vishalmishra434 / rpms / openssh

Forked from rpms/openssh a month ago
Clone
cvsdist f28bf6
# Version of ssh-askpass
cvsdist 43f95f
%define aversion 1.2.0
cvsdist f28bf6
cvsdist f28bf6
# Do we want to disable building of x11-askpass? (1=yes 0=no)
cvsdist f28bf6
%define no_x11_askpass 0
cvsdist f28bf6
cvsdist f28bf6
# Do we want to disable building of gnome-askpass? (1=yes 0=no)
cvsdist f28bf6
%define no_gnome_askpass 0
cvsdist f28bf6
cvsdist 43f95f
# Reserve options to override askpass settings with:
cvsdist 43f95f
# rpm -ba|--rebuild --define 'skip_xxx 1'
cvsdist 43f95f
%{?skip_x11_askpass:%define no_x11_askpass 1}
cvsdist 43f95f
%{?skip_gnome_askpass:%define no_gnome_askpass 1}
cvsdist 43f95f
cvsdist 43f95f
# Is this a build for the rescue CD (without PAM)? (1=yes 0=no)
cvsdist 43f95f
%define rescue 0
cvsdist 43f95f
%{?build_rescue:%define rescue 1}
cvsdist 43f95f
cvsdist 43f95f
# Is this a build for 6.x or earlier?
cvsdist 43f95f
%define build6x 0
cvsdist 43f95f
%{?build_6x:%define build6x 1}
cvsdist 43f95f
cvsdist 43f95f
# If this is 6.x, the default configuration has sysconfdir in /usr/etc.
cvsdist 43f95f
%if %{build6x}
cvsdist 43f95f
%define _sysconfdir /etc
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist f71077
Summary: OpenSSH free Secure Shell (SSH) implementation
cvsdist f71077
Name: openssh
cvsdist 43f95f
Version: 2.5.2p2
cvsdist 4135ab
Release: 5
cvsdist f71077
URL: http://www.openssh.com/portable.html
cvsdist f71077
Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz
cvsdist f28bf6
%if ! %{no_x11_askpass}
cvsdist 43f95f
Source1: http://www.jmknoble.cx/software/x11-ssh-askpass/x11-ssh-askpass-%{aversion}.tar.gz
cvsdist f28bf6
%endif
cvsdist 328740
Source2: openssh.init
cvsdist 328740
Source3: gnome-ssh-askpass.sh
cvsdist 328740
Source4: gnome-ssh-askpass.csh
cvsdist 43f95f
Source5: openssh-closing.txt
cvsdist 4135ab
Patch0: openssh-2.5.2p1-redhat.patch
cvsdist 43f95f
Patch1: openssh-2.3.0p1-path.patch
cvsdist 43f95f
Patch2: openssh-2.5.1p1-crypt.patch
cvsdist 43f95f
Patch3: openssh-2.5.1p1-all.patch
cvsdist 43f95f
Patch4: openssh-2.5.2p2-setcred.patch
cvsdist 43f95f
Patch5: reinit.patch
cvsdist 43f95f
Patch6: aes-compat.diff
cvsdist 43f95f
Patch7: sftp-globfix.diff
cvsdist 4135ab
Patch8: openssh-2.5.2p2-manpages.patch
cvsdist f71077
Copyright: BSD
cvsdist f71077
Group: Applications/Internet
cvsdist 43f95f
BuildRoot: %{_tmppath}/%{name}-%{version}-buildroot
cvsdist f71077
Obsoletes: ssh
cvsdist 43f95f
PreReq: initscripts >= 5.20
cvsdist f28bf6
BuildPreReq: perl, openssl-devel, tcp_wrappers
cvsdist 43f95f
BuildPreReq: /bin/login, /usr/include/security/pam_appl.h
cvsdist f28bf6
%if ! %{no_x11_askpass}
cvsdist f28bf6
BuildPreReq: XFree86-devel
cvsdist f28bf6
%endif
cvsdist f28bf6
%if ! %{no_gnome_askpass}
cvsdist f28bf6
BuildPreReq: gnome-libs-devel
cvsdist f28bf6
%endif
cvsdist 4135ab
#Requires: openssl = %(openssl version | awk '{print $2}')
cvsdist f71077
cvsdist f71077
%package clients
cvsdist f71077
Summary: OpenSSH Secure Shell protocol clients
cvsdist 328740
Requires: openssh = %{version}-%{release}
cvsdist f71077
Group: Applications/Internet
cvsdist f71077
Obsoletes: ssh-clients
cvsdist 4135ab
#Requires: openssl = %(openssl version | awk '{print $2}')
cvsdist f71077
cvsdist f71077
%package server
cvsdist f71077
Summary: OpenSSH Secure Shell protocol server (sshd)
cvsdist f71077
Group: System Environment/Daemons
cvsdist f71077
Obsoletes: ssh-server
cvsdist 328740
PreReq: openssh = %{version}-%{release}, chkconfig >= 0.9
cvsdist 4135ab
#Requires: openssl = %(openssl version | awk '{print $2}')
cvsdist 43f95f
%if ! %{build6x}
cvsdist f71077
Requires: /etc/pam.d/system-auth
cvsdist 43f95f
