Changelog for openssh-clients-2.9p2-7.i386.rpm :
Fri Sep 7 00:00:00 2001 Nalin Dahyabhai 2.9p2-7
- fix scp\'s server\'s reporting of file sizes, and build with the proper
preprocessor define to get large-file capable open(), stat(), etc.
(sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone\'s mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)

Tue Aug 21 00:00:00 2001 Nalin Dahyabhai 2.9p2-6
- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)

Fri Aug 17 00:00:00 2001 Nalin Dahyabhai
- pull cvs patch to fix remote port forwarding with protocol 2

Fri Aug 10 00:00:00 2001 Nalin Dahyabhai
- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut of challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn\'t there, handy if you enable
it by default on a system that doesn\'t have X installed (#49263)

Thu Aug 9 00:00:00 2001 Nalin Dahyabhai
- don\'t apply patches to code we don\'t intend to build (spotted by Matt Galgoci)

Tue Aug 7 00:00:00 2001 Nalin Dahyabhai
- pass OPTIONS correctly to initlog (#50151)

Thu Jul 26 00:00:00 2001 Nalin Dahyabhai
- switch to x11-ssh-askpass 1.2.2

Thu Jul 12 00:00:00 2001 Nalin Dahyabhai
- rebuild in new environment

Tue Jun 26 00:00:00 2001 Nalin Dahyabhai
- disable the gssapi patch

Tue Jun 19 00:00:00 2001 Nalin Dahyabhai
- update to 2.9p2
- refresh to a new version of the gssapi patch

Fri Jun 8 00:00:00 2001 Nalin Dahyabhai
- change Copyright: BSD to License: BSD
- add Markus Friedl\'s unverified patch for the cookie file deletion problem
so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don\'t apply gssapi patches for the errata candidate
- clear supplemental groups list at startup

Sat May 26 00:00:00 2001 Nalin Dahyabhai
- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
dealing with comments right

Fri May 25 00:00:00 2001 Nalin Dahyabhai
- add in Simon Wilkinson\'s GSSAPI patch to give it some testing in-house,
to be removed before the next beta cycle because it\'s a big departure
from the upstream version

Fri May 4 00:00:00 2001 Nalin Dahyabhai
- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
at startup (change merged from openssh.com init script, originally by
Pekka Savola)
- refuse to do X11 forwarding if xauth isn\'t there, handy if you enable
it by default on a system that doesn\'t have X installed

Thu May 3 00:00:00 2001 Nalin Dahyabhai
- update to 2.9
- drop various patches that came from or went upstream or to or from CVS

Thu Apr 19 00:00:00 2001 Nalin Dahyabhai
- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)

Mon Apr 9 00:00:00 2001 Preston Brown
- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid
races in condrestart

Tue Apr 3 00:00:00 2001 Nalin Dahyabhai
- mention that challengereponse supports PAM, so disabling password doesn\'t
limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly
- require the version of openssl we had when we were built

Fri Mar 23 23:00:00 2001 Nalin Dahyabhai
- make do_pam_setcred() smart enough to know when to establish creds and
when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata

Thu Mar 22 23:00:00 2001 Nalin Dahyabhai
- update to 2.5.2p2
- call setcred() again after initgroups, because the \"creds\" could actually
be group memberships

Tue Mar 20 23:00:00 2001 Nalin Dahyabhai
- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don\'t enable challenge-response by default until we find a way to not
have too many userauth requests (we may make up to six pubkey and up to
three password attempts as it is)
- remove build dependency on rsh to match openssh.com\'s packages more closely

Sat Mar 3 23:00:00 2001 Nalin Dahyabhai
- remove dependency on openssl -- would need to be too precise

Fri Mar 2 23:00:00 2001 Nalin Dahyabhai
- rebuild in new environment

Mon Feb 26 23:00:00 2001 Nalin Dahyabhai
- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize \'-o protocol\' arguments. (#29540)

Thu Feb 22 23:00:00 2001 Nalin Dahyabhai
- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
configuration file syntax requires us to specify it with HostKey if we
specify any other HostKey values, which we do.

Tue Feb 20 23:00:00 2001 Nalin Dahyabhai
- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.

Mon Feb 19 23:00:00 2001 Nalin Dahyabhai
- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
adding id_rsa.

Fri Feb 16 23:00:00 2001 Nalin Dahyabhai
- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller\'s openssh.spec from CVS, including
update of x11 askpass to 1.2.0.
- Only require openssl (don\'t prereq) because we generate keys in the init
script now.

Tue Feb 13 23:00:00 2001 Nalin Dahyabhai
- Don\'t open a PAM session until we\'ve forked and become the user (#25690).
- Apply Andrew Bartlett\'s patch for letting pam_authenticate() know which
host the user is attempting a login from.
- Resync with parts of Damien Miller\'s openssh.spec from CVS.
- Don\'t expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).

