head	1.8;
access;
symbols
	RELEASE_8_3_0:1.8
	RELEASE_9_0_0:1.8
	RELEASE_7_4_0:1.6
	RELEASE_8_2_0:1.6
	RELEASE_6_EOL:1.6
	RELEASE_8_1_0:1.6
	RELEASE_7_3_0:1.6
	RELEASE_8_0_0:1.6
	RELEASE_7_2_0:1.6
	RELEASE_7_1_0:1.5
	RELEASE_6_4_0:1.5
	RELEASE_5_EOL:1.5
	RELEASE_7_0_0:1.5
	RELEASE_6_3_0:1.5
	PRE_XORG_7:1.5
	RELEASE_4_EOL:1.5
	RELEASE_6_2_0:1.5
	RELEASE_6_1_0:1.4
	RELEASE_5_5_0:1.4
	RELEASE_6_0_0:1.4
	RELEASE_5_4_0:1.4
	RELEASE_4_11_0:1.4
	RELEASE_5_3_0:1.3
	RELEASE_4_10_0:1.3
	RELEASE_5_2_1:1.3
	RELEASE_5_2_0:1.3
	RELEASE_4_9_0:1.2
	RELEASE_5_1_0:1.2
	RELEASE_4_8_0:1.2
	RELEASE_5_0_0:1.2
	RELEASE_4_7_0:1.2;
locks; strict;
comment	@# @;


1.8
date	2011.10.21.16.18.56;	author flo;	state Exp;
branches;
next	1.7;

1.7
date	2011.07.13.21.47.05;	author stephen;	state Exp;
branches;
next	1.6;

1.6
date	2009.03.24.17.26.18;	author pav;	state Exp;
branches;
next	1.5;

1.5
date	2006.10.01.02.15.00;	author mnag;	state Exp;
branches;
next	1.4;

1.4
date	2004.10.12.04.42.53;	author dinoex;	state Exp;
branches;
next	1.3;

1.3
date	2003.09.26.18.13.52;	author dinoex;	state Exp;
branches;
next	1.2;

1.2
date	2002.07.04.18.29.18;	author dinoex;	state Exp;
branches;
next	1.1;

1.1
date	2002.06.28.05.28.07;	author dinoex;	state Exp;
branches;
next	;


desc
@@


1.8
log
@- update to 5.8p2 [1]
- fix Kerberos knob [2]
- fix build on 9.0 [3]
- fix deinstall with various knobs [4]
- fix LPK knob [5]

PR:		ports/161818 [1], ports/144597 [2], ports/160389 [3]
		ports/150493, ports/156926 [4], ports/155456 [5]

Submitted by:	"Grzegorz Blach" <magik@@roorback.net> [1], [2], [4], [5]
		pluknet [3]
Reported by:	Jonathan <lordsith49@@hotmail.com> [2]
		Kevin Thompson <antiduh@@csh.rit.edu> [4]
		Alexey Remizov <alexey@@remizov.org> [5]
@
text
@--- sshd_config.orig	2009-10-11 04:51:09.000000000 -0600
+++ sshd_config	2010-09-14 16:14:13.000000000 -0600
@@@@ -36,7 +36,7 @@@@
 # Authentication:
 
 #LoginGraceTime 2m
-#PermitRootLogin yes
+#PermitRootLogin no
 #StrictModes yes
 #MaxAuthTries 6
 #MaxSessions 10
@@@@ -55,11 +55,11 @@@@
 # Don't read the user's ~/.rhosts and ~/.shosts files
 #IgnoreRhosts yes
 
-# To disable tunneled clear text passwords, change to no here!
-#PasswordAuthentication yes
+# Change to yes to enable built-in password authentication.
+#PasswordAuthentication no
 #PermitEmptyPasswords no
 
-# Change to no to disable s/key passwords
+# Change to no to disable PAM authentication
 #ChallengeResponseAuthentication yes
 
 # Kerberos options
@@@@ -72,7 +72,7 @@@@
 #GSSAPIAuthentication no
 #GSSAPICleanupCredentials yes
 
-# Set this to 'yes' to enable PAM authentication, account processing, 
+# Set this to 'no' to disable PAM authentication, account processing,
 # and session processing. If this is enabled, PAM authentication will 
 # be allowed through the ChallengeResponseAuthentication and
 # PasswordAuthentication.  Depending on your PAM configuration,
@@@@ -81,12 +81,12 @@@@
 # If you just want the PAM account and session checks to run without
 # PAM authentication, then enable this but set PasswordAuthentication
 # and ChallengeResponseAuthentication to 'no'.
-#UsePAM no
+#UsePAM yes
 
 #AllowAgentForwarding yes
 #AllowTcpForwarding yes
 #GatewayPorts no
-#X11Forwarding no
+#X11Forwarding yes
 #X11DisplayOffset 10
 #X11UseLocalhost yes
 #PrintMotd yes
@


1.7
log
@- Add VersionAddendum support.
- Bump portrevision.