%endif
cvsdist f71077
cvsdist f71077
%package askpass
cvsdist f71077
Summary: OpenSSH X11 passphrase dialog
cvsdist f71077
Group: Applications/Internet
cvsdist 328740
Requires: openssh = %{version}-%{release}
cvsdist f71077
Obsoletes: ssh-extras
cvsdist f71077
cvsdist f71077
%package askpass-gnome
cvsdist f71077
Summary: OpenSSH GNOME passphrase dialog
cvsdist f71077
Group: Applications/Internet
cvsdist 328740
Requires: openssh = %{version}-%{release}
cvsdist f71077
Obsoletes: ssh-extras
cvsdist f71077
cvsdist f71077
%description
cvsdist f71077
Ssh (Secure Shell) a program for logging into a remote machine and for
cvsdist f71077
executing commands in a remote machine.  It is intended to replace
cvsdist f71077
rlogin and rsh, and provide secure encrypted communications between
cvsdist f71077
two untrusted hosts over an insecure network.  X11 connections and
cvsdist f71077
arbitrary TCP/IP ports can also be forwarded over the secure channel.
cvsdist f71077
cvsdist f71077
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
cvsdist f71077
up to date in terms of security and features, as well as removing all 
cvsdist f71077
patented algorithms to separate libraries (OpenSSL).
cvsdist f71077
cvsdist f71077
This package includes the core files necessary for both the OpenSSH
cvsdist f71077
client and server.  To make this package useful, you should also
cvsdist f71077
install openssh-clients, openssh-server, or both.
cvsdist f71077
cvsdist f71077
%description clients
cvsdist f71077
Ssh (Secure Shell) a program for logging into a remote machine and for
cvsdist f71077
executing commands in a remote machine.  It is intended to replace
cvsdist f71077
rlogin and rsh, and provide secure encrypted communications between
cvsdist f71077
two untrusted hosts over an insecure network.  X11 connections and
cvsdist f71077
arbitrary TCP/IP ports can also be forwarded over the secure channel.
cvsdist f71077
cvsdist f71077
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
cvsdist f71077
up to date in terms of security and features, as well as removing all 
cvsdist f71077
patented algorithms to separate libraries (OpenSSL).
cvsdist f71077
cvsdist f71077
This package includes the clients necessary to make encrypted connections
cvsdist f71077
to SSH servers.
cvsdist f71077
cvsdist f71077
%description server
cvsdist f71077
Ssh (Secure Shell) a program for logging into a remote machine and for
cvsdist f71077
executing commands in a remote machine.  It is intended to replace
cvsdist f71077
rlogin and rsh, and provide secure encrypted communications between
cvsdist f71077
two untrusted hosts over an insecure network.  X11 connections and
cvsdist f71077
arbitrary TCP/IP ports can also be forwarded over the secure channel.
cvsdist f71077
cvsdist f71077
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
cvsdist f71077
up to date in terms of security and features, as well as removing all 
cvsdist f71077
patented algorithms to separate libraries (OpenSSL).
cvsdist f71077
cvsdist f71077
This package contains the secure shell daemon. The sshd is the server 
cvsdist f71077
part of the secure shell protocol and allows ssh clients to connect to 
cvsdist f71077
your host.
cvsdist f71077
cvsdist f71077
%description askpass
cvsdist f71077
Ssh (Secure Shell) a program for logging into a remote machine and for
cvsdist f71077
executing commands in a remote machine.  It is intended to replace
cvsdist f71077
rlogin and rsh, and provide secure encrypted communications between
cvsdist f71077
two untrusted hosts over an insecure network.  X11 connections and
cvsdist f71077
arbitrary TCP/IP ports can also be forwarded over the secure channel.
