Matt Johnston
1a4db21fe4
buf_getstring and buf_putstring now use non-unsigned char*
2015-06-04 23:08:50 +08:00
Matt Johnston
1fa1c3f9db
note about constant_time_strcmp and lengths
2015-06-03 22:15:12 +08:00
Matt Johnston
d1dec41f76
Constant time memcmp for the hmac and password crypt
2013-10-03 22:25:30 +08:00
Matt Johnston
57166b400c
Avoid segfault for locked accounts (invalid salt to crypt())
2013-04-29 23:42:37 +08:00
Paul Eggleton
1205fa68df
Allow configuring "allow blank password option" at runtime
...
Changes this from a compile-time switch to a command-line option.
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2013-02-12 15:52:57 +00:00
Matt Johnston
6b4105ffe6
Fix empty password immediate login
2012-05-09 22:51:59 +08:00
Matt Johnston
2713445e91
Return immediate success for blank passwords if allowed
2012-05-09 22:37:04 +08:00
Matt Johnston
29e68e9d79
- Add ALLOW_BLANK_PASSWORD option
...
- Don't reject blank-password logins via public key
--HG--
extra : convert_revision : 2d4bb3ecb013a7be47a7b470fc6b23e653a43dfb
2011-10-26 15:49:47 +00:00
Matt Johnston
38ed870ffe
Improve capitalisation for all logged strings
...
--HG--
extra : convert_revision : 997e53cec7a9efb7413ac6e17b6be60a5597bd2e
2011-02-23 15:50:30 +00:00
Matt Johnston
bb0548b3b0
Make a copy of passwd fields since getpwnam()'s retval isn't safe to keep
...
--HG--
extra : convert_revision : 295b11312e327fe6c4f33512674ea4a1a9790344
2008-01-13 03:55:59 +00:00
Matt Johnston
f45eafe342
* fix longstanding bug with connections being closed on failure to
...
connect to auth socket (server)
* differentiate between get_byte and get_bool
* get rid of some // comments
* general tidying
--HG--
extra : convert_revision : fb8d188ce33b6b45804a5ce51b9f601f83bdf3d7
2005-03-13 13:58:14 +00:00
Matt Johnston
9d43183704
Log the IP along with auth success/fail attempts
...
--HG--
extra : convert_revision : 25eab43bd46e931fd4afecec49c22b9311062099
2004-12-23 17:00:15 +00:00
Matt Johnston
2575e227a5
Don't need to burn the payload buffer since process-packet.c does it
...
--HG--
extra : convert_revision : 12619953d6d88a1b8b0afc4dd5f6e0e2f8b324a0
2004-09-12 05:53:48 +00:00
Matt Johnston
8e1ec24f55
Merging in the changes from 0.41-0.43 main Dropbear tree
...
--HG--
extra : convert_revision : 4c3428781bc8faf0fd7cadd7099fbd7f4ea386e7
2004-08-12 16:41:58 +00:00
Matt Johnston
d7575f95f0
cleaning up the pubkey defines
...
--HG--
extra : convert_revision : 149ce7a9a9cc5fe670994d6789b40be49895c595
2004-08-12 14:56:22 +00:00
Matt Johnston
2a2fdc168c
burn the buffer a bit earlier
...
--HG--
extra : convert_revision : 1f069f6a8a2ecee6f2e22b51751b73982606accb
2004-08-08 16:44:11 +00:00
Matt Johnston
418f3b4042
Be a bit safer with reentrant pw_name
...
--HG--
extra : convert_revision : 6fa26817a93baeff5beb430be4e7e8127e1fd491
2004-08-08 16:41:26 +00:00
Matt Johnston
a76b1ba068
Progressing client support
...
--HG--
extra : convert_revision : 48946be1cef774d1c33b0f78689962b18720c627
2004-07-27 16:30:46 +00:00
Matt Johnston
674a607488
Makefile.in contains updated files required
...
--HG--
extra : convert_revision : cc8a8c49dc70e632c352853a39801089b08149be
2004-06-01 02:46:09 +00:00