summaryrefslogtreecommitdiff
path: root/usr/src/cmd/ssh/sshd
AgeCommit message (Collapse)AuthorFilesLines
2011-03-19AGENT-126: DSA keys don't work with smart-loginMark Cavage1-20/+42
2011-02-28dlerror returns non-NULL, even on successMark Cavage1-5/+5
2011-02-25sshd plugin supportMark Cavage2-2/+91
2011-01-26OS-21 log physical IP as apposed to hostname in wtmpx in ssh to help combat ↵Jerry Jelinek1-2/+1
fraudsters
2010-06-246916796 OSnet mapfiles should use version 2 link-editor syntaxAli Bahrami1-3/+5
--HG-- rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-vers rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindings rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcnt rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindrep rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-truss rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-who rename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdata rename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-vers rename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-vers rename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-vers rename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-vers rename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-vers rename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
2010-06-106949049 keyboard-interactive configuration option handling needs to be fixed ↵Jan Pechanec4-38/+46
in SunSSH
2010-06-046953845 Sshd monitor process needs better debugingZdenek Kotala1-7/+14
6336266 ssh SIGWINCH handling races; some servers are very unforgiving 6953854 Channel handler could process just created channels
2010-05-06PSARC/2010/155 sshd(1M) PAM Service name optionsDarren J Moffat2-18/+75
4877708 PAM service name for sshd needs to be configurable
2010-03-016875954 fork error is reported with wrong errno in sshd.cJan Pechanec2-21/+21
6916082 sshd(1M) ignores nologin(4) if /etc/nologin is not world readable
2009-12-096864377 PrintMotd yes will cause ssh login sessions to hang on large /etc/motdHuie-Ying Lee1-1/+14
2009-12-04PSARC 2009/449 sshd PreUserAuthHookErik Trauschke4-5/+171
6850175 Extension of SSHD to run an executable prior to user authentication
2009-11-20PSARC 2009/542 Increase the maximum value of NGROUPS_MAX to 1024Casper H.S. Dik1-9/+20
4088757 Customer would like to increase ngroups_max more than 32 6853435 Many files incorrectly include the private <sys/cred_impl.h>
2009-11-126655613 resync server's conditional Match block from OpenSSH (fix lint)Huie-Ying Lee1-1/+1
2009-11-116655613 resync server's conditional Match block from OpenSSHHuie-Ying Lee7-115/+426
2009-10-266882255 sftp connection fails when .bashrc generates output on stderrZdenek Kotala1-49/+10
6886656 unlimited window size causes problems with limited buffer sizes 6894519 USE_PIPES is not used on Solaris and should be removed
2009-09-146868716 dangling sshd authentication thread after timeout exit of monitorJan Pechanec2-23/+22
6875551 remove the "authenticated" label from sshd.c
2009-06-116635417 more memory leaks in SunSSHJan Pechanec7-219/+71
6687441 typo in comment for record_login() in sshlogin.c 6686336 ssh source code should use FD_CLOEXEC macro instead of 1 6839514 SSH's debug3() says login while it should mention logout 6820920 Sun SSH daemon crashes if /usr/bin/locale isn't present 6368560 extra backslashes in RB_PROTOTYPE 6496644 deprecate UseLogin and remove code supporting this feature from sshd(1m) 6445661 confusing debug message printed at debug level 3 6531556 ssh "You don't exist, go away" message is not helpful and rude 6670875 remove SECUREWARE code from SunSSH 6663391 confusing message in sshconnect1.c when all authentication methods fail 6822495 unlocalized message "illegal option" is seen with ssh command 6545293 ssh: ~? help and man page do not quite match for definition of ~B 6656381 ssh can crash when using libumem and given a bad local forwarding specification
