summaryrefslogtreecommitdiffstats
path: root/sshd_config (follow)
Commit message (Collapse)AuthorAgeFilesLines
* - djm@cvs.openbsd.org 2004/12/23 23:11:00Darren Tucker2005-01-201-1/+2
| | | | | | [servconf.c servconf.h sshd.c sshd_config sshd_config.5] bz #898: support AddressFamily in sshd_config. from peak@argo.troja.mff.cuni.cz; ok deraadt@
* - dtucker@cvs.openbsd.org 2004/05/23 23:59:53Darren Tucker2004-05-241-1/+2
| | | | | [auth.c auth.h auth1.c auth2.c servconf.c servconf.h sshd_config sshd_config.5] Add MaxAuthTries sshd config option; ok markus@
* - (djm) Explain consequences of UsePAM=yes a little better in sshd_config;Damien Miller2004-05-231-3/+8
| | | | ok dtucker@
* - millert@cvs.openbsd.org 2003/12/29 16:39:50Darren Tucker2003-12-311-2/+2
| | | | | [sshd_config] KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK
* - jakob@cvs.openbsd.org 2003/12/23 16:12:10Darren Tucker2003-12-311-1/+2
| | | | | [servconf.c servconf.h session.c sshd_config] implement KerberosGetAFSToken server option. ok markus@, beck@
* - (djm) Clarify UsePAM consequences a little moreDamien Miller2003-11-061-1/+1
|
* - markus@cvs.openbsd.org 2003/09/29 20:19:57Darren Tucker2003-10-021-2/+2
| | | | | [servconf.c sshd_config] GSSAPICleanupCreds -> GSSAPICleanupCredentials
* [sshd_config] UsePAM defaults to no.Tim Rice2003-09-261-1/+1
|
* - markus@cvs.openbsd.org 2003/08/28 12:54:34Damien Miller2003-09-021-2/+1
| | | | | | | | [auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c] [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5] [sshconnect1.c sshd.c sshd_config sshd_config.5] remove kerberos support from ssh1, since it has been replaced with GSSAPI; but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
* - markus@cvs.openbsd.org 2003/08/22 10:56:09Darren Tucker2003-08-261-1/+5
| | | | | | | | | [auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c session.h ssh-gss.h ssh_config.5 sshconnect2.c sshd_config sshd_config.5] support GSS API user authentication; patches from Simon Wilkinson, stripped down and tested by Jakob and myself.
* - markus@cvs.openbsd.org 2003/08/13 08:46:31Darren Tucker2003-08-131-5/+3
| | | | | | | [auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5] remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@, fgsch@, miod@, henning@, jakob@ and others
* - markus@cvs.openbsd.org 2003/07/23 07:42:43Darren Tucker2003-08-021-5/+1
| | | | | [sshd_config] remove AFS; itojun@
* 20030622Darren Tucker2003-06-221-5/+10
| | | | | | | - (dtucker) OpenBSD CVS Sync - djm@cvs.openbsd.org 2003/06/20 05:48:21 [sshd_config] sync some implemented options; ok markus@
* - (djm) OpenBSD CVS SyncDamien Miller2003-06-031-2/+2
| | | | | | | | | | | | | - markus@cvs.openbsd.org 2003/06/02 09:17:34 [auth2-hostbased.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c] [canohost.c monitor.c servconf.c servconf.h session.c sshd_config] [sshd_config.5] deprecate VerifyReverseMapping since it's dangerous if combined with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@ - (djm) Fix portable-specific uses of verify_reverse_mapping too
* clarifyDamien Miller2003-05-161-3/+3
|
* - jakob@cvs.openbsd.org 2003/05/15 01:48:10Damien Miller2003-05-151-2/+3
| | | | | | [readconf.c readconf.h servconf.c servconf.h] always parse kerberos options. ok djm@ markus@ - (djm) Always parse UsePAM
* - (djm) OpenBSD CVS SyncDamien Miller2002-09-271-2/+2
| | | | | | - markus@cvs.openbsd.org 2002/09/25 11:17:16 [sshd_config] sync LoginGraceTime with default
* - stevesk@cvs.openbsd.org 2002/08/21 19:38:06Damien Miller2002-09-041-2/+2
| | | | | [servconf.c sshd.8 sshd_config sshd_config.5] change LoginGraceTime default to 1 minute; ok mouring@ markus@
* - markus@cvs.openbsd.org 2002/07/30 17:03:55Ben Lindstrom2002-08-011-1/+2
| | | | | | [auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5] add PermitUserEnvironment (off by default!); from dot@dotat.at; ok provos, deraadt
* 20020628Kevin Steves2002-06-271-1/+1
| | | | | - (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented options should contain default value. from solar.
