summaryrefslogtreecommitdiffhomepage
path: root/svr-auth.c
AgeCommit message (Expand)Author
2018-11-05- Add adaptive authentication failure delayMatt Johnston
2018-08-23Merge bugfix delay invalid usersMatt Johnston
2018-08-23Wait to fail invalid usernamesMatt Johnston
2018-02-28merge from mainMatt Johnston
2018-02-28clean some fuzzing conditionalsMatt Johnston
2018-02-28fix #endif (#59)François Perrad
2018-02-28fix #endif (#59)François Perrad
2018-02-28- #if not #ifdef for DROPBEAR_FUZZMatt Johnston
2018-02-28merge from mainMatt Johnston
2018-02-27add guard HAVE_GETGROUPLISTMatt Johnston
2018-02-26merge from mainMatt Johnston
2018-02-26- Don't try to handle changed usernamesMatt Johnston
2018-02-26more linting (#58)François Perrad
2018-02-26Fix restricted group code for BSDs, move to separate functionMatt Johnston
2018-02-20Added the -G option to allow logins only for users that are members of a cert...stellarpower
2018-02-17merge from mainMatt Johnston
2018-01-23merge up to dateMatt Johnston
2017-08-19Pointer parameter could be declared as pointing to constFrancois Perrad
2017-06-30fix DROBPEAR_FUZZ auth delayMatt Johnston
2017-06-25dropbear server: support -T max auth triesKevin Darbyshire-Bryant
2017-05-18merge main to fuzzMatt Johnston
2017-05-13fuzz harnessMatt Johnston
2017-05-12copy over some fuzzing code from AFL branchMatt Johnston
2016-05-04Convert #ifdef to #if, other build changesMatt Johnston
2016-03-16fix empty C prototypesFrancois Perrad
2015-08-03Fix problem where auth timeout wasn't checked when waiting for identMatt Johnston
2015-06-04buf_getstring and buf_putstring now use non-unsigned char*Matt Johnston
2015-05-05Turn username, servicename and methodname local variables into char *Gaël PORTAY
2015-05-05Fix pointer differ in signess warnings [-Werror=pointer-sign]Gaël PORTAY
2014-07-09Fix auth timeout regressionMatt Johnston
2013-11-14rename random.h to dbrandom.h since some OSes have a system random.hMatt Johnston
2013-11-12Various cleanups and fixes for warningsMatt Johnston
2013-10-18Merge in changes from the past couple of releasesMatt Johnston
2013-10-03Send PAM error messages as a banner messagesMatt Johnston
2013-05-26improve auth failure delays to avoid indicating which users existMatt Johnston
2013-05-21merge in HEADMatt Johnston
2013-04-17If running as non-root only allow that user to log inMatt Johnston
2013-04-08- Fix various hardcoded uses of SHA1Matt Johnston
2013-04-07ecc kind of works, needs fixing/testingMatt Johnston
2013-02-12Allow configuring "allow blank password option" at runtimePaul Eggleton
2012-05-09Don't TRACE() the pw_passwdMatt Johnston
2012-05-09Fix empty password immediate loginMatt Johnston
2012-05-09Return immediate success for blank passwords if allowedMatt Johnston
2011-10-26- Add ALLOW_BLANK_PASSWORD optionMatt Johnston
2011-02-23Improve capitalisation for all logged stringsMatt Johnston
2009-09-08- Test for pam_fail_delay() function in configureMatt Johnston
2008-09-29Add support for zlib@openssh.com delayed compression.Matt Johnston
2008-09-15- "-J 'nc localhost 22'" kind of works, needs fixing hostkeys, ptys etc.Matt Johnston
2008-07-12fill_passwd() doesn't have a return valueMatt Johnston
2008-01-13Make a copy of passwd fields since getpwnam()'s retval isn't safe to keepMatt Johnston