Subversion Repositories lsh

Compare Revisions

Ignore whitespace Rev 121 → Rev 119

/tags/2.1-3/debian/lsh-utils.docs
File deleted
/tags/2.1-3/debian/lsh-server.postinst
File deleted
/tags/2.1-3/debian/NEWS
File deleted
/tags/2.1-3/debian/lsh-server.postrm
File deleted
/tags/2.1-3/debian/lsh-utils.manpages
File deleted
/tags/2.1-3/debian/lsh-server.init.d
File deleted
/tags/2.1-3/debian/README.Debian
File deleted
/tags/2.1-3/debian/po/cs.po
File deleted
/tags/2.1-3/debian/po/fr.po
File deleted
/tags/2.1-3/debian/po/es.po
File deleted
/tags/2.1-3/debian/po/nl.po
File deleted
/tags/2.1-3/debian/po/pl.po
File deleted
/tags/2.1-3/debian/po/nn.po
File deleted
/tags/2.1-3/debian/po/it.po
File deleted
/tags/2.1-3/debian/po/sk.po
File deleted
/tags/2.1-3/debian/po/POTFILES.in
File deleted
/tags/2.1-3/debian/po/vi.po
File deleted
/tags/2.1-3/debian/po/templates.pot
File deleted
/tags/2.1-3/debian/po/pt.po
File deleted
/tags/2.1-3/debian/po/da.po
File deleted
/tags/2.1-3/debian/po/ru.po
File deleted
/tags/2.1-3/debian/po/sv.po
File deleted
/tags/2.1-3/debian/po/de.po
File deleted
/tags/2.1-3/debian/po/ja.po
File deleted
/tags/2.1-3/debian/lsh-doc.docs
File deleted
/tags/2.1-3/debian/control
File deleted
/tags/2.1-3/debian/lsh-doc.info
File deleted
/tags/2.1-3/debian/compat
File deleted
/tags/2.1-3/debian/lsh-doc.manpages
File deleted
/tags/2.1-3/debian/lsh-server.manpages
File deleted
/tags/2.1-3/debian/patches/rl_completion-segfault.patch
File deleted
/tags/2.1-3/debian/patches/sftp-server-mansection.patch
File deleted
Property changes:
Deleted: svn:executable
## -1 +0,0 ##
-*
\ No newline at end of property
Index: 2.1-3/debian/patches/new-readline-completion-function-typedef.patch
===================================================================
--- 2.1-3/debian/patches/new-readline-completion-function-typedef.patch (revision 121)
+++ 2.1-3/debian/patches/new-readline-completion-function-typedef.patch (nonexistent)
@@ -1,11 +0,0 @@
---- a/src/sftp/rl.c
-+++ b/src/sftp/rl.c
-@@ -116,7 +116,7 @@ void lsftp_rl_init()
- rl_basic_word_break_characters =" \n\t"; /* Only whitespace break words */
-
- RL_CHAR_IS_QUOTED = char_quoted;
-- rl_attempted_completion_function = (CPPFunction *)lsftp_rl_completion;
-+ rl_attempted_completion_function = (rl_completion_func_t *)lsftp_rl_completion;
-
-
- interactive = 1; /* Set the interactive flag in the main program */
Index: 2.1-3/debian/patches/blacklist.patch
===================================================================
--- 2.1-3/debian/patches/blacklist.patch (revision 121)
+++ 2.1-3/debian/patches/blacklist.patch (nonexistent)
@@ -1,382 +0,0 @@
-Author: Magnus Holmgren <holmgren@debian.org>
-Description: Check keys against openssh-blacklist
- Check keys before accepting for pubkey authentication as well as on conversion
- by lsh-writekey and lsh-decode-key.
- .
- blacklist.c code copied from the openssh package and adapted for LSH.
-
---- a/src/Makefile.am
-+++ b/src/Makefile.am
-@@ -69,7 +69,8 @@ liblsh_a_SOURCES = abstract_io.c abstrac
- unix_interact.c unix_process.c unix_random.c unix_user.c \
- userauth.c \
- werror.c write_buffer.c write_packet.c \
-- xalloc.c xauth.c zlib.c
-+ xalloc.c xauth.c zlib.c \
-+ blacklist.c
-
- liblsh_a_LIBADD = @LIBOBJS@
-
---- a/src/abstract_crypto.h
-+++ b/src/abstract_crypto.h
-@@ -162,7 +162,9 @@ MAC_DIGEST((instance), lsh_string_alloc(
- (public_key method (string))
-
- ; Returns (public-key (<pub-sig-alg-id> <s-expr>*))
-- (public_spki_key method (string) "int transport")))
-+ (public_spki_key method (string) "int transport")
-+
-+ (key_size method uint32_t)))
- */
-
- #define VERIFY(verifier, algorithm, length, data, slength, sdata) \
-@@ -170,7 +172,7 @@ MAC_DIGEST((instance), lsh_string_alloc(
-
- #define PUBLIC_KEY(verifier) ((verifier)->public_key((verifier)))
- #define PUBLIC_SPKI_KEY(verifier, t) ((verifier)->public_spki_key((verifier), (t)))
--
-+#define KEY_SIZE(verifier) ((verifier)->key_size((verifier)))
-
- /* GABA:
- (class
---- a/src/abstract_crypto.h.x
-+++ b/src/abstract_crypto.h.x
-@@ -161,6 +161,7 @@ struct verifier
- int (*(verify))(struct verifier *self,int algorithm,uint32_t length,const uint8_t *data,uint32_t signature_length,const uint8_t *signature_data);
- struct lsh_string *(*(public_key))(struct verifier *self);
- struct lsh_string *(*(public_spki_key))(struct verifier *self,int transport);