cvsdist f71077
cvsdist f71077
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
cvsdist f71077
up to date in terms of security and features, as well as removing all 
cvsdist f71077
patented algorithms to separate libraries (OpenSSL).
cvsdist f71077
cvsdist 43f95f
This package contains Jim Knoble's <jmknoble@jmknoble.cx> X11 passphrase 
cvsdist f71077
dialog.
cvsdist f71077
cvsdist f71077
%description askpass-gnome
cvsdist f71077
Ssh (Secure Shell) a program for logging into a remote machine and for
cvsdist f71077
executing commands in a remote machine.  It is intended to replace
cvsdist f71077
rlogin and rsh, and provide secure encrypted communications between
cvsdist f71077
two untrusted hosts over an insecure network.  X11 connections and
cvsdist f71077
arbitrary TCP/IP ports can also be forwarded over the secure channel.
cvsdist f71077
cvsdist f71077
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
cvsdist f71077
up to date in terms of security and features, as well as removing all 
cvsdist f71077
patented algorithms to separate libraries (OpenSSL).
cvsdist f71077
cvsdist f71077
This package contains the GNOME passphrase dialog.
cvsdist f71077
cvsdist 43f95f
%prep
cvsdist 43f95f
cvsdist 43f95f
%if ! %{no_x11_askpass}
cvsdist 43f95f
%setup -q -a 1
cvsdist 43f95f
%else
cvsdist 43f95f
%setup -q
cvsdist 43f95f
%endif
cvsdist 43f95f
%patch0 -p1 -b .redhat
cvsdist 43f95f
%patch1 -p1 -b .path
cvsdist 43f95f
%patch2 -p1 -b .crypt
cvsdist 43f95f
%patch3 -p1 -b .all
cvsdist 43f95f
%patch4 -p1 -b .setcred
cvsdist 43f95f
%patch5 -p0 -b .reinit
cvsdist 43f95f
%patch6 -p0 -b .aes-compat
cvsdist 43f95f
%patch7 -p0 -b .sftp-globfix
cvsdist 4135ab
%patch8 -p1 -b .manpages
cvsdist 43f95f
autoheader
cvsdist 43f95f
autoconf
cvsdist 43f95f
cvsdist 43f95f
%build
cvsdist 43f95f
%configure \
cvsdist 43f95f
	--sysconfdir=%{_sysconfdir}/ssh \
cvsdist 43f95f
	--libexecdir=%{_libexecdir}/openssh \
cvsdist 43f95f
	--with-tcp-wrappers \
cvsdist 43f95f
	--with-ipv4-default \
cvsdist 43f95f
	--with-rsh=/usr/bin/rsh \
cvsdist 43f95f
%if %{rescue}
cvsdist 43f95f
	--without-pam --with-md5-passwords
cvsdist 43f95f
%else
cvsdist 43f95f
	--with-pam
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist 43f95f
make
cvsdist 43f95f
cvsdist 43f95f
%if ! %{no_x11_askpass}
cvsdist 43f95f
pushd x11-ssh-askpass-%{aversion}
cvsdist 43f95f
xmkmf -a
cvsdist 43f95f
make
cvsdist 43f95f
popd
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist 43f95f
%if ! %{no_gnome_askpass}
cvsdist 43f95f
pushd contrib
cvsdist 43f95f
gcc $RPM_OPT_FLAGS `gnome-config --cflags gnome gnomeui` \
cvsdist 43f95f
        gnome-ssh-askpass.c -o gnome-ssh-askpass \
cvsdist 43f95f
        `gnome-config --libs gnome gnomeui`
cvsdist 43f95f
popd
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist 43f95f
%install
cvsdist 43f95f
rm -rf $RPM_BUILD_ROOT
cvsdist 43f95f
mkdir -p -m755 $RPM_BUILD_ROOT%{_sysconfdir}/ssh
cvsdist 43f95f
mkdir -p -m755 $RPM_BUILD_ROOT%{_libexecdir}/openssh
cvsdist 43f95f
make install DESTDIR=$RPM_BUILD_ROOT
cvsdist 43f95f
cvsdist 43f95f
install -d $RPM_BUILD_ROOT/etc/pam.d/
cvsdist 43f95f
install -d $RPM_BUILD_ROOT/etc/rc.d/init.d
cvsdist 43f95f
install -d $RPM_BUILD_ROOT%{_libexecdir}/openssh
cvsdist 43f95f
%if ! %{build6x}
cvsdist 43f95f
install -m644 contrib/redhat/sshd.pam-7.x $RPM_BUILD_ROOT/etc/pam.d/sshd
cvsdist 43f95f
%else
cvsdist 43f95f
install -m644 contrib/redhat/sshd.pam     $RPM_BUILD_ROOT/etc/pam.d/sshd
