ClearML/dropbear
1
0
Fork 0
mirror of https://github.com/clearml/dropbear synced 2025-01-31 02:46:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
1,880 Commits 5 Branches 63 Tags 14 MiB
31e3a973c1
Commit Graph

24 Commits

Author SHA1 Message Date
Jackkal
427e49003a make comments consistent and fix typo 2022-06-21 22:48:56 +02:00
Jackkal
0c9318a0b2 Two-factor authentication support (pubkey and password) 2022-04-29 15:43:15 +02:00
Matt Johnston
8b4f60a7a1 limit password length to 100 2019-03-21 00:09:07 +08:00
Matt Johnston
52adbb34c3 Wait to fail invalid usernames 2018-08-23 23:43:12 +08:00
Matt Johnston
32a28d0d9c Convert #ifdef to #if, other build changes 2016-05-04 15:33:40 +02:00
Matt Johnston
1a4db21fe4 buf_getstring and buf_putstring now use non-unsigned char* 2015-06-04 23:08:50 +08:00
Matt Johnston
1fa1c3f9db note about constant_time_strcmp and lengths 2015-06-03 22:15:12 +08:00
Matt Johnston
d1dec41f76 Constant time memcmp for the hmac and password crypt 2013-10-03 22:25:30 +08:00
Matt Johnston
57166b400c Avoid segfault for locked accounts (invalid salt to crypt()) 2013-04-29 23:42:37 +08:00
Paul Eggleton
1205fa68df Allow configuring "allow blank password option" at runtime 
Changes this from a compile-time switch to a command-line option.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
 2013-02-12 15:52:57 +00:00
Matt Johnston
6b4105ffe6 Fix empty password immediate login 2012-05-09 22:51:59 +08:00
Matt Johnston
2713445e91 Return immediate success for blank passwords if allowed 2012-05-09 22:37:04 +08:00
Matt Johnston
29e68e9d79 - Add ALLOW_BLANK_PASSWORD option 
- Don't reject blank-password logins via public key

--HG--
extra : convert_revision : 2d4bb3ecb013a7be47a7b470fc6b23e653a43dfb
 2011-10-26 15:49:47 +00:00
Matt Johnston
38ed870ffe Improve capitalisation for all logged strings 
--HG--
extra : convert_revision : 997e53cec7a9efb7413ac6e17b6be60a5597bd2e
 2011-02-23 15:50:30 +00:00
Matt Johnston
bb0548b3b0 Make a copy of passwd fields since getpwnam()'s retval isn't safe to keep 
--HG--
extra : convert_revision : 295b11312e327fe6c4f33512674ea4a1a9790344
 2008-01-13 03:55:59 +00:00
Matt Johnston
f45eafe342 * fix longstanding bug with connections being closed on failure to 
connect to auth socket (server)
* differentiate between get_byte and get_bool
* get rid of some // comments
* general tidying

--HG--
extra : convert_revision : fb8d188ce33b6b45804a5ce51b9f601f83bdf3d7
 2005-03-13 13:58:14 +00:00
Matt Johnston
9d43183704 Log the IP along with auth success/fail attempts 
--HG--
extra : convert_revision : 25eab43bd46e931fd4afecec49c22b9311062099
 2004-12-23 17:00:15 +00:00
Matt Johnston
2575e227a5 Don't need to burn the payload buffer since process-packet.c does it 
--HG--
extra : convert_revision : 12619953d6d88a1b8b0afc4dd5f6e0e2f8b324a0
 2004-09-12 05:53:48 +00:00
Matt Johnston
8e1ec24f55 Merging in the changes from 0.41-0.43 main Dropbear tree 
--HG--
extra : convert_revision : 4c3428781bc8faf0fd7cadd7099fbd7f4ea386e7
 2004-08-12 16:41:58 +00:00
Matt Johnston
d7575f95f0 cleaning up the pubkey defines 
--HG--
extra : convert_revision : 149ce7a9a9cc5fe670994d6789b40be49895c595
 2004-08-12 14:56:22 +00:00
Matt Johnston
2a2fdc168c burn the buffer a bit earlier 
--HG--
extra : convert_revision : 1f069f6a8a2ecee6f2e22b51751b73982606accb
 2004-08-08 16:44:11 +00:00
Matt Johnston
418f3b4042 Be a bit safer with reentrant pw_name 
--HG--
extra : convert_revision : 6fa26817a93baeff5beb430be4e7e8127e1fd491
 2004-08-08 16:41:26 +00:00
Matt Johnston
a76b1ba068 Progressing client support 
--HG--
extra : convert_revision : 48946be1cef774d1c33b0f78689962b18720c627
 2004-07-27 16:30:46 +00:00
Matt Johnston
674a607488 Makefile.in contains updated files required 
--HG--
extra : convert_revision : cc8a8c49dc70e632c352853a39801089b08149be
 2004-06-01 02:46:09 +00:00