-+ uint32_t *(*(key_size))(struct verifier *self);
- };
- extern struct lsh_class verifier_class;
- #endif /* !GABA_DEFINE */
---- /dev/null
-+++ b/src/blacklist.c
-@@ -0,0 +1,152 @@
-+#if HAVE_CONFIG_H
-+#include "config.h"
-+#endif
-+
-+#include <assert.h>
-+
-+#include "atoms.h"
-+#include "format.h"
-+#include "lsh_string.h"
-+#include "werror.h"
-+#include "crypto.h"
-+
-+#include <sys/types.h>
-+#include <sys/stat.h>
-+#include <unistd.h>
-+#include <fcntl.h>
-+#include <string.h>
-+
-+int blacklisted_key(struct verifier *v, int method);
-+
-+/* Scan a blacklist of known-vulnerable keys in blacklist_file. */
-+static int
-+blacklisted_key_in_file(struct lsh_string *lsh_hash, struct lsh_string *blacklist_file)
-+{
-+ int fd = -1;
-+ const char *hash = 0;
-+ uint32_t line_len;
-+ struct stat st;
-+ char buf[256];
-+ off_t start, lower, upper;
-+ int ret = 0;
-+
-+ debug("Checking blacklist file %S\n", blacklist_file);
-+ fd = open(lsh_get_cstring(blacklist_file), O_RDONLY);
-+ if (fd < 0) {
-+ ret = -1;
-+ goto out;
-+ }
-+
-+ hash = lsh_get_cstring(lsh_hash) + 12;
-+ line_len = strlen(hash);
-+ if (line_len != 20)
-+ goto out;
-+
-+ /* Skip leading comments */
-+ start = 0;
-+ for (;;) {
-+ ssize_t r;
-+ char *newline;
-+
-+ r = read(fd, buf, sizeof(buf));
-+ if (r <= 0)
-+ goto out;
-+ if (buf[0] != '#')
-+ break;
-+
-+ newline = memchr(buf, '\n', sizeof(buf));
-+ if (!newline)
-+ goto out;
-+ start += newline + 1 - buf;
-+ if (lseek(fd, start, SEEK_SET) < 0)
-+ goto out;
-+ }
-+
-+ /* Initialise binary search record numbers */
-+ if (fstat(fd, &st) < 0)
-+ goto out;
-+ lower = 0;
-+ upper = (st.st_size - start) / (line_len + 1);
-+
-+ while (lower != upper) {
-+ off_t cur;
-+ int cmp;
-+
-+ cur = lower + (upper - lower) / 2;
-+
-+ /* Read this line and compare to digest; this is
-+ * overflow-safe since cur < max(off_t) / (line_len + 1) */
-+ if (lseek(fd, start + cur * (line_len + 1), SEEK_SET) < 0)
-+ break;
-+ if (read(fd, buf, line_len) != line_len)
-+ break;
-+ cmp = memcmp(buf, hash, line_len);
-+ if (cmp < 0) {
-+ if (cur == lower)
-+ break;
-+ lower = cur;
-+ } else if (cmp > 0) {
-+ if (cur == upper)
-+ break;
-+ upper = cur;
-+ } else {
-+ ret = 1;
-+ break;
-+ }
-+ }
-+
-+out:
-+ if (fd >= 0)
-+ close(fd);
-+ return ret;
-+}
-+
-+/*
-+ * Scan blacklists of known-vulnerable keys. If a vulnerable key is found,
-+ * its fingerprint is returned in *fp, unless fp is NULL.
-+ */
-+int
-+blacklisted_key(struct verifier *v, int method)
-+{
-+ const char *keytype;
-+ int ret = -1;
-+ const char *paths[] = { "/usr/share/ssh/blacklist", "/etc/ssh/blacklist", NULL };
-+ const char **pp;
-+ struct lsh_string *lsh_hash = ssh_format("%lfxS",
-+ hash_string(&crypto_md5_algorithm,
-+ PUBLIC_KEY(v), 1));
-+ uint32_t keysize = KEY_SIZE(v);
-+
-+ switch (method)
-+ {
-+ case ATOM_SSH_DSS:
-+ case ATOM_DSA:
-+ keytype = "DSA";
-+ break;
-+ case ATOM_SSH_RSA:
-+ case ATOM_RSA_PKCS1_SHA1:
-+ case ATOM_RSA_PKCS1_MD5:
-+ case ATOM_RSA_PKCS1:
-+ keytype = "RSA";
-+ break;
-+ default:
-+ werror("Unrecognized key type");
-+ return -1;
-+ }
-+
-+ for (pp = paths; *pp && ret <= 0; pp++) {
-+ struct lsh_string *blacklist_file = ssh_format("%lz.%lz-%di",
-+ *pp, keytype, keysize);
-+ int r = blacklisted_key_in_file(lsh_hash, blacklist_file);
-+ lsh_string_free(blacklist_file);
-+ if (r > ret) ret = r;
-+ }
-+
-+ if (ret > 0) {
-+ werror("Key is compromised: %z %i %fS\n", keytype, keysize,
-+ lsh_string_colonize(lsh_hash, 2, 0));
-+ } else if (ret < 0) {
-+ verbose("No blacklist for key type %z size %i", keytype, keysize);
-+ }
-+ return ret;
-+}
---- a/src/dsa.c
-+++ b/src/dsa.c
-@@ -187,6 +187,14 @@ do_dsa_public_spki_key(struct verifier *
- "y", self->key.y);
- }
-
-+static uint32_t
-+do_dsa_key_size(struct verifier *v)
-+{
-+ CAST(dsa_verifier, self, v);
-+
-+ return mpz_sizeinbase(self->key.p, 2);
-+}
-+
- static void
- init_dsa_verifier(struct dsa_verifier *self)
- {
-@@ -197,6 +205,7 @@ init_dsa_verifier(struct dsa_verifier *s
- self->super.verify = do_dsa_verify;
- self->super.public_spki_key = do_dsa_public_spki_key;
- self->super.public_key = do_dsa_public_key;
-+ self->super.key_size = do_dsa_key_size;
- }
-
-
---- a/src/lsh-decode-key.c
-+++ b/src/lsh-decode-key.c
-@@ -133,6 +133,10 @@ lsh_decode_key(struct lsh_string *conten
- werror("Invalid dsa key.\n");