cvsdist 43f95f
%endif
cvsdist 43f95f
install -m755 $RPM_SOURCE_DIR/openssh.init $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd
cvsdist 43f95f
cvsdist 43f95f
%if ! %{no_x11_askpass}
cvsdist 43f95f
install -s x11-ssh-askpass-%{aversion}/x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/x11-ssh-askpass
cvsdist 43f95f
ln -s x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/ssh-askpass
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist 43f95f
%if ! %{no_gnome_askpass}
cvsdist 43f95f
install -s contrib/gnome-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/gnome-ssh-askpass
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist 43f95f
install -d $RPM_BUILD_ROOT%{_sysconfdir}/profile.d/
cvsdist 43f95f
install -m 755 %{SOURCE3} %{SOURCE4} $RPM_BUILD_ROOT%{_sysconfdir}/profile.d/
cvsdist 43f95f
cvsdist 43f95f
perl -pi -e "s|$RPM_BUILD_ROOT||g" $RPM_BUILD_ROOT%{_mandir}/man*/*
cvsdist 43f95f
cvsdist 43f95f
%clean
cvsdist 43f95f
rm -rf $RPM_BUILD_ROOT
cvsdist 43f95f
cvsdist 43f95f
%triggerun server -- ssh-server
cvsdist 43f95f
if [ "$1" != 0 -a -r /var/run/sshd.pid ] ; then
cvsdist 43f95f
	touch /var/run/sshd.restart
cvsdist 43f95f
fi
cvsdist 43f95f
cvsdist 43f95f
%triggerun server -- openssh-server < 2.5.0p1
cvsdist 43f95f
# Count the number of HostKey and HostDsaKey statements we have.
cvsdist 43f95f
gawk	'BEGIN {IGNORECASE=1}
cvsdist 43f95f
	 /^hostkey/ || /^hostdsakey/ {sawhostkey = sawhostkey + 1}
cvsdist 43f95f
	 END {exit sawhostkey}' /etc/ssh/sshd_config
cvsdist 43f95f
# And if we only found one, we know the client was relying on the old default
cvsdist 43f95f
# behavior, which loaded the the SSH2 DSA host key when HostDsaKey wasn't
cvsdist 43f95f
# specified.  Now that HostKey is used for both SSH1 and SSH2 keys, specifying
cvsdist 43f95f
# one nullifies the default, which would have loaded both.
cvsdist 43f95f
if [ $? -eq 1 ] ; then
cvsdist 43f95f
	echo HostKey /etc/ssh/ssh_host_rsa_key >> /etc/ssh/sshd_config
cvsdist 43f95f
	echo HostKey /etc/ssh/ssh_host_dsa_key >> /etc/ssh/sshd_config
cvsdist 43f95f
fi
cvsdist 43f95f
cvsdist 43f95f
%triggerpostun server -- ssh-server
cvsdist 43f95f
if [ "$1" != 0 ] ; then
cvsdist 43f95f
	/sbin/chkconfig --add sshd
cvsdist 43f95f
	if test -f /var/run/sshd.restart ; then
cvsdist 43f95f
		rm -f /var/run/sshd.restart
cvsdist 43f95f
		/sbin/service sshd start > /dev/null 2>&1 || :
cvsdist 43f95f
	fi
cvsdist 43f95f
fi
cvsdist 43f95f
cvsdist 43f95f
%post server
cvsdist 43f95f
/sbin/chkconfig --add sshd
cvsdist 43f95f
cvsdist 43f95f
%postun server
cvsdist 43f95f
/sbin/service sshd condrestart > /dev/null 2>&1 || :
cvsdist 43f95f
cvsdist 43f95f
%preun server
cvsdist 43f95f
if [ "$1" = 0 ]
cvsdist 43f95f
then
cvsdist 43f95f
	/sbin/service sshd stop > /dev/null 2>&1 || :
cvsdist 43f95f
	/sbin/chkconfig --del sshd
cvsdist 43f95f
fi
cvsdist 43f95f
cvsdist 43f95f
%files
cvsdist 43f95f
%defattr(-,root,root)
cvsdist 43f95f
%doc CREDITS ChangeLog INSTALL LICENCE OVERVIEW README* RFC* TODO WARNING*
cvsdist 43f95f
%attr(0755,root,root) %{_bindir}/scp
cvsdist 43f95f
%attr(0644,root,root) %{_mandir}/man1/scp.1*
cvsdist 43f95f
%attr(0755,root,root) %dir %{_sysconfdir}/ssh
cvsdist 43f95f
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/primes
cvsdist 43f95f
%if ! %{rescue}
cvsdist 43f95f
%attr(0755,root,root) %{_bindir}/ssh-keygen
cvsdist 43f95f
%attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1*
cvsdist 43f95f
%attr(0755,root,root) %dir %{_libexecdir}/openssh
