Renato Botelho
8490ba0fc6
glob() is already called by unlink_if_exists
2014-05-30 10:18:37 -03:00
Renato Botelho
5125c74626
Add @ to silent any possible return of posix_kill
2014-05-30 09:30:12 -03:00
Renato Botelho
33b4268901
Fix typo
2014-05-30 09:05:03 -03:00
Renato Botelho
2d6e7bfb45
Improve /etc/sshd:
...
. Create ed25519 key for ssh and silent daemon
. Remove some exec() calls
. We do not need to re-create all keys if /root/.ssh/authorized_keys is
empty
. Remove some redundancy and declare a single array with all keys
2014-05-30 09:01:02 -03:00
Ermal
9cc22856d5
Remove the space here which probably is preventing from calling sshd from fcgi
2014-05-27 19:44:03 +00:00
Ermal
5a89049022
Modernize a bit the sshd sart file
2013-12-27 21:51:06 +00:00
Ermal
9be0ec8a0e
Use the check properly!
2013-12-27 21:38:40 +00:00
Renato Botelho
09e14acf5b
Unbreak etc/sshd, add a missing quote
2013-12-06 11:37:19 -02:00
Ermal
6363a6dec6
Create even elyptic curve keys
2013-12-05 15:13:07 +00:00
Namezero
3eebc3ebfc
Minimal non-intrusive change for SSHDCond package extra parameters
2012-05-04 15:18:20 +03:00
jim-p
17730d9d86
Only run conf_mount_rw here if there isn't another process going.
2011-03-26 17:33:15 -04:00
jim-p
974c5af729
Actually if /etc/sshd is already running, doing a conf_mount_ro() would be a bad thing, as the other process still expects rw.
2011-03-26 17:30:20 -04:00
jim-p
63e18082bb
Backing this out to see if it unbreaks NanoBSD upgrades with packages involved. Revert "Workaround for conf_mount_rw/ro during boot to only allow it to change at the start and end. Fixes #1279 "
...
This reverts commit 548be1fd66 .
2011-03-26 17:21:55 -04:00
Erik Fonnesbeck
548be1fd66
Workaround for conf_mount_rw/ro during boot to only allow it to change at the start and end. Fixes #1279
2011-03-22 01:28:23 -06:00
Erik Fonnesbeck
56bff6a325
Make sure host private key permissions aren't too open so sshd won't complain.
2010-11-30 17:29:55 -07:00
Ermal
7a9ed3010a
Preseve attributes of files during copy.
2010-11-30 23:55:45 +00:00
Ermal
56c9163122
Pass correct argument to killbyname and correctly check for sshdkeyonly toggle. Ticket #691
2010-06-23 18:35:49 +00:00
jim-p
4c4b068c1f
Fix ssh key existence test.
2010-06-22 02:38:32 -04:00
jim-p
2d402f570b
Do a more thorough check for missing sshd key files. Should fix #673
2010-06-21 11:13:30 -04:00
jim-p
e28f5b9343
Silence
2010-06-18 10:47:03 -04:00
Chris Buechler
39618326e0
remove old function from 1_2, it just wipes out the authorized_keys file breaking SSH access with the way 2.0 handles SSH keys. writing out the keys is handled by the user manager now
2009-12-28 00:15:03 -05:00
Scott Ullrich
7c6cef3c26
Add shaper.inc
2009-11-21 22:23:01 -05:00
Scott Ullrich
2257118f09
Unbreak sshd
2009-07-10 19:29:10 -04:00
Ermal Lui
56c0c91fb0
Fix check for file.
2009-07-02 14:10:16 +00:00
Ermal Lui
06e28ceb7e
Convert even ssh key gen to the new subsystem_dirty calls.
2009-07-01 18:08:40 +00:00
Scott Ullrich
6d87bf48d7
Use exec()
2009-06-29 22:00:46 -04:00
Scott Ullrich
7e009f1d29
Doh, correct copy command
2009-06-29 21:28:46 -04:00
Scott Ullrich
d226535c8e
Add bit when restoring for diagnostics
2009-06-29 21:28:13 -04:00
Scott Ullrich
1d3bc939e3
Correct filename check
2009-06-29 16:49:58 -04:00
Scott Ullrich
0790b420c4
Require globals.inc and use correct directory name sshd, not ssh
2009-06-28 16:17:53 -04:00
Scott Ullrich
8fe7e3fcd2
Require globals.inc and use correct directory name sshd, not ssh
2009-06-28 16:17:53 -04:00
Scott Ullrich
4c2fa5b5ff
s/config/conf/
2009-06-27 21:33:17 -04:00
Scott Ullrich
5c3ccc0dcf
Add ssh key support for nanobsd to preserve the ssh data
2009-06-27 16:54:04 -04:00
Scott Ullrich
43640486d6
Backup SSH keys for NanoBSD
2009-06-24 14:16:50 -04:00
Scott Ullrich
868a5b990a
Adding Ciphers Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc for the tin foil hat wearing folks.
2009-05-21 16:41:27 -04:00
Scott Ullrich
36fcc77f39
* Ensure we are rw
...
* Remove seriously old dead code
2008-11-20 22:16:07 +00:00
Scott Ullrich
5b6eac0142
Use product_name
2008-11-10 04:17:48 +00:00
Matthew Grooms
659fa7f23b
Cleanup authentication code. The basic auth method, the passwd, htpasswd
...
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named
local_backed has been added that authenticates to the local configuration
info which should be identical to system pwdb credentials. Since the
htpassword file is no longer required, sync_webgui_passwords and its
wrapper function system_password_configure have been removed.
The local account management functions were renamed for consistency. A few
minor bugs related to setting local passwords have also been corrected.
2008-08-03 17:54:35 +00:00
Bill Marquette
90ebd0b36a
Ticket #1697 - rm authorized key file if keys don't exist in config.xml
...
MFC: for 1.2.1
2008-05-17 20:08:34 +00:00
Scott Ullrich
c6f535e2e5
Call sync_webgui_passwords() instead of manual routine
2008-03-24 02:01:38 +00:00
Scott Ullrich
116852b8ef
Restore previous version.
2008-03-24 01:59:37 +00:00
Scott Ullrich
16559651f7
Sync w/ HEAD
2008-03-24 01:04:09 +00:00
Scott Ullrich
0bdbb9ea3c
Remove extra PasswordAuthentication line.
Ticket #1374
2007-07-06 18:16:37 +00:00
Timo Boettcher
ed4b63b097
SSH-Key(only) Login
2007-06-02 21:58:50 +00:00
Scott Ullrich
4e5205b157
MFC 15495
...
fix: root key files are not in /etc/ssh/root ...
2006-12-05 17:52:48 +00:00
Scott Ullrich
579946e2b1
MFC
...
pclose -> fclose
2006-11-12 18:57:31 +00:00
Scott Ullrich
f8196f1245
Allow JavaSSH package to work correctly.
...
ok: billm
2006-08-17 03:16:56 +00:00
Scott Ullrich
c859992661
Note in alert that changes to the webgui and such will not be processed until sshd has finished creating its keys. This may be a long process on 133 megahertz boxes.
2006-03-12 23:54:25 +00:00
Scott Ullrich
772ece2e32
File a alert when we start creating keys
2005-12-29 23:58:12 +00:00
Scott Ullrich
16df91e0b1
file_notice() requires notices.inc
2005-11-20 05:50:07 +00:00