- return NULL;
- }
-+ else if (blacklisted_key(v, type) > 0)
-+ {
-+ return NULL;
-+ }
- else
- return PUBLIC_SPKI_KEY(v, 1);
- }
-@@ -150,6 +154,10 @@ lsh_decode_key(struct lsh_string *conten
- werror("Invalid rsa key.\n");
- return NULL;
- }
-+ else if (blacklisted_key(v, type) > 0)
-+ {
-+ return NULL;
-+ }
- else
- return PUBLIC_SPKI_KEY(v, 1);
- }
---- a/src/lsh-writekey.c
-+++ b/src/lsh-writekey.c
-@@ -397,14 +397,18 @@ process_public(const struct lsh_string *
- {
- struct signer *s;
- struct verifier *v;
-+ int algorithm_name;
-
-- s = spki_make_signer(options->signature_algorithms, key, NULL);
-+ s = spki_make_signer(options->signature_algorithms, key, &algorithm_name);
-
- if (!s)
- return NULL;
-
- v = SIGNER_GET_VERIFIER(s);
- assert(v);
-+ if (blacklisted_key(v, algorithm_name) > 0) {
-+ return NULL;
-+ }
-
- return PUBLIC_SPKI_KEY(v, 1);
- }
-@@ -416,7 +420,8 @@ main(int argc, char **argv)
- int private_fd;
- int public_fd;
- struct lsh_string *input;
-- struct lsh_string *output;
-+ struct lsh_string *priv_output;
-+ struct lsh_string *pub_output;
- const struct exception *e;
-
- argp_parse(&main_argp, argc, argv, 0, NULL, options);
-@@ -439,16 +444,22 @@ main(int argc, char **argv)
- return EXIT_FAILURE;
- }
-
-- output = process_private(input, options);
-- if (!output)
-+ pub_output = process_public(input, options);
-+ if (!pub_output)
-+ return EXIT_FAILURE;
-+
-+ priv_output = process_private(input, options);
-+ if (!priv_output)
- return EXIT_FAILURE;
-
-+ lsh_string_free(input);
-+
- private_fd = open_file(options->private_file);
- if (private_fd < 0)
- return EXIT_FAILURE;
-
-- e = write_raw(private_fd, STRING_LD(output));
-- lsh_string_free(output);
-+ e = write_raw(private_fd, STRING_LD(priv_output));
-+ lsh_string_free(priv_output);
-
- if (e)
- {
-@@ -457,18 +468,12 @@ main(int argc, char **argv)
- return EXIT_FAILURE;
- }
-
-- output = process_public(input, options);
-- lsh_string_free(input);
--
-- if (!output)
-- return EXIT_FAILURE;
--
- public_fd = open_file(options->public_file);
- if (public_fd < 0)
- return EXIT_FAILURE;
-
-- e = write_raw(public_fd, STRING_LD(output));
-- lsh_string_free(output);
-+ e = write_raw(public_fd, STRING_LD(pub_output));
-+ lsh_string_free(pub_output);
-
- if (e)
- {
---- a/src/publickey_crypto.h
-+++ b/src/publickey_crypto.h
-@@ -203,5 +203,7 @@ parse_ssh_dss_public(struct simple_buffe
- struct verifier *
- make_ssh_dss_verifier(const struct lsh_string *public);
-
-+int
-+blacklisted_key(struct verifier *v, int method);
-
- #endif /* LSH_PUBLICKEY_CRYPTO_H_INCLUDED */
---- a/src/rsa.c
-+++ b/src/rsa.c
-@@ -167,6 +167,14 @@ do_rsa_public_spki_key(struct verifier *
- self->key.n, self->key.e);
- }
-
-+static uint32_t
-+do_rsa_key_size(struct verifier *v)
-+{
-+ CAST(rsa_verifier, self, v);
-+
-+ return mpz_sizeinbase(self->key.n, 2);
-+}
-+
-
- /* NOTE: To initialize an rsa verifier, one must
- *
-@@ -184,6 +192,7 @@ init_rsa_verifier(struct rsa_verifier *s
- self->super.verify = do_rsa_verify;
- self->super.public_key = do_rsa_public_key;
- self->super.public_spki_key = do_rsa_public_spki_key;
-+ self->super.key_size = do_rsa_key_size;
- }
-
- /* Alternative constructor using a key of type ssh-rsa, when the atom
---- a/src/server_authorization.c
-+++ b/src/server_authorization.c
-@@ -93,7 +93,8 @@ do_key_lookup(struct lookup_verifier *c,
- PUBLIC_SPKI_KEY(v, 0),
- 1));
-
-- if (USER_FILE_EXISTS(keyholder, filename, 1))
-+ if (USER_FILE_EXISTS(keyholder, filename, 1)
-+ && blacklisted_key(v, method) < 1)
- return v;
-
- return NULL;
/2.1-3/debian/patches/blacklist.patch
Property changes:
Deleted: svn:executable
## -1 +0,0 ##
-*
\ No newline at end of property
Index: 2.1-3/debian/patches/series
===================================================================
--- 2.1-3/debian/patches/series (revision 121)
+++ 2.1-3/debian/patches/series (nonexistent)
@@ -1,4 +0,0 @@
-sftp-server-mansection.patch
-blacklist.patch
-new-readline-completion-function-typedef.patch
-rl_completion-segfault.patch
Index: 2.1-3/debian/changelog
===================================================================
--- 2.1-3/debian/changelog (revision 121)
+++ 2.1-3/debian/changelog (nonexistent)
@@ -1,670 +0,0 @@
-lsh-utils (2.1-3) unstable; urgency=low
-
- * Add systemd unit file, which should behave similarly to the init
- script.