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist 43f95f
%files clients
cvsdist 43f95f
%defattr(-,root,root)
cvsdist 43f95f
%attr(4755,root,root) %{_bindir}/ssh
cvsdist 43f95f
%attr(0644,root,root) %{_mandir}/man1/ssh.1*
cvsdist 43f95f
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ssh/ssh_config
cvsdist 43f95f
%attr(-,root,root) %{_bindir}/slogin
cvsdist 43f95f
%attr(-,root,root) %{_mandir}/man1/slogin.1*
cvsdist 43f95f
%if ! %{rescue}
cvsdist 43f95f
%attr(0755,root,root) %{_bindir}/ssh-agent
cvsdist 43f95f
%attr(0755,root,root) %{_bindir}/ssh-add
cvsdist 43f95f
%attr(0755,root,root) %{_bindir}/ssh-keyscan
cvsdist 43f95f
%attr(0755,root,root) %{_bindir}/sftp
cvsdist 43f95f
%attr(0644,root,root) %{_mandir}/man1/ssh-agent.1*
cvsdist 43f95f
%attr(0644,root,root) %{_mandir}/man1/ssh-add.1*
cvsdist 43f95f
%attr(0644,root,root) %{_mandir}/man1/ssh-keyscan.1*
cvsdist 43f95f
%attr(0644,root,root) %{_mandir}/man1/sftp.1*
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist 43f95f
%if ! %{rescue}
cvsdist 43f95f
%files server
cvsdist 43f95f
%defattr(-,root,root)
cvsdist 43f95f
%attr(0755,root,root) %{_sbindir}/sshd
cvsdist 43f95f
%attr(0755,root,root) %{_libexecdir}/openssh/sftp-server
cvsdist 43f95f
%attr(0644,root,root) %{_mandir}/man8/sshd.8*
cvsdist 43f95f
%attr(0644,root,root) %{_mandir}/man8/sftp-server.8*
cvsdist 43f95f
%attr(0755,root,root) %dir %{_sysconfdir}/ssh
cvsdist 43f95f
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/sshd_config
cvsdist 43f95f
%attr(0600,root,root) %config(noreplace) /etc/pam.d/sshd
cvsdist 43f95f
%attr(0755,root,root) %config /etc/rc.d/init.d/sshd
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist 43f95f
%if ! %{no_x11_askpass}
cvsdist 43f95f
%files askpass
cvsdist 43f95f
%defattr(-,root,root)
cvsdist 43f95f
%doc x11-ssh-askpass-%{aversion}/README
cvsdist 43f95f
%doc x11-ssh-askpass-%{aversion}/ChangeLog
cvsdist 43f95f
%doc x11-ssh-askpass-%{aversion}/SshAskpass*.ad
cvsdist 43f95f
%attr(0755,root,root) %{_libexecdir}/openssh/ssh-askpass
cvsdist 43f95f
%attr(0755,root,root) %{_libexecdir}/openssh/x11-ssh-askpass
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist 43f95f
%if ! %{no_gnome_askpass}
cvsdist 43f95f
%files askpass-gnome
cvsdist 43f95f
%defattr(-,root,root)
cvsdist 43f95f
%attr(0755,root,root) %{_sysconfdir}/profile.d/gnome-ssh-askpass.*
cvsdist 43f95f
%attr(0755,root,root) %{_libexecdir}/openssh/gnome-ssh-askpass
cvsdist 43f95f
%endif
cvsdist 43f95f
cvsdist f71077
%changelog
cvsdist 4135ab
* Sun Apr  8 2001 Preston Brown <pbrown@redhat.com>
cvsdist 4135ab
- remove explicit openssl requirement, fixes builddistro issue
cvsdist 4135ab
- make initscript stop() function wait until sshd really dead to avoid 
cvsdist 4135ab
  races in condrestart
cvsdist 43f95f
cvsdist 4135ab
* Mon Apr  2 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 4135ab
- mention that challengereponse supports PAM, so disabling password doesn't
cvsdist 4135ab
  limit users to pubkey and rsa auth (#34378)
cvsdist 4135ab
- bypass the daemon() function in the init script and call initlog directly
cvsdist 4135ab
- require the version of openssl we had when we were built
cvsdist 43f95f
cvsdist 43f95f
* Fri Mar 23 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- make do_pam_setcred() smart enough to know when to establish creds and
cvsdist 43f95f
  when to reinitialize them
cvsdist 43f95f
- add in a couple of other fixes from Damien for inclusion in the errata
