Commit Graph

98 Commits

Author SHA1 Message Date
Renato Botelho
8490ba0fc6 glob() is already called by unlink_if_exists 2014-05-30 10:18:37 -03:00
Renato Botelho
5125c74626 Add @ to silent any possible return of posix_kill 2014-05-30 09:30:12 -03:00
Renato Botelho
33b4268901 Fix typo 2014-05-30 09:05:03 -03:00
Renato Botelho
2d6e7bfb45 Improve /etc/sshd:
. Create ed25519 key for ssh and silent daemon
. Remove some exec() calls
. We do not need to re-create all keys if /root/.ssh/authorized_keys is
  empty
. Remove some redundancy and declare a single array with all keys
2014-05-30 09:01:02 -03:00
Ermal
9cc22856d5 Remove the space here which probably is preventing from calling sshd from fcgi 2014-05-27 19:44:03 +00:00
Ermal
5a89049022 Modernize a bit the sshd sart file 2013-12-27 21:51:06 +00:00
Ermal
9be0ec8a0e Use the check properly! 2013-12-27 21:38:40 +00:00
Renato Botelho
09e14acf5b Unbreak etc/sshd, add a missing quote 2013-12-06 11:37:19 -02:00
Ermal
6363a6dec6 Create even elyptic curve keys 2013-12-05 15:13:07 +00:00
Namezero
3eebc3ebfc Minimal non-intrusive change for SSHDCond package extra parameters 2012-05-04 15:18:20 +03:00
jim-p
17730d9d86 Only run conf_mount_rw here if there isn't another process going. 2011-03-26 17:33:15 -04:00
jim-p
974c5af729 Actually if /etc/sshd is already running, doing a conf_mount_ro() would be a bad thing, as the other process still expects rw. 2011-03-26 17:30:20 -04:00
jim-p
63e18082bb Backing this out to see if it unbreaks NanoBSD upgrades with packages involved. Revert "Workaround for conf_mount_rw/ro during boot to only allow it to change at the start and end. Fixes #1279"
This reverts commit 548be1fd66.
2011-03-26 17:21:55 -04:00
Erik Fonnesbeck
548be1fd66 Workaround for conf_mount_rw/ro during boot to only allow it to change at the start and end. Fixes #1279 2011-03-22 01:28:23 -06:00
Erik Fonnesbeck
56bff6a325 Make sure host private key permissions aren't too open so sshd won't complain. 2010-11-30 17:29:55 -07:00
Ermal
7a9ed3010a Preseve attributes of files during copy. 2010-11-30 23:55:45 +00:00
Ermal
56c9163122 Pass correct argument to killbyname and correctly check for sshdkeyonly toggle. Ticket #691 2010-06-23 18:35:49 +00:00
jim-p
4c4b068c1f Fix ssh key existence test. 2010-06-22 02:38:32 -04:00
jim-p
2d402f570b Do a more thorough check for missing sshd key files. Should fix #673 2010-06-21 11:13:30 -04:00
jim-p
e28f5b9343 Silence 2010-06-18 10:47:03 -04:00
Chris Buechler
39618326e0 remove old function from 1_2, it just wipes out the authorized_keys file breaking SSH access with the way 2.0 handles SSH keys. writing out the keys is handled by the user manager now 2009-12-28 00:15:03 -05:00
Scott Ullrich
7c6cef3c26 Add shaper.inc 2009-11-21 22:23:01 -05:00
Scott Ullrich
2257118f09 Unbreak sshd 2009-07-10 19:29:10 -04:00
Ermal Lui
56c0c91fb0 Fix check for file. 2009-07-02 14:10:16 +00:00
Ermal Lui
06e28ceb7e Convert even ssh key gen to the new subsystem_dirty calls. 2009-07-01 18:08:40 +00:00
Scott Ullrich
6d87bf48d7 Use exec() 2009-06-29 22:00:46 -04:00
Scott Ullrich
7e009f1d29 Doh, correct copy command 2009-06-29 21:28:46 -04:00
Scott Ullrich
d226535c8e Add bit when restoring for diagnostics 2009-06-29 21:28:13 -04:00
Scott Ullrich
1d3bc939e3 Correct filename check 2009-06-29 16:49:58 -04:00
Scott Ullrich
0790b420c4 Require globals.inc and use correct directory name sshd, not ssh 2009-06-28 16:17:53 -04:00
Scott Ullrich
8fe7e3fcd2 Require globals.inc and use correct directory name sshd, not ssh 2009-06-28 16:17:53 -04:00
Scott Ullrich
4c2fa5b5ff s/config/conf/ 2009-06-27 21:33:17 -04:00
Scott Ullrich
5c3ccc0dcf Add ssh key support for nanobsd to preserve the ssh data 2009-06-27 16:54:04 -04:00
Scott Ullrich
43640486d6 Backup SSH keys for NanoBSD 2009-06-24 14:16:50 -04:00
Scott Ullrich
868a5b990a Adding Ciphers Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc for the tin foil hat wearing folks. 2009-05-21 16:41:27 -04:00
Scott Ullrich
36fcc77f39 * Ensure we are rw
* Remove seriously old dead code
2008-11-20 22:16:07 +00:00
Scott Ullrich
5b6eac0142 Use product_name 2008-11-10 04:17:48 +00:00
Matthew Grooms
659fa7f23b Cleanup authentication code. The basic auth method, the passwd, htpasswd
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named
local_backed has been added that authenticates to the local configuration
info which should be identical to system pwdb credentials. Since the
htpassword file is no longer required, sync_webgui_passwords and its
wrapper function system_password_configure have been removed.

The local account management functions were renamed for consistency. A few
minor bugs related to setting local passwords have also been corrected.
2008-08-03 17:54:35 +00:00
Bill Marquette
90ebd0b36a Ticket #1697 - rm authorized key file if keys don't exist in config.xml
MFC: for 1.2.1
2008-05-17 20:08:34 +00:00
Scott Ullrich
c6f535e2e5 Call sync_webgui_passwords() instead of manual routine 2008-03-24 02:01:38 +00:00
Scott Ullrich
116852b8ef Restore previous version. 2008-03-24 01:59:37 +00:00
Scott Ullrich
16559651f7 Sync w/ HEAD 2008-03-24 01:04:09 +00:00
Scott Ullrich
0bdbb9ea3c Remove extra PasswordAuthentication line. Ticket #1374 2007-07-06 18:16:37 +00:00
Timo Boettcher
ed4b63b097 SSH-Key(only) Login 2007-06-02 21:58:50 +00:00
Scott Ullrich
4e5205b157 MFC 15495
fix: root key files are not in /etc/ssh/root ...
2006-12-05 17:52:48 +00:00
Scott Ullrich
579946e2b1 MFC
pclose -> fclose
2006-11-12 18:57:31 +00:00
Scott Ullrich
f8196f1245 Allow JavaSSH package to work correctly.
ok: billm
2006-08-17 03:16:56 +00:00
Scott Ullrich
c859992661 Note in alert that changes to the webgui and such will not be processed until sshd has finished creating its keys. This may be a long process on 133 megahertz boxes. 2006-03-12 23:54:25 +00:00
Scott Ullrich
772ece2e32 File a alert when we start creating keys 2005-12-29 23:58:12 +00:00
Scott Ullrich
16df91e0b1 file_notice() requires notices.inc 2005-11-20 05:50:07 +00:00