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 31 Aug 2014 20:14:18 +0200
-
-lsh-utils (2.1-2) unstable; urgency=low
-
- * new-readline-completion-function-typedef.patch: switch to new-style
- readline typedef for lsftp_rl_completion pointer cast (Closes:
- #741771).
- * Dutch Debconf translation update from Vincent Zweije and the
- debian-l10n-dutch team (Closes: #692831).
- * Override Lintian error concerning non-free IETF document
- doc/srp-spec.nroff. See debian/copyright for details.
- * rl_completion-segfault.patch (new): Avoid crashing when tab-completing
- an empty command line in lsftp.
- * lsh-doc: Drop dependency on dpkg (>= 1.15.4) | install-info (change in
- policy § 12.2).
- * With the above, raise Standards-Version to 3.9.5.
-
- -- Magnus Holmgren <holmgren@debian.org> Tue, 01 Apr 2014 22:30:06 +0200
-
-lsh-utils (2.1-1) unstable; urgency=low
-
- * New upstream release.
- * Upstream distribution no longer embeds old version of the Nettle
- library containing non-free RFC document; drop nonettle.patch.
- * Also drop better-errmsg-when-dotlsh-missing.patch, nettle-2.0.patch,
- nettle-2.1.patch, terminate-on-connection-failure.patch,
- ipv6-v6only.patch, and serpent-byteorder.patch, all incorporated
- upstream; and testsuite-mini-inetd-localhost.patch, made unneeded by
- new included version of mini-inetd.
- * Update and improve watch file, dropping dversionmangle option.
- * Bump Standards-Version to 3.9.4.
-
- -- Magnus Holmgren <holmgren@debian.org> Thu, 15 Aug 2013 22:12:15 +0200
-
-lsh-utils (2.0.4-dfsg-11) unstable; urgency=low
-
- * Review templates and package description by the debian-l10n-english team
- (Closes: #686212). Thanks to David Prévot for coordinating.
-
- [ Debconf translations ]
- * Portuguese, Rui Branco (Closes: #687146).
- * Russian, Yuri Kozlov (Closes: #687188).
- * Czech, Martin Šín (Closes: #687263).
- * Polish, Michał Kułach (Closes: #687549).
- * Italian, Beatrice Torracca (Closes: #687773).
- * French, David Prévot (Closes: #687810).
- * Danish, Joe Hansen (Closes: #687833).
- * German, Holger Wansing (Closes: #687979).
- * Japanese, Hideki Yamane.
- * Vietnamese, Nguyen Vu Hung (Closes: #688175).
- * Slovak, Slavko (Closes: #688193).
- * Swedish, Martin Bagge (edited slightly by me) (Closes: #688419).
- * Spanish, Javier Fernández-Sanguino (Closes: #688925).
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 30 Sep 2012 22:54:03 +0200
-
-lsh-utils (2.0.4-dfsg-10) unstable; urgency=low
-
- * Default to deleting host key on purge (Closes: #670433). It's only a
- host key, not significant amounts of user-generated data, so there's
- no good reason that a purge shouldn't delete it.
- * Correct misspelling of debconf key, which caused the host key never to
- be deleted.
- * Add Italian debconf localization. (Closes: #666425). Thanks to
- Beatrice Torracca and the Italian localization team.
- * Read settings from /etc/default/lsh-server in the config script
- (Closes: #620809) and add an EXTRA_ARGS variable that can be used to
- specify additional arguments to lshd (Closes: #592595).
- * Bump Standards-Version to 3.9.3.
-
- -- Magnus Holmgren <holmgren@debian.org> Sat, 30 Jun 2012 17:58:46 +0200
-
-lsh-utils (2.0.4-dfsg-9) unstable; urgency=low
-
- * serpent-byteorder.patch: Correct Serpent test case that depended on
- broken Serpent implementation in Nettle prior to 2.2 (Closes: #646653,
- I hope). Build-depend on nettle-dev >= 2.2 for the same reason.
- * Build-depend on libgmp-dev, which is now the real package, instead of
- libgmp10-dev.
- * Use dpkg-buildflags.
- * Bump Standards-Version to 3.9.2.
-
- -- Magnus Holmgren <holmgren@debian.org> Thu, 10 Nov 2011 23:19:52 +0100
-
-lsh-utils (2.0.4-dfsg-8) unstable; urgency=low
-
- * Change source format to 3.0 (quilt), renaming all patches
- from *.dpatch to *.patch and dropping the numbers.
- * While 30_nonettle.dpatch was a script that used sed to modify
- instances of Makefile.in, nonettle.patch patches Makefile.am files as
- well as configure.ac. dh-autoremake is used to call autoremake before
- configure and to restore the effects in the clean target. The
- src/nettle subdirectory still needs to be renamed to avoid its header
- files from being found; that is now done in debian/rules.
- * Switch from CDBS to a more old-style debian/rules to get better
- control over the build process.
- * Increase Debhelper compat level to 7.
- * blacklist.patch: Don't reject when blacklisted_key() returns -1,
- indicating no blacklist file for the key type and/or size in question
- exists.
- * nettle-2.1.patch (new): Build with Nettle 2.1.
- * Enable tests.
- testsuite-mini-inetd-localhost.patch (new): When told to bind to
- "localhost", mini-inetd, which is used in certain (optional) tests,
- seems to bind to 255.255.255.255, which is of course no good. Tell it
- to bind to 127.0.0.1 instead.
- * debian/lsh-doc.doc-base: Change section to the new `Network/Remote Access'.