cvsdist 43f95f
cvsdist 43f95f
* Thu Mar 22 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- update to 2.5.2p2
cvsdist 43f95f
- call setcred() again after initgroups, because the "creds" could actually
cvsdist 43f95f
  be group memberships
cvsdist 43f95f
cvsdist 43f95f
* Tue Mar 20 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
cvsdist 43f95f
- don't enable challenge-response by default until we find a way to not
cvsdist 43f95f
  have too many userauth requests (we may make up to six pubkey and up to
cvsdist 43f95f
  three password attempts as it is)
cvsdist 43f95f
- remove build dependency on rsh to match openssh.com's packages more closely
cvsdist 43f95f
cvsdist 43f95f
* Sat Mar  3 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- remove dependency on openssl -- would need to be too precise
cvsdist 43f95f
cvsdist 43f95f
* Fri Mar  2 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- rebuild in new environment
cvsdist 43f95f
cvsdist 43f95f
* Mon Feb 26 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Revert the patch to move pam_open_session.
cvsdist 43f95f
- Init script and spec file changes from Pekka Savola. (#28750)
cvsdist 43f95f
- Patch sftp to recognize '-o protocol' arguments. (#29540)
cvsdist 43f95f
cvsdist 43f95f
* Thu Feb 22 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Chuck the closing patch.
cvsdist 43f95f
- Add a trigger to add host keys for protocol 2 to the config file, now that
cvsdist 43f95f
  configuration file syntax requires us to specify it with HostKey if we
cvsdist 43f95f
  specify any other HostKey values, which we do.
cvsdist 43f95f
cvsdist 43f95f
* Tue Feb 20 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Redo patch to move pam_open_session after the server setuid()s to the user.
cvsdist 43f95f
- Rework the nopam patch to use be picked up by autoconf.
cvsdist 43f95f
cvsdist 43f95f
* Mon Feb 19 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Update for 2.5.1p1.
cvsdist 43f95f
- Add init script mods from Pekka Savola.
cvsdist 43f95f
- Tweak the init script to match the CVS contrib script more closely.
cvsdist 43f95f
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
cvsdist 43f95f
  adding id_rsa.
cvsdist 43f95f
cvsdist 43f95f
* Fri Feb 16 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Update for 2.5.0p1.
cvsdist 43f95f
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
cvsdist 43f95f
- Resync with parts of Damien Miller's openssh.spec from CVS, including
cvsdist 43f95f
  update of x11 askpass to 1.2.0.
cvsdist 43f95f
- Only require openssl (don't prereq) because we generate keys in the init
cvsdist 43f95f
  script now.
cvsdist 43f95f
cvsdist 43f95f
* Tue Feb 13 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Don't open a PAM session until we've forked and become the user (#25690).
cvsdist 43f95f
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
cvsdist 43f95f
  host the user is attempting a login from.
cvsdist 43f95f
- Resync with parts of Damien Miller's openssh.spec from CVS.
cvsdist 43f95f
- Don't expose KbdInt responses in debug messages (from CVS).
cvsdist 43f95f
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).
cvsdist 43f95f
cvsdist 4135ab
* Wed Feb  7 2001 Trond Eivind Glomsrxd <teg@redhat.com>
cvsdist 43f95f
- i18n-tweak to initscript.
cvsdist 43f95f
cvsdist 43f95f
* Tue Jan 23 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- More gettextizing.