* - markus@cvs.openbsd.org 2002/06/20 23:37:12Ben Lindstrom2002-06-211-1/+2
| | | | | [sshd_config] add Compression
* - stevesk@cvs.openbsd.org 2002/06/20 20:03:34Ben Lindstrom2002-06-211-3/+3
| | | | | [ssh_config sshd_config] refer to config file man page
* - markus@cvs.openbsd.org 2002/05/15 21:56:38Ben Lindstrom2002-06-061-2/+2
| | | | | [servconf.c sshd.8 sshd_config] re-enable privsep and disable setuid for post-3.2.2
* - markus@cvs.openbsd.org 2002/05/15 21:02:53Ben Lindstrom2002-05-151-2/+2
| | | | | [servconf.c sshd.8 sshd_config] disable privsep and enable setuid for the 3.2.2 release
* - deraadt@cvs.openbsd.org 2002/05/04 02:39:35Ben Lindstrom2002-05-151-2/+2
| | | | | | [servconf.c sshd.8 sshd_config] enable privsep by default; provos ok (historical)
* - markus@cvs.openbsd.org 2002/04/22 16:16:53Damien Miller2002-04-231-3/+2
| | | | | [servconf.c sshd.8 sshd_config] do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@
* - stevesk@cvs.openbsd.org 2002/04/21 16:19:27Damien Miller2002-04-231-3/+2
| | | | | [sshd.8 sshd_config] document default AFSTokenPassing no; ok deraadt@
* - markus@cvs.openbsd.org 2002/03/21 20:51:12Ben Lindstrom2002-03-221-1/+2
| | | | | [sshd_config] add privsep (off)
* - (bal) Update sshd_config CVSIDBen Lindstrom2002-02-261-1/+1
|
* - deraadt@cvs.openbsd.org 2002/02/19 02:50:59Damien Miller2002-02-191-1/+1
| | | | | [sshd_config] stategy is not an english word
* - (djm) OpenBSD CVS SyncDamien Miller2002-02-101-5/+5
| | | | | | | - deraadt@cvs.openbsd.org 2002/02/09 17:37:34 [pathnames.h session.c ssh.1 sshd.8 sshd_config ssh-keyscan.1] move ssh config files to /etc/ssh - (djm) Adjust portable Makefile.in tnd ssh-rand-helper.c o match
* - markus@cvs.openbsd.org 2002/01/29 14:32:03Damien Miller2002-02-051-2/+2
| | | | | [auth2.c auth.c auth-options.c auth-rhosts.c auth-rh-rsa.c canohost.c servconf.c servconf.h session.c sshd.8 sshd_config] s/ReverseMappingCheck/VerifyReverseMapping/ and avoid confusion; ok stevesk@
* - stevesk@cvs.openbsd.org 2002/01/27 14:57:46Damien Miller2002-02-051-1/+2
| | | | | [channels.c servconf.c servconf.h session.c sshd.8 sshd_config] add X11UseLocalhost; ok markus@
* [configure.ac] fix logic on when ssh-rand-helper is installed.Tim Rice2002-01-311-0/+2
| | | | [sshd_config] put back in line that tells what PATH was compiled into sshd.