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 20 Mar 2011 01:30:08 +0100
-
-lsh-utils (2.0.4-dfsg-7) unstable; urgency=low
-
- * terminate_on_connection_failure.dpatch (new): Make sure that lsh exits
- if it fails to connect to the remote host (Closes: #485812).
- * ipv6_v6only.dpatch (new): Set the IPV6_V6ONLY socket option on
- AF_INET6 sockets; since lshd by default enumerates available address
- families and calls bind() once for each, conflicts will occur
- otherwise.
- * lsh-server.postinst: If openssh-server is installed and lsh-server is
- configured to use port 22, shut down sshd in addition to disabling it
- (Closes: #567945).
- * lsh-server.postinst: Close fd 3 (opened by debconf) to avoid "Closed
- spurious fd" warnings.
- * debian/control: Declare Breaks instead of Conflicts for files moved
- between packages.
- * Upgraded to Standards-Version 3.9.1 with the preceding change.
- * debian/control (lsh-server): Drop old Conflicts: lsh-utils (<<
- 1.0.2-3).
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 01 Aug 2010 20:52:37 +0200
-
-lsh-utils (2.0.4-dfsg-6) unstable; urgency=low
-
- * Change libreadline build dependency to just libreadline-dev
- (Closes: #553804).
- * Add new debconf template translations:
- + Japanese from Hideki Yamane (Closes: #558082)
- + Spanish from Shukoh (Closes: #557008)
- Credit to the respective Debian translation teams.
- * Fix a spelling error in one of the debconf templates, run
- debconf-updatepo, clean out the old obsolete translation entries, and
- perform some trivial maintenance on the Nynorsk file.
-
- -- Magnus Holmgren <holmgren@debian.org> Sat, 28 Nov 2009 17:57:30 +0100
-
-lsh-utils (2.0.4-dfsg-5) unstable; urgency=low
-
- * lsh-server.init.d: Don't suppress start/stop messages when $VERBOSE =
- "no". /etc/init.d/skeleton is not a good example in this matter.
- * blacklist.dpatch: Check keys against openssh-blacklist before
- accepting for pubkey authentication as well as on conversion by
- lsh-writekey and lsh-decode-key.
- * lsh-server: Depend on openssh-blacklist, recommend -blacklist-extra.
- lsh-utils: Recommend openssh-blacklist and -blacklist-extra.
- * Move seed and key creation back to postinst and import RSA key from
- openssh-server if it exists (Closes: #211252).
- * debian/mans/lcp.1: Fix errors.
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 08 Nov 2009 20:18:17 +0100
-
-lsh-utils (2.0.4-dfsg-4) unstable; urgency=high
-
- * lsh-server.init.d: Fix critical exit status ($?) handling mistake
- (Closes: #545090).
-
- -- Magnus Holmgren <holmgren@debian.org> Sat, 05 Sep 2009 00:44:45 +0200
-
-lsh-utils (2.0.4-dfsg-3) unstable; urgency=low
-
- * lsh-doc: Depend on dpkg (>= 1.15.4) | install-info as recommended for
- the transition to triggerized install-info.
- * Add ${misc:Depends} to Depends in case Debhelper needs it in the
- future.
- * Increase Debhelper compat level to 5.
- * Build with Nettle 2.0 (nettle-dev) (Closes: #543131).
- * nettle_2.0.dpatch created to adapt to API changes.
- * 30_nonettle.dpatch modified to add -lhogweed to LDADD where
- appropriate.
- * Add ANNOUNCE to lsh-doc.
- * Rewrite lsh-server.init.d a bit:
- * Use LSB logging functions.
- * Let lshd daemonize and create/delete its pid file by itself.
- * Change the Provides: line in the LSB header to "lsh-server" and
- declare that it should start before the services that depend on an
- SSH server (Closes: #542689). Thanks to Petter Reinholdtsen.
- * Support the status action.
- * Drop the no longer useful lsh-server-config script.
- * Upgrade to Standards-Version 3.8.3:
- * Add README.source.
- * Drop obsolete manpages from debian/mans.
-
- -- Magnus Holmgren <holmgren@debian.org> Thu, 03 Sep 2009 00:55:45 +0200
-
-lsh-utils (2.0.4-dfsg-2) unstable; urgency=low
-
- * 40_better_errmsg_when_dotlsh_missing.dpatch (new): In unix_random.c,
- check whether the seed file exists before trying to lock it, and give
- the hint about running lsh-make-seed if it doesn't (Closes: #485856).
- * Update doc-base section of lsh-doc to match current structure.
- * Remove inactive maintainer as requested by the MIA team and put myself
- in charge (Closes: #487137).
- * Upgrade lsh-client's Recommends of lsh-utils to a Depends. It's not
- huge and lsh-client is almost useless without it in most cases
- (Closes: #481073).
- * Use --as-needed to avoid unnecessary dependencies.
-
- -- Magnus Holmgren <holmgren@debian.org> Wed, 25 Jun 2008 16:40:16 +0200
-
-lsh-utils (2.0.4-dfsg-1) unstable; urgency=low
-
- * New upstream release (Closes: #422199)
- - Repackaged without non-free RFC (src/nettle/testsuite/rfc1750.txt)
- (Closes: #408490).
- - Drop 01_fix_manpages.dpatch; incorporated upstream.
- - Fixes X11 forwarding bug.
- * New co-maintainer added.
- * Rename lsh-utils-doc as lsh-doc. We'll rename the source package after
- Sarge is gone.
- * Drop the tarball-in-tarball format and ship a "normal" .orig.tar.gz.
- - Drop 02_fix_perms.dpatch.
- - Add some extra cleanup in debian/rules.
- * Increase Standards-Version to 3.7.3. No changes needed.
- * Put some more docs in the packages: README and ChangeLog is now in all
- packages, AUTHORS in lsh-utils. Update debian/copyright to refer to
- /usr/share/doc/lsh-utils/AUTHORS (Closes: #421108).