cvsdist 43f95f
- Close all files after going into daemon mode (needs more testing).
cvsdist 43f95f
- Extract patch from CVS to handle auth banners (in the client).
cvsdist 43f95f
- Extract patch from CVS to handle compat weirdness.
cvsdist 43f95f
cvsdist 43f95f
* Fri Jan 19 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Finish with the gettextizing.
cvsdist 43f95f
cvsdist 43f95f
* Thu Jan 18 2001 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Fix a bug in auth2-pam.c (#23877)
cvsdist 43f95f
- Gettextize the init script.
cvsdist 43f95f
cvsdist 43f95f
* Wed Dec 20 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Incorporate a switch for using PAM configs for 6.x, just in case.
cvsdist 43f95f
cvsdist 43f95f
* Tue Dec  5 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Incorporate Bero's changes for a build specifically for rescue CDs.
cvsdist 43f95f
cvsdist 43f95f
* Wed Nov 29 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
cvsdist 43f95f
  succeeded, to allow public-key authentication after a failure with "none"
cvsdist 43f95f
  authentication.  (#21268)
cvsdist 43f95f
cvsdist 43f95f
* Tue Nov 28 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Update to x11-askpass 1.1.1. (#21301)
cvsdist 43f95f
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)
cvsdist 43f95f
cvsdist 43f95f
* Mon Nov 27 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Merge multiple PAM text messages into subsequent prompts when possible when
cvsdist 43f95f
  doing keyboard-interactive authentication.
cvsdist 43f95f
cvsdist 43f95f
* Sun Nov 26 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 43f95f
- Disable the built-in MD5 password support.  We're using PAM.
cvsdist 43f95f
- Take a crack at doing keyboard-interactive authentication with PAM, and
cvsdist 43f95f
  enable use of it in the default client configuration so that the client
cvsdist 43f95f
  will try it when the server disallows password authentication.
cvsdist 43f95f
- Build with debugging flags.  Build root policies strip all binaries anyway.
cvsdist 43f95f
cvsdist f28bf6
* Tue Nov 21 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f28bf6
- Use DESTDIR instead of %%makeinstall.
cvsdist f28bf6
- Remove /usr/X11R6/bin from the path-fixing patch.
cvsdist f28bf6
cvsdist f28bf6
* Mon Nov 20 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f28bf6
- Add the primes file from the latest snapshot to the main package (#20884).
cvsdist f28bf6
- Add the dev package to the prereq list (#19984).
cvsdist f28bf6
- Remove the default path and mimic login's behavior in the server itself.
cvsdist f28bf6
cvsdist f28bf6
* Fri Nov 17 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f28bf6
- Resync with conditional options in Damien Miller's .spec file for an errata.
cvsdist f28bf6
- Change libexecdir from %%{_libexecdir}/ssh to %%{_libexecdir}/openssh.
cvsdist f28bf6
cvsdist f28bf6
* Tue Nov  7 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f28bf6
- Update to OpenSSH 2.3.0p1.
cvsdist f28bf6
- Update to x11-askpass 1.1.0.
cvsdist f28bf6
- Enable keyboard-interactive authentication.
cvsdist f28bf6
cvsdist f28bf6
* Mon Oct 30 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f28bf6
- Update to ssh-askpass-x11 1.0.3.
cvsdist f28bf6
- Change authentication related messages to be private (#19966).
cvsdist f28bf6
cvsdist f28bf6
* Tue Oct 10 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f28bf6
- Patch ssh-keygen to be able to list signatures for DSA public key files
cvsdist f28bf6
  it generates.
cvsdist f28bf6
cvsdist 328740
* Thu Oct  5 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 328740
- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
cvsdist 328740
  build PAM authentication in.
cvsdist 328740
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
cvsdist 328740
- Clean out no-longer-used patches.
cvsdist 328740
- Patch ssh-add to try to add both identity and id_dsa, and to error only
cvsdist 328740
  when neither exists.
cvsdist 328740
cvsdist 328740
* Mon Oct  2 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 328740
- Update x11-askpass to 1.0.2. (#17835)
cvsdist 328740
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
cvsdist 328740
  always find them in the right place. (#17909)
cvsdist 328740
- Set the default path to be the same as the one supplied by /bin/login, but
cvsdist 328740
  add /usr/X11R6/bin. (#17909)
cvsdist 328740
- Try to handle obsoletion of ssh-server more cleanly.  Package names
cvsdist 328740
  are different, but init script name isn't. (#17865)
cvsdist 328740
cvsdist 328740
* Wed Sep  6 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 328740
- Update to 2.2.0p1. (#17835)
cvsdist 328740
- Tweak the init script to allow proper restarting. (#18023)
cvsdist 328740
cvsdist 328740
* Wed Aug 23 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist 328740
- Update to 20000823 snapshot.