* - stevesk@cvs.openbsd.org 2002/01/16 17:40:23Damien Miller2002-01-221-45/+54
| | | | | | | | | [sshd_config] The stategy now used for options in the default sshd_config shipped with OpenSSH is to specify options with their default value where possible, but leave them commented. Uncommented options change a default value. Subsystem is currently the only default option changed. ok markus@
* - deraadt@cvs.openbsd.org 2001/12/19 07:18:56Damien Miller2001-12-211-2/+2
| | | | | | | | | | | | [auth1.c auth2.c auth2-chall.c auth-bsdauth.c auth.c authfile.c auth.h] [auth-krb4.c auth-rhosts.c auth-skey.c bufaux.c canohost.c channels.c] [cipher.c clientloop.c compat.c compress.c deattack.c key.c log.c mac.c] [match.c misc.c nchan.c packet.c readconf.c rijndael.c rijndael.h scard.c] [servconf.c servconf.h serverloop.c session.c sftp.c sftp-client.c] [sftp-glob.c sftp-int.c sftp-server.c ssh-add.c ssh-agent.c ssh.c] [sshconnect1.c sshconnect2.c sshconnect.c sshd.8 sshd.c sshd_config] [ssh-keygen.c sshlogin.c sshpty.c sshtty.c ttymodes.c uidswap.c] basic KNF done while i was looking for something else
* - mouring@cvs.openbsd.org 2001/09/20 20:57:51Ben Lindstrom2001-09-211-2/+1
| | | | | [sshd_config] CheckMail removed. OKed stevesk@
* - markus@cvs.openbsd.org 2001/06/22 21:55:49Ben Lindstrom2001-06-251-2/+1
| | | | | | | | [auth2.c auth-rsa.c pathnames.h ssh.1 sshd.8 sshd_config ssh-keygen.1] merge authorized_keys2 into authorized_keys. authorized_keys2 is used for backward compat. (just append authorized_keys2 to authorized_keys).
* - markus@cvs.openbsd.org 2001/05/31 13:08:04Ben Lindstrom2001-06-091-21/+28
| | | | | [sshd_config] group options and add some more comments
* - markus@cvs.openbsd.org 2001/05/20 17:20:36Ben Lindstrom2001-06-051-1/+4
| | | | | | | [auth-rsa.c auth.c auth.h auth2.c servconf.c servconf.h sshd.8 sshd_config] configurable authorized_keys{,2} location; originally from peter@; ok djm@
* - (djm) Add new server configuration directive 'PAMAuthenticationViaKbdInt'Damien Miller2001-04-251-4/+6
| | | | | (default: off), implies KbdInteractiveAuthentication. Suggestion from markus@
* - (bal) CVS ID fix up and slight manpage fix from OpenBSD tree.Ben Lindstrom2001-04-161-1/+1
|
* - markus@cvs.openbsd.org 2001/04/12 19:15:26Ben Lindstrom2001-04-131-1/+3
| | | | | | | | | | [auth-rhosts.c auth.h auth2.c buffer.c canohost.c canohost.h compat.c compat.h hostfile.c pathnames.h readconf.c readconf.h servconf.c servconf.h ssh.c sshconnect.c sshconnect.h sshconnect1.c sshconnect2.c sshd_config] implement HostbasedAuthentication (= RhostRSAAuthentication for ssh v2) similar to RhostRSAAuthentication unless you enable (the experimental) HostbasedUsesNameFromPacketOnly option. please test. :)
* - stevesk@cvs.openbsd.org 2001/03/25 13:16:11Ben Lindstrom2001-03-261-1/+2
| | | | | | [servconf.c servconf.h session.c sshd.8 sshd_config] PrintLastLog option; from chip@valinux.com with some minor changes by me. ok markus@
* make sure $bindir is in USER_PATH so scp will workTim Rice2001-03-101-0/+2
|
* - deraadt@cvs.openbsd.org 2001/02/24 10:37:26Ben Lindstrom2001-03-051-2/+2
| | | | | [sshd_config] ssh2 rsa key before dsa key
* - deraadt@cvs.openbsd.org 2001/02/22 18:09:06Ben Lindstrom2001-03-051-2/+2
| | | | | [sshd_config] activate RSA 2 key
* mode docDamien Miller2001-03-031-1/+2
|
* - Document PAM ChallengeResponseAuthentication in sshd.8Damien Miller2001-03-031-2/+3
| | | | - Disable and comment ChallengeResponseAuthentication in sshd_config
* - djm@cvs.openbsd.org 2001/02/04 21:26:07Ben Lindstrom2001-02-111-4/+4
| | | | | | | | [sshd_config] type: ok markus@ - deraadt@cvs.openbsd.org 2001/02/06 22:07:50 [sshd_config] enable sftp-server by default
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-19 22:53:08 +0100