- * debian/control: Use ${binary:Version} substitution variable instead of
- ${source-version}.
- * Review Build-depends: Drop patchutils, comerr-dev (redundant),
- po-debconf (redundant), xutils (makes no difference); add
- autotools-dev, scsh-0.6 (as alternative to guile-1.6).
- * Drop lshc, the deprecated alias for lsh (Closes: #417426).
- * 30_nonettle.dpatch: Link dynamically with libnettle-dev instead of
- statically with the bundled nettle (Closes: #412138).
- * Don't provide sexp-conv; let lsh-client depend on nettle-bin instead.
- * Move lsftp and lcp to lsh-client.
- * Put sftp-server in /usr/lib/lsh-server and put the manpage in section
- 8lsh instead of renaming it (new 20_sftp-server_mansection.dpatch).
- * Ship lsh.html in lsh-doc.
- * Add doc-base entry.
- * debian/control: Add Homepage field.
- * debian/watch: Update dversionmangle to strip -dfsg suffix.
-
- -- Magnus Holmgren <holmgren@debian.org> Thu, 01 May 2008 19:22:18 +0200
-
-lsh-utils (2.0.2-1.1) unstable; urgency=low
-
- * Non-maintainer upload to fix longstanding l10n issues
- * Debconf templates translations:
- - Swedish added. Closes: #351641
- - Portuguese added. Sent during the call for updates of the NMU campaign.
- * Lintian fixes:
- - Do not Build-depend on build-essential
- - Add a very basic LSB header to the init script
-
- -- Christian Perrier <bubulle@debian.org> Wed, 13 Dec 2006 22:02:11 +0100
-
-lsh-utils (2.0.2-1) unstable; urgency=low
-
- * New upstream release
- * The fd leak in the server is known as CVE-2006-0353
- * Support for aes256-ctr.
- * Newer nettle library.
- * Fix for some more fd leaks, but none in the debian default
- configuration.
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Sat, 28 Jan 2006 05:42:16 +0100
-
-lsh-utils (2.0.1cdbs-4) unstable; urgency=high
-
- * Remove silly debconf questions and correct others. (Closes: Bug#337026)
- * Switch to dpatch.
- * Make lsh-utils build on a grsecurity system.
- * Remove /var/spool/lsh upon purge.
- * Update Vietnamese debconf translation.
- * Update German debconf translation.
- * Update Danish debconf translation.
- * Update Czech debconf translation.
- * Update Dutch debconf translation.
- * Update Russian debconf translation. (Closes: Bug#349180)
- * Update French debconf translation. (Closes: Bug#348822)
- * Have lsh-server provide ssh-server. (Closes: Bug#348844)
- * Update the watch file format version to the latest (3).
- * Have uscan remove the "cdbs" version extension.
- * Fix fd leak in the lsh-server.
- This is to be security related, so upload it with a high urgency.
- (Closes: Bug#349303)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Sun, 22 Jan 2006 06:30:43 +0100
-
-lsh-utils (2.0.1cdbs-3) unstable; urgency=low
-
- * The 2.0 release removed the "pesky" identity file error.
- (Closes: Bug#214167)
- * Update Danish debconf translation.
- * Update Vietnamese debconf translation.
- * Update French debconf translation. (Closes: Bug#347543)
- * Update Russian debconf translation. (Closes: Bug#348138)
- * Do not regenerate debian/rules. (Closes: Bug#347891)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Sun, 15 Jan 2006 21:02:36 +0100
-
-lsh-utils (2.0.1cdbs-2) unstable; urgency=low
-
- * No longer build-depend on xlibs-dev, use libxau-dev instead.
- (Closes: Bug#347143)
- * Depend on comerr-dev too, otherwise kerberos support would be broken.
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Thu, 12 Jan 2006 19:34:23 +0100
-
-lsh-utils (2.0.1cdbs-1) unstable; urgency=low
-
- * Change the build system to cdbs.
- (And hopefully don't introduce any new bugs.)
- * Make lintian happy with the odieresis in the manpages.
- * Fix debian/control, so it can be autogenerated by cdbs.
- * Conflict lsh, and rename lshc to lsh.
- * Include a small shell script to notify users.
- * Make stop act the same way graceful-stop was doing already.
- This helps not to accidently kill your own lsh connection.
- * Update debconf po files.
- * Update the German debconf translation.
- * Remove the SSH1 notice from lsh-server's package description.
- * Make the lsh-server package suggest lsh-client or openssh-client.
- * Add a small note on how to use the lsh client. (Closes: Bug#109899)
- * No longer FTBFS because of wrong debian/rules. (Closes: Bug#344747)
- * Update Czech translation. (Closes: Bug#345141)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Mon, 9 Jan 2006 00:36:44 +0100
-
-lsh-utils (2.0.1-5) unstable; urgency=low
-
- * Make lsh-utils depend on lsh-client. (Closes: Bug#338014)
- * Fix lshg to look for lshc instead of lsh. (Closes: Bug#320554)
- * Fix lcp to look for lshc instead of lsh. (Closes: Bug#338015)
- * Add lcp manpage. (Closes: Bug#338017)
- * Clarify package description. lsh should be considered stable now.
- (Closes: Bug#211317)
- * Update Russian debconf translation. (Closes: Bug#338170)
- * Update French debconf translation. (Closes: Bug#338104)
- * Update Danish debconf translation. (Closes: Bug#337017)
- * Change guile1.4-slib to guile-1.6 since slib.scm is included
- with guile-1.6-libs, and we need the scheme interpreter.
- * Add myself to the uploaders list.
- * Approve NMUs.
- (Closes: Bug#300496,Bug#318211,Bug#326328,Bug#326329,Bug#332012)
- (Closes: Bug#271911,Bug#312617,Bug#313975,Bug#304697,Bug#319933)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Thu, 10 Nov 2005 21:36:44 +0100
-
-lsh-utils (2.0.1-4.2) unstable; urgency=low
-
- * NMU.