2009-05-116740240 ssh: password prompt is garbled on ja_JP.PCK/ja_JP.eucJP localeNobutomo Nakano5-23/+49
2009-04-286616927 preserve MAC contexts between packetsJan Pechanec1-2/+2
2009-03-23PSARC/2009/155 ChrootDirectory option for SunSSH serverJan Pechanec5-254/+241
5043377 provide chroot capability in SunSSH 6809398 default PATH in SunSSH should contain "/bin" 6810759 remove md5crypt.c from SunSSH since it's not used 6813038 Subsystem keyword in sshd_config doesn't accept subsystem's options 6772676 ssh default XAuthLocation should be /usr/X11/bin/xauth
2009-02-266797221 do_exec_no_pty() function contains file descriptor leakZdenek Kotala1-1/+5
2009-02-106798660 Cadmium .NOT file processing problem with CWD relative file pathsAli Bahrami1-3/+15
Contributed by Richard Lowe 6785284 Mapfile versioning rules need to be more visible to gatelings 6800164 Standard file exclusion mechanism needed for Cadmium tools
2009-01-306797322 fix for 6761890 in SunSSH is too aggressiveJan Pechanec1-1/+26
2008-12-086730661 sshd should re-try pam_chauthtok() when it returns PAM_AUTHTOK_ERRPeter Shoults1-3/+18
2008-11-246772392 sshd auditing could be more accurate for failed logins to invalid ↵Brent Paulson1-8/+34
accounts
2008-11-216449514 move OpenSSL from /usr/sfw to /usr, /libJohn.Zolnowsky@Sun.COM1-6/+1
6457487 clean up Makefile for cmd/openssl 6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-11-106734620 sshd doesn't audit failed logins correctly.Brent Paulson7-50/+94
6750189 sshd doesn't set pam_retval correctly for password-based authentication failures 6759291 sshd doesn't generate subject tokens for successful logins/logouts since integration of CR 6445288
2008-09-12PSARC/2008/520 SunSSH with the OpenSSL PKCS#11 engine supportJan Pechanec6-230/+415
6445288 ssh needs to be OpenSSL engine aware 6709963 SunSSH server leaks memory during initialization 6687401 ssh monitor shouldn't try to log remote IP when child closed the pipe 6696629 sshd should remove alarm signal handler after authentication 6674088 userland threshold for hw offloading makes it difficult for SSL and SSH protocols 6728450 6708125 prevents parent to use the Crypto Framework after the fork(2) 6742247 ssh debug output with PACKET_DEBUG code could be more readable
2008-07-146714346 *sshd* does not enforce empty password restrictionsdarrenm1-2/+6
2008-04-246687803 sshd passes incorrect descriptor to audit_sshd_settid() when spawned ↵paulson1-1/+2
from inetd
2008-04-086679747 ssh disconnects with error if rc4, 3des or blowfish is used and ↵jp1619482-6/+46
default RekeyLimit is reached
2008-03-28PSARC/2008/164 Move TCP Wrappers from /usr/sfw to /usrceastha1-4/+2
6666929 move TCP Wrapper from /usr/sfw to /usr
2008-02-266627886 make SunSSH's GSS-API code cstyle cleanjp1619482-212/+218
2007-12-056496972 misleading error message is printed if X11 forwarding setup failsjp1619482-4/+5
6504798 ssh fails for users when ngroups_max=32 6631713 ssh-socks5-proxy-connect is too greedy during initial negotiation 6635397 remove bsd-nextstep files from SunSSH --HG-- rename : usr/src/cmd/ssh/include/bsd-nextstep.h => deleted_files/usr/src/cmd/ssh/include/bsd-nextstep.h rename : usr/src/cmd/ssh/libopenbsd-compat/common/bsd-nextstep.c => deleted_files/usr/src/cmd/ssh/libopenbsd-compat/common/bsd-nextstep.c
2007-11-30PSARC/2007/034 ssh/sshd resync with OpenSSHjp16194824-2610/+86