Wed Feb 7 23:00:00 2001 Trond Eivind Glomsrxd
- i18n-tweak to initscript.

Tue Jan 23 23:00:00 2001 Nalin Dahyabhai
- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.

Fri Jan 19 23:00:00 2001 Nalin Dahyabhai
- Finish with the gettextizing.

Thu Jan 18 23:00:00 2001 Nalin Dahyabhai
- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.

Wed Dec 20 23:00:00 2000 Nalin Dahyabhai
- Incorporate a switch for using PAM configs for 6.x, just in case.

Tue Dec 5 23:00:00 2000 Nalin Dahyabhai
- Incorporate Bero\'s changes for a build specifically for rescue CDs.

Wed Nov 29 23:00:00 2000 Nalin Dahyabhai
- Don\'t treat pam_setcred() failure as fatal unless pam_authenticate() has
succeeded, to allow public-key authentication after a failure with \"none\"
authentication. (#21268)

Tue Nov 28 23:00:00 2000 Nalin Dahyabhai
- Update to x11-askpass 1.1.1. (#21301)
- Don\'t second-guess fixpaths, which causes paths to get fixed twice. (#21290)

Mon Nov 27 23:00:00 2000 Nalin Dahyabhai
- Merge multiple PAM text messages into subsequent prompts when possible when
doing keyboard-interactive authentication.

Sun Nov 26 23:00:00 2000 Nalin Dahyabhai
- Disable the built-in MD5 password support. We\'re using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
enable use of it in the default client configuration so that the client
will try it when the server disallows password authentication.
- Build with debugging flags. Build root policies strip all binaries anyway.

Tue Nov 21 23:00:00 2000 Nalin Dahyabhai
- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.

Mon Nov 20 23:00:00 2000 Nalin Dahyabhai
- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login\'s behavior in the server itself.

Fri Nov 17 23:00:00 2000 Nalin Dahyabhai
- Resync with conditional options in Damien Miller\'s .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.

Tue Nov 7 23:00:00 2000 Nalin Dahyabhai
- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.

Mon Oct 30 23:00:00 2000 Nalin Dahyabhai
- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).

Wed Oct 11 00:00:00 2000 Nalin Dahyabhai
- Patch ssh-keygen to be able to list signatures for DSA public key files
it generates.

Fri Oct 6 00:00:00 2000 Nalin Dahyabhai
- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
when neither exists.

Tue Oct 3 00:00:00 2000 Nalin Dahyabhai
- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly. Package names
are different, but init script name isn\'t. (#17865)

Thu Sep 7 00:00:00 2000 Nalin Dahyabhai
- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)

Thu Aug 24 00:00:00 2000 Nalin Dahyabhai
- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.

Tue Jul 18 00:00:00 2000 Nalin Dahyabhai
- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien\'s quick fix for wackiness.

Thu Jul 13 00:00:00 2000 Nalin Dahyabhai
- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().

Fri Jul 7 00:00:00 2000 Nalin Dahyabhai
- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.

Thu Jul 6 00:00:00 2000 Nalin Dahyabhai
- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.

Mon Jul 3 00:00:00 2000 Nalin Dahyabhai
- Update to 2.1.1p2.
- Use of strtok() considered harmful.

Sun Jul 2 00:00:00 2000 Nalin Dahyabhai
- Get the build root out of the man pages.

Fri Jun 30 00:00:00 2000 Nalin Dahyabhai
- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.

Wed Jun 28 00:00:00 2000 Nalin Dahyabhai
- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group

Sat Jun 10 00:00:00 2000 Nalin Dahyabhai
- Update to 2.2.1p1

Sun Jun 4 00:00:00 2000 Nalin Dahyabhai
- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.

Wed Mar 15 23:00:00 2000 Damien Miller
- Updated for new location
- Updated for new gnome-ssh-askpass build

Sun Dec 26 23:00:00 1999 Damien Miller
- Added Jim Knoble\'s askpass

Mon Nov 15 23:00:00 1999 Damien Miller
- Split subpackages further based on patch from jim knoble

Sat Nov 13 23:00:00 1999 Damien Miller
- Added \'Obsoletes\' directives

Tue Nov 9 23:00:00 1999 Damien Miller
- Use make install
- Subpackages

Mon Nov 8 23:00:00 1999 Damien Miller
- Added links for slogin
- Fixed perms on manpages

Sun Oct 31 00:00:00 1999 Damien Miller
- Renamed init script

Sat Oct 30 00:00:00 1999 Damien Miller
- Back to old binary names

Fri Oct 29 00:00:00 1999 Damien Miller
- Use autoconf
- New binary names

Thu Oct 28 00:00:00 1999 Damien Miller
- Initial RPMification, based on Jan \"Yenya\" Kasprzak\'s spec.