- * Make sftp support availible via debconf. (Closes: Bug#304697)
- * Rebuild against libreadline5 and change build-deps.
- (Closes: Bug#326328,Bug#326329)
- * Rebuild with fixed debconf deps. (Closes: Bug#332012)
- * Update FSF address in debian/copyright.
- * Add czech po file. (Closes: Bug#319933)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Mon, 31 Oct 2005 14:21:54 +0100
-
-lsh-utils (2.0.1-4.1) unstable; urgency=low
-
- * NMU.
- * Trigger a rebuild to build against libgmp3c2. (Closes: Bug#318211)
- * Make lsh-server suggest openssh-client or ssh.
- * Fix Package description (Closes: Bug#271911)
- * Add vietnamese debconf localization. (Closes: Bug#312617)
- * Update german debconf localization. (Closes: Bug#313975)
- * Rebuild fixes lshc host-acls (Closes: Bug#300496)
- * Bump standards-version, no changes needed. (make lintian happy)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Sun, 14 Aug 2005 17:04:55 +0200
-
-lsh-utils (2.0.1-4) unstable; urgency=high
-
- * Trigger a rebuild, because the i386 package wasn't built properly.
- (Closes: Bug#309365)
-
- -- Simon Law <sfllaw@debian.org> Mon, 16 May 2005 16:54:00 -0400
-
-lsh-utils (2.0.1-3) unstable; urgency=high
-
- * Remove the unnecessary nettle-lfib-stream program. (Closes: Bug#308233)
-
- -- Simon Law <sfllaw@debian.org> Mon, 9 May 2005 19:25:56 -0400
-
-lsh-utils (2.0.1-2.1) unstable; urgency=high
-
- * NMU
- * Remove --nist-level option to lsh-keygen since it has changed to using RSA
- keys now and the old --nist-level setting breaks it. Closes: #301968
- * High urgency upload since 2.0.1 is needed in testing due to the security
- fix.
-
- -- Joey Hess <joeyh@debian.org> Sat, 9 Apr 2005 15:02:22 -0400
-
-lsh-utils (2.0.1-2) unstable; urgency=high
-
- * Fix up path resolution problems. (Closes: Bug#301039)
- Thanks to Stefan Pfetzing <dreamind@dreamind.de>
- * Added a build-depends on m4. (Closes: Bug#300874)
- * Denial of service attack is now known as CAN-2005-0814.
-
- -- Simon Law <sfllaw@debian.org> Sat, 26 Mar 2005 13:29:27 -0500
-
-lsh-utils (2.0.1-1) unstable; urgency=high
-
- * New upstream release
- - Fix denial of service attack documented in CAN-2005-0389
-
- -- Simon Law <sfllaw@debian.org> Fri, 18 Mar 2005 17:24:10 -0500
-
-lsh-utils (2.0-1) unstable; urgency=high
-
- * New upstream release.
- * Remove extraneous symlinks. (Closes: Bug#291010)
- * Acknowledge NMUs. (Closes: Bug#293020, Bug#255643)
-
- -- Simon Law <sfllaw@debian.org> Thu, 17 Mar 2005 18:51:12 -0500
-
-lsh-utils (1.4.2-8.2) unstable; urgency=low
-
- * Non-maintainer upload with maintainer"s agreement
- * Fix FTBFS with gcc-4.0 for amd64 builds
- Thanks to Andreas Jochens for providing the patch
- Closes: #293020
-
- -- Christian Perrier <bubulle@debian.org> Tue, 1 Feb 2005 07:10:17 +0100
-
-lsh-utils (1.4.2-8.1) unstable; urgency=low
-
- * Non-maintainer upload with maintainer's agreement
- for fixing longstanding l10n issues
- * Translations:
- - French added. Closes: #255643
- - Danish added. Thanks to Claus Hindsgaul
- - Russian added. Thanks to Yuri Kozlov
- - Norwegian Nynorsk added. Thanks to Håvard Korsvoll
- - Dutch added. Thanks to Luk Claes.
- * Typo fixes in templates (translations unfuzzied):
- - s/woul dlike/would like
- - s/ifyou/if you
-
- -- Christian Perrier <bubulle@debian.org> Thu, 13 Jan 2005 23:29:09 +0100
-
-lsh-utils (1.4.2-8) unstable; urgency=medium
-
- * Register sexp-conv with the alternatives system so that it doesn't
- conflict with the binary of the same name (and function) shipped with
- nettle-bin (Closes: Bug#274772)
- - This kludge brought to you by Marek Habersack <grendel@debian.org>.
-
- -- Simon Law <sfllaw@debian.org> Sun, 5 Dec 2004 15:15:59 -0500
-
-lsh-utils (1.4.2-7) unstable; urgency=low
-
- * New maintainer.
- * Fix build problem. (Closes: Bug#242040)
- * Use gettext-based Debconf templates. Thanks to Martin Quinson.
- (Closes: Bug#239870)
- * Upgraded to Policy 3.6.1.
- * Upgraded to Debhelper 4.