PR:		ports/142824
Submitted by:	Scot Hetzel <swhetzel@@gmail.com>
Approved by:	gabor (mentor)
@
text
@d1 3
a3 12
--- sshd_config.orig	2008-07-02 07:35:43.000000000 -0500
+++ sshd_config	2010-01-13 23:11:29.173548767 -0600
@@@@ -10,6 +10,8 @@@@
 # possible, but leave them commented.  Uncommented options change a
 # default value.
 
+#VersionAddendum FreeBSD-%%ADDENDUM%%
+
 #Port 22
 #AddressFamily any
 #ListenAddress 0.0.0.0
@@@@ -38,7 +40,7 @@@@
d12 1
a12 1
@@@@ -57,11 +59,11 @@@@
d27 1
a27 1
@@@@ -74,7 +76,7 @@@@
d36 1
a36 1
@@@@ -83,12 +85,12 @@@@
@


1.6
log
@- Update to 5.1p1

PR:		ports/128679
Submitted by:	Sunpoet Po-Chuan Hsieh <sunpoet@@sunpoet.net>
Approved by:	maintainer timeout (mnag; 4 months)
@
text
@d1 12
a12 3
--- sshd_config.orig	2008-07-02 20:35:43.000000000 +0800
+++ sshd_config	2008-11-07 23:40:56.957018978 +0800
@@@@ -38,7 +38,7 @@@@
d21 1
a21 1
@@@@ -57,11 +57,11 @@@@
d36 1
a36 1
@@@@ -74,7 +74,7 @@@@
d45 1
a45 1
@@@@ -83,12 +83,12 @@@@
@


1.5
log
@- Update to 4.4p1.
- Disable temporary HPN patch until HPN release new version.
- Fix rc.d script path in sshd.8
- Add FreeBSD-${PKGNAME} in SSH_VERSION and SSH_RELEASE like src does.
- Sync patches with src.

Security:	CVE-2006-4924, CVE-2006-5051
@
text
@d1 3
a3 3
--- sshd_config.orig	Mon Jul 24 01:06:47 2006
+++ sshd_config	Sat Sep 30 21:52:31 2006
@@@@ -34,7 +34,7 @@@@
d11 2
a12 2
 
@@@@ -52,11 +52,11 @@@@
d27 1
a27 1
@@@@ -69,7 +69,7 @@@@
d36 1
a36 1
@@@@ -78,11 +78,11 @@@@
d43 1
@


1.4
log
@- cleanup patches
(only context changed)
@
text
@d1 4
a4 3
--- sshd_config.orig	Mon May 24 02:36:24 2004
+++ sshd_config	Mon Sep 20 05:04:48 2004
@@@@ -34,6 +34,7 @@@@
d7 2
a8 2
 #PermitRootLogin yes
+PermitRootLogin no
d12 3
a14 1
@@@@ -57,6 +58,7 @@@@
d16 8
a23 1
 # Change to no to disable s/key passwords
a24 1
+ChallengeResponseAuthentication no
d27 23
a49 1
 #KerberosAuthentication no
@


1.3
log
@- update to 3.7.1p2
more regressions tests successfull
@
text
@d1 2
a2 2
--- sshd_config.orig	Tue Sep  2 14:51:18 2003
+++ sshd_config	Tue Sep 16 20:05:44 2003
d9 1
d11 1
a11 2
 #RSAAuthentication yes
@@@@ -56,6 +57,7 @@@@
@


1.2
log
@'PermitRootLogin no' is the new default for the OpenSSH port.
This now matches the PermitRootLogin configuration of OpenSSH in
the base system.  Please be aware of this when upgrading your
OpenSSH port, and if truly necessary, re-enable remote root login
by readjusting this option in your sshd_config.

Users are encouraged to create single-purpose users with ssh keys
and very narrowly defined sudo privileges instead of using root
for automated tasks.

- PKGNAMESUFFIX for GSSAPI set.
- Merged some patches from current to improve PAM.
- Fix BATCH=yes for bento.
@
text
@d1 2
a2 2
--- sshd_config.orig	Fri Jun 21 03:11:36 2002
+++ sshd_config	Wed Jul  3 06:20:47 2002
d5 1
a5 1
 #LoginGraceTime 600
d11 1
a11 1
@@@@ -58,6 +59,7 @@@@
@


1.1
log
@Defaults changed: (Gregory Sutter)
 ChallengeResponseAuthentication no
 UseLogin no

patch for configure, to detect MAP_ANON submitted by:
Christophe Labouisse,Michael Handler,Gert Doering,Phil Oleson,Dave Baker

fix missing includes for "canohost.h"
@
text
@d2 10
a11 2
+++ sshd_config	Fri Jun 28 06:55:46 2002
@@@@ -58,6 +58,7 @@@@
@