cvsdist 328740
- Change subpackage requirements from %%{version} to %%{version}-%%{release}
cvsdist 328740
- Back out the pipe patch.
cvsdist 328740
cvsdist f71077
* Mon Jul 17 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Update to 2.1.1p4, which includes fixes for config file parsing problems.
cvsdist f71077
- Move the init script back.
cvsdist f71077
- Add Damien's quick fix for wackiness.
cvsdist f71077
cvsdist f71077
* Wed Jul 12 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().
cvsdist f71077
cvsdist f71077
* Thu Jul  6 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Move condrestart to server postun.
cvsdist f71077
- Move key generation to init script.
cvsdist f71077
- Actually use the right patch for moving the key generation to the init script.
cvsdist f71077
- Clean up the init script a bit.
cvsdist f71077
cvsdist f71077
* Wed Jul  5 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.
cvsdist f71077
cvsdist f71077
* Sun Jul  2 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Update to 2.1.1p2.
cvsdist f71077
- Use of strtok() considered harmful.
cvsdist f71077
cvsdist f71077
* Sat Jul  1 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Get the build root out of the man pages.
cvsdist f71077
cvsdist f71077
* Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Add and use condrestart support in the init script.
cvsdist f71077
- Add newer initscripts as a prereq.
cvsdist f71077
cvsdist f71077
* Tue Jun 27 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Build in new environment (release 2)
cvsdist f71077
- Move -clients subpackage to Applications/Internet group
cvsdist f71077
cvsdist f71077
* Fri Jun  9 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Update to 2.2.1p1
cvsdist f71077
cvsdist f71077
* Sat Jun  3 2000 Nalin Dahyabhai <nalin@redhat.com>
cvsdist f71077
- Patch to build with neither RSA nor RSAref.
cvsdist f71077
- Miscellaneous FHS-compliance tweaks.
cvsdist f71077
- Fix for possibly-compressed man pages.
cvsdist f71077
cvsdist f71077
* Wed Mar 15 2000 Damien Miller <djm@ibs.com.au>
cvsdist f71077
- Updated for new location
cvsdist f71077
- Updated for new gnome-ssh-askpass build
cvsdist f71077
cvsdist f71077
* Sun Dec 26 1999 Damien Miller <djm@mindrot.org>
cvsdist f71077
- Added Jim Knoble's <jmknoble@pobox.com> askpass
cvsdist f71077
cvsdist f71077
* Mon Nov 15 1999 Damien Miller <djm@mindrot.org>
cvsdist f71077
- Split subpackages further based on patch from jim knoble <jmknoble@pobox.com>
cvsdist f71077
cvsdist f71077
* Sat Nov 13 1999 Damien Miller <djm@mindrot.org>
cvsdist f71077
- Added 'Obsoletes' directives
cvsdist f71077
cvsdist f71077
* Tue Nov 09 1999 Damien Miller <djm@ibs.com.au>
cvsdist f71077
- Use make install
cvsdist f71077
- Subpackages
cvsdist f71077
cvsdist f71077
* Mon Nov 08 1999 Damien Miller <djm@ibs.com.au>
cvsdist f71077
- Added links for slogin
cvsdist f71077
- Fixed perms on manpages
cvsdist f71077
cvsdist f71077
* Sat Oct 30 1999 Damien Miller <djm@ibs.com.au>
cvsdist f71077
- Renamed init script
cvsdist f71077
cvsdist f71077
* Fri Oct 29 1999 Damien Miller <djm@ibs.com.au>
cvsdist f71077
- Back to old binary names
cvsdist f71077
cvsdist f71077
* Thu Oct 28 1999 Damien Miller <djm@ibs.com.au>
cvsdist f71077
- Use autoconf
cvsdist f71077
- New binary names
cvsdist f71077
cvsdist f71077
* Wed Oct 27 1999 Damien Miller <djm@ibs.com.au>
cvsdist f71077
- Initial RPMification, based on Jan "Yenya" Kasprzak's <kas@fi.muni.cz> spec.