib >= 1.1.4. Partly from jbasney at ncsa.uiuc.edu. ok djm@ + - (dtucker) [contrib/cygwin/README] Document new ssh-host-config options. + Patch from vinschen at redhat.com. + +20040122 + - (dtucker) [configure.ac] Use krb5-config where available for Kerberos/ + GSSAPI detection, libs and includes. ok djm@ + - (dtucker) [session.c] Enable AFS support in conjunction with KRB5 not + just HEIMDAL. + - (tim) [contrib/solaris/buildpkg.sh] Allow for the possibility of + /usr/local being a symbolic link. Fixes problem reported by Henry Grebler. + +20040121 + - (djm) OpenBSD CVS Sync + - djm@cvs.openbsd.org 2004/01/13 09:25:05 + [sftp-int.c sftp.1 sftp.c] + Tidy sftp batchmode handling, eliminate junk to stderr (bugzilla #754) and + enable use of "-b -" to accept batchfile from stdin; ok markus@ + - jmc@cvs.openbsd.org 2004/01/13 12:17:33 + [sftp.1] + remove unnecessary Ic's; + kill whitespace at EOL; + ok djm@ + - markus@cvs.openbsd.org 2004/01/13 19:23:15 + [compress.c session.c] + -Wall; ok henning + - markus@cvs.openbsd.org 2004/01/13 19:45:15 + [compress.c] + cast for portability; millert@ + - markus@cvs.openbsd.org 2004/01/19 09:24:21 + [channels.c] + fake consumption for half closed channels since the peer is waiting for + window adjust messages; bugzilla #790 Matthew Dillon; test + ok dtucker@ + reproduce with sh -c 'ulimit -f 10; ssh host -n od /bsd | cat > foo' + - markus@cvs.openbsd.org 2004/01/19 21:25:15 + [auth2-hostbased.c auth2-pubkey.c serverloop.c ssh-keysign.c sshconnect2.c] + fix mem leaks; some fixes from Pete Flugstad; tested dtucker@ + - djm@cvs.openbsd.org 2004/01/21 03:07:59 + [sftp.c] + initialise infile in main, rather than statically - from portable + - deraadt@cvs.openbsd.org 2004/01/11 21:55:06 + [sshpty.c] + for pty opening, only use the openpty() path. the other stuff only needs + to be in openssh-p; markus ok + - (djm) [openbsd-compat/bsd-openpty.c] Rework old sshpty.c code into an + openpty() replacement + +20040114 + - (dtucker) [auth-pam.c] Have monitor die if PAM authentication thread exits + unexpectedly. with & ok djm@ + - (dtucker) [auth-pam.c] Reset signal handler in pthread_cancel too, add + test for case where cleanup has already run. + - (dtucker) [auth-pam.c] Add minor debugging. + +20040113 + - (dtucker) [auth-pam.c] Relocate struct pam_ctxt and prototypes. No + functional changes. + +20040108 + - (dtucker) [auth-pam.c defines.h] Bug #783: move __unused to defines.h and + only define if not already. From des at freebsd.org. + - (dtucker) [configure.ac] Remove extra (typo) comma. + +20040105 + - (dtucker) [contrib/ssh-copy-id] Bug #781: exit if ssh fails. Patch from + cjwatson at debian.org. + - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c] + Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@ + +20040102 + - (djm) OSX/Darwin needs BIND_8_COMPAT to build getrrsetbyname. Report from + jakob@ + - (djm) Remove useless DNS support configure summary message. from jakob@ + - (djm) OSX/Darwin put the PAM headers in a different place, detect this. + Report from jakob@ + +20031231 + - (dtucker) OpenBSD CVS Sync + - djm@cvs.openbsd.org 2003/12/22 09:16:58 + [moduli.c ssh-keygen.1 ssh-keygen.c] + tidy up moduli generation debugging, add -v (verbose/debug) option to + ssh-keygen; ok markus@ + - markus@cvs.openbsd.org 2003/12/22 20:29:55 + [cipher-3des1.c] + EVP_CIPHER_CTX_cleanup() for the des contexts; pruiksma@freesurf.fr + - jakob@cvs.openbsd.org 2003/12/23 16:12:10 + [servconf.c servconf.h session.c sshd_config] + implement KerberosGetAFSToken server option. ok markus@, beck@ + - millert@cvs.openbsd.org 2003/12/29 16:39:50 + [sshd_config] + KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK + - dtucker@cvs.openbsd.org 2003/12/31 00:24:50 + [auth2-passwd.c] + Ignore password change request during password auth (which we currently + don't support) and discard proposed new password. corrections/ok markus@ + - (dtucker) [configure.ac] Only test setresuid and setresgid if they exist. + +20031219 + - (dtucker) [defines.h] Bug #458: Define SIZE_T_MAX as UINT_MAX if we + typedef size_t ourselves. + +20031218 + - (dtucker) [configure.ac] Don't use setre[ug]id on DG-UX, from Tom Orban. + - (dtucker) [auth-pam.c] Do PAM chauthtok during SSH2 keyboard-interactive + authentication. Partially fixes bug #423. Feedback & ok djm@ + 20031217 - (djm) OpenBSD CVS Sync - markus@cvs.openbsd.org 2003/12/09 15:28:43 @@ -17,6 +130,27 @@ [ssh_config.5 sshconnect.c sshd.c sshd_config.5] rename keepalive to tcpkeepalive; the old name causes too much confusion; ok djm, dtucker; with help from jmc@ + - dtucker@cvs.openbsd.org 2003/12/09 23:45:32 + [clientloop.c] + Clear exit code when ssh -N is terminated with a SIGTERM. ok markus@ + - markus@cvs.openbsd.org 2003/12/14 12:37:21 + [ssh_config.5] + we don't support GSS KEX; from Simon Wilkinson + - markus@cvs.openbsd.org 2003/12/16 15:49:51 + [clientloop.c clientloop.h readconf.c readconf.h scp.1 sftp.1 ssh.1] + [ssh.c ssh_config.5] + application layer keep alive (ServerAliveInterval ServerAliveCountMax) + for ssh(1), similar to the sshd(8) option; ok beck@; with help from + jmc and dtucker@ + - markus@cvs.openbsd.org 2003/12/16 15:51:54 + [dh.c] + use <= instead of < in dh_estimate; ok provos/hshoexer; + do not return < DH_GRP_MIN + - (dtucker) [acconfig.h configure.ac uidswap.c] Bug #645: Check for + setres[ug]id() present but not implemented (eg some Linux/glibc + combinations). + - (bal) [openbsd-compat/bsd-misc.c] unset 'signal' defined if we are + using a real 'signal()' (Noticed by a NeXT Compile) 20031209 - (dtucker) OpenBSD CVS Sync