5040151 ssh(1) and sshd(1M) should re-key periodically as per-recent recommendations 6492415 ignore UsePrivilegeSeparation keyword in SunSSH 6624784 a few typos in SunSSH source code or its documentation 6626371 cmd/ssh/libssh/common/xlist.c should be cstyle clean 6627880 memory leaks in SunSSH's GSS-API code 6627881 memory leaks in SunSSH's g11n code 6627884 memory leaks in SunSSH's alternative privilege separation code 6627890 memory leaks in cmd/ssh/sshd/auth2-pam.c 6628516 old OpenSSH privilege separation code is not needed in SunSSH --HG-- rename : usr/src/cmd/ssh/include/monitor.h => deleted_files/usr/src/cmd/ssh/include/monitor.h rename : usr/src/cmd/ssh/include/monitor_fdpass.h => deleted_files/usr/src/cmd/ssh/include/monitor_fdpass.h rename : usr/src/cmd/ssh/include/monitor_mm.h => deleted_files/usr/src/cmd/ssh/include/monitor_mm.h rename : usr/src/cmd/ssh/include/monitor_wrap.h => deleted_files/usr/src/cmd/ssh/include/monitor_wrap.h rename : usr/src/cmd/ssh/libssh/common/monitor_fdpass.c => deleted_files/usr/src/cmd/ssh/libssh/common/monitor_fdpass.c rename : usr/src/cmd/ssh/libssh/common/monitor_wrap.c => deleted_files/usr/src/cmd/ssh/libssh/common/monitor_wrap.c rename : usr/src/cmd/ssh/sshd/monitor.c => deleted_files/usr/src/cmd/ssh/sshd/monitor.c rename : usr/src/cmd/ssh/sshd/monitor_mm.c => deleted_files/usr/src/cmd/ssh/sshd/monitor_mm.c
2007-10-26PSARC/2007/610 ssh(1) binding address for port forwardingjp1619482-5/+26
6506674 allow specific binding address to be used with -LRD options for ssh(1) 6619347 SunSSH is not fully compatible with RFC4254 with regard to port forwarding
2007-09-106598158 ssh compatibility flag SSH_BUG_DFLT_CLNT_EXIT_0 wasn't a good ideajp1619481-13/+23
6598255 sshd may print bogus error messages in lastlog_get_entry()
2007-08-016552966 ssh should issue warning message for expired passwords againvk1998391-2/+23
2007-05-25PSARC 2007/064 Unified POSIX and Windows Credentials for Solariscasper1-2/+2
4994017 data structure sharing between rpcbind and libnsl leads to accidents 6549510 Need the ability to store SIDs in the Solaris cred_t 6549515 PSARC 2007/064: uid_t and gid_t to become unsigned
2007-05-216509089 sshd not logging kerberos principals with sysloggm1499741-1/+16
2007-05-176455532 OSNet cleanup required in preparation for direct bindingsrie2-2/+40
--HG-- rename : usr/src/cmd/bnu/strecpy.c => deleted_files/usr/src/cmd/bnu/strecpy.c rename : usr/src/cmd/fs.d/ufs/mount/realpath.c => deleted_files/usr/src/cmd/fs.d/ufs/mount/realpath.c rename : usr/src/cmd/lp/lib/lp/tinames.c => deleted_files/usr/src/cmd/lp/lib/lp/tinames.c rename : usr/src/cmd/sgs/crle/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/crle/common/mapfile-vers rename : usr/src/cmd/sgs/elfdump/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/elfdump/common/mapfile-vers rename : usr/src/cmd/sgs/ldd/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/ldd/common/mapfile-vers rename : usr/src/cmd/sgs/moe/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/moe/common/mapfile-vers rename : usr/src/cmd/sgs/pvs/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/pvs/common/mapfile-vers rename : usr/src/lib/libsocket/amd64/byteorder.s => deleted_files/usr/src/lib/libsocket/amd64/byteorder.s rename : usr/src/lib/libsocket/i386/byteorder.s => deleted_files/usr/src/lib/libsocket/i386/byteorder.s rename : usr/src/cmd/sgs/ld/common/mapfile-vers => usr/src/cmd/sgs/ld/common/mapfile-intf rename : usr/src/cmd/sgs/mapfiles/Makefile => usr/src/common/mapfiles/Makefile rename : usr/src/cmd/sgs/mapfiles/amd64/Makefile => usr/src/common/mapfiles/amd64/Makefile rename : usr/src/cmd/sgs/mapfiles/amd64/map.above4G => usr/src/common/mapfiles/amd64/map.above4G rename : usr/src/cmd/sgs/mapfiles/amd64/map.below4G => usr/src/common/mapfiles/amd64/map.below4G rename : usr/src/cmd/sgs/mapfiles/common/Makefile => usr/src/common/mapfiles/common/Makefile rename : usr/src/cmd/mapfile_bssalign => usr/src/common/mapfiles/common/map.bssalign rename : usr/src/cmd/mapfile_execdata => usr/src/common/mapfiles/common/map.execdata rename : usr/src/lib/common/mapfile-filter => usr/src/common/mapfiles/common/map.filter rename : usr/src/cmd/mapfile_noexstk => usr/src/common/mapfiles/common/map.noexstk rename : usr/src/cmd/sgs/mapfiles/i386/Makefile => usr/src/common/mapfiles/i386/Makefile rename : usr/src/cmd/sgs/mapfiles/i386/map.default => usr/src/common/mapfiles/i386/map.default rename : usr/src/cmd/mapfile_noexdata => usr/src/common/mapfiles/i386/map.noexdata rename : usr/src/cmd/sgs/mapfiles/i386/map.pagealign => usr/src/common/mapfiles/i386/map.pagealign rename : usr/src/cmd/sgs/mapfiles/sparc/Makefile => usr/src/common/mapfiles/sparc/Makefile rename : usr/src/cmd/sgs/mapfiles/sparc/map.default => usr/src/common/mapfiles/sparc/map.default rename : usr/src/cmd/sgs/mapfiles/sparc/map.pagealign => usr/src/common/mapfiles/sparc/map.pagealign rename : usr/src/cmd/sgs/mapfiles/sparcv9/Makefile => usr/src/common/mapfiles/sparcv9/Makefile rename : usr/src/cmd/sgs/mapfiles/sparcv9/map.above4G => usr/src/common/mapfiles/sparcv9/map.above4G rename : usr/src/cmd/sgs/mapfiles/sparcv9/map.below4G => usr/src/common/mapfiles/sparcv9/map.below4G rename : usr/src/lib/libsocket/inet/byteorder.c => usr/src/lib/libc/sparc/gen/byteorder.c
2007-05-086527064 *sshd* uses LC_CTIME instead of LC_TIMEjp1619481-2/+2
2007-04-066506671 sshd should not fail on permissions check with pubkey auth if ↵jp1619481-8/+14
homedir is not available 6541995 honour Host directives when processing ConnectTimeout option
2007-03-286203206 sshd should set PAM_AUSER for hostbased userauth for audited logins ↵jp1619482-2/+13
to roles
2006-11-226490527 sshd dumps core when compiled with gccjp1619481-13/+38
6493597 get rid of 'xauth: creating new authority file' message with 'ssh -X' 6494020 modifying a string literal in session_x11_req() coredumps sshd(1m) built with gcc
2006-11-136432078 SUNWsshdu should depend on SUNWlocjp1619481-2/+77
6432083 sshd dumps core if /usr/bin/locale is missing or gives an empty output 6470249 ssh support for X forwarding is broken 6484979 typo in 'frunction' in cmd/ssh/libssh/common/log.c
2006-10-13PSARC 2006/561 libcmd must dieraf1-5/+4
6480998 libcmd must die --HG-- rename : usr/src/lib/libcmd/common/deflt.c => usr/src/lib/libc/port/gen/deflt.c
2006-09-196448031 ssh-keygen does not overwrite old key information when told yesjp1619481-4/+7
6451031 broken key in authorized_keys causes sshd to exit 6455367 ssh-agent can accept connections from other users depending on permissions of socket directory 6457202 server side of scp creates a directory even when not in recursive mode 6457241 server side of scp allows dir creation outside of the target subdirectory 6457952 scp performs local copying even when expected target directory is not a directory 6457959 scp doesn't print stderr messages in certain situations 6466048 scp should not call write() for the last chunk of data twice 6468175 sshd may set MAIL variable with two slashes in a row
2006-08-016450749 The +group audit policy is ignored by most userland audit recordsgww1-0/+11
2006-04-116376800 sshd(1M) on BSM enabled systems can trigger spurious audit related ↵jp1619481-2/+8
syslog messages 6405907 switched back-references in cmd/ssh/README.altprivsep file