-
- -- Simon Law <sfllaw@debian.org> Wed, 2 Jun 2004 17:56:39 -0400
-
-lsh-utils (1.4.2-6) unstable; urgency=HIGH
-
- * Applied patch to fix root security hole (closes: #211662)
- * Build kerberos support against heimdal rather than krb (closes: #199067)
-
- -- Timshel Knoll <timshel@debian.org> Sat, 20 Sep 2003 11:42:27 +1000
-
-lsh-utils (1.4.2-5) unstable; urgency=low
-
- * debian/control: Removed alternative of scsh in place of guile1.4-slib from
- Build-Depends, we really need the latter to build lsh. (closes: #192771)
-
- -- Timshel Knoll <timshel@debian.org> Sun, 8 Jun 2003 17:44:58 +1000
-
-lsh-utils (1.4.2-4) unstable; urgency=low
-
- * Just Build-Depend on liboop-dev, not liboop4-dev | liboop-dev (there is
- no liboop4-dev, whoops!) (closes: #192172)
- * lsh-server: Added lintian override for missing-debconf-dependency
- (lsh-server falls back to asking the user if debconf isn't installed)
-
- -- Timshel Knoll <timshel@debian.org> Thu, 8 May 2003 02:24:52 +1000
-
-lsh-utils (1.4.2-3) unstable; urgency=low
-
- * debian/control: Priority: extra; lsh-utils-doc changed to Section: doc
- * Policy 3.5.9
- * Re-compile against liboop4
-
- -- Timshel Knoll <timshel@debian.org> Wed, 30 Apr 2003 23:08:41 +1000
-
-lsh-utils (1.4.2-2) unstable; urgency=low
-
- * debian/control: Build-Depend on xutils (closes: #160666)
- * Rename sftp-server to sftp-server.lsh to work around name conflict with
- ssh's sftp-server. (closes: #160611) Maybe this should eventually be
- handled with alternatives?
-
- -- Timshel Knoll <timshel@debian.org> Fri, 13 Sep 2002 11:14:43 +1000
-
-lsh-utils (1.4.2-1) unstable; urgency=low
-
- * New upstream release, a number of new programs come in this release
- * debian/control: Added lots of new Build-Depends: for 1.4.x series:
- + liboop-dev required for main lsh servers
- + xlibs-dev the lshc client now supports X11 forwarding and hence
- links with libXau: yay!
- + libkrb5-dev for the lsh-krb-checkpw password helper program. This is
- still not working however, see README.Debian for details,
- but I've left the Build-Dep here in stubborn hope :-)
- + libwrap-dev For lots of the lsh programs to use the TCP wrappers
- + libpam-dev Required for the lsh-pam-checkpw password helper program
- + libreadline-dev Required for lsftp's the interactive mode
- * debian/lsh-server.{config,templates,postrm}: ask whether to remove
- host keys when lsh-server is purged, all versions of lshd from now on
- should not disconnect users when the server is restarted - very useful
- when lsh'd into a box doing an "apt-get install lsh-server" !!! :-)
- * debian/lsh-server.config: modularised. Now uses a function
- for each debconf question, and has an array of function references.
- Check it out :-)
- * debian/mans/<lots-of-stuff>:
- Added manpages for new programs, updated some existing manpages
- * lshd now needs a random seed file, which needs to be generated before lshd
- can be run. Unfortunately, this operation requires user input, so this
- can't really be done in the postinst (problems with debconf etc.). This
- also means that the host key can't be generated in the postinst, since
- lsh-keygen and lsh-writekey both need the random seed to exist.
- * debian/lsh-server.init.d: generate the host key here if the random seed
- exists, fail if it doesn't.
-
- -- Timshel Knoll <timshel@debian.org> Wed, 11 Sep 2002 12:42:56 +1000
-
-lsh-utils (1.2.5-3) unstable; urgency=low
-
- * debian/control:
- - Updated description to remove "export from US is illegal" information
- - Removed France from the list of countries where crypto may be illegal
- * debian/mans/{srp-gen.1,sexp-conv.1}: manpage neatened / errors fixed
- * debian/scripts/lsh-server-config, debian/lsh-server.postrm:
- Also create / remove /etc/ssh/sshd_not_to_be_run at appropriate times to
- prevent sshd from being run, not just /etc/ssh/NOSERVER
- * debian/lsh-server.init.d: fixed issues with ssh1 fallback, it didn't work
- before (typo in variable names)
-
- -- Timshel Knoll <timshel@debian.org> Mon, 15 Apr 2002 22:41:58 +1000
-
-lsh-utils (1.2.5-2) unstable; urgency=low
-
- * Packages moved into main from non-US, yay! Now Section: net
- * Fixed &>/dev/null bash-ism redirects in upstream's lsh-authorize
- replaced with >/dev/null 2>&1
- * debian/control: fixed misspelling in -doc package description
- (closes: #125097)
- * src/lsh.c: changed "lsh" references to "lshc" (closes: #109898)
-
- -- Timshel Knoll <timshel@debian.org> Wed, 27 Mar 2002 01:07:34 +1100
-
-lsh-utils (1.2.5-1) unstable; urgency=low
-
- * New upstream release
- * Added German debconf translation (thanks to Sebastian Feltel)
- (closes: #114339)
- * debian/copyright: fixed misspelling, common-licences -> common-licenses
-
- -- Timshel Knoll <timshel@debian.org> Tue, 30 Oct 2001 15:44:43 +1100
-
-lsh-utils (1.2.3-1) unstable; urgency=low
-
- * New upstream release
- * debian/control: Don't Build-Depend on libgmp2-dev (closes: #104285)
-
- -- Timshel Knoll <timshel@debian.org> Thu, 12 Jul 2001 11:26:47 +1000
-
-lsh-utils (1.2.2-2) unstable; urgency=low
-
- * Applied Niel's IPv6 patch, to get lshd working on systems without IPv6
- (closes: Bug#97623)
-
- -- Timshel Knoll <timshel@debian.org> Wed, 23 May 2001 09:38:03 +1000
-
-lsh-utils (1.2.2-1) unstable; urgency=low
-
- * New upstream release
-
- -- Timshel Knoll <timshel@debian.org> Sat, 12 May 2001 23:58:20 +1000
-
-lsh-utils (1.2.1-1) unstable; urgency=low
-
- * New upstream release
-
- -- Timshel Knoll <timshel@debian.org> Sat, 21 Apr 2001 21:52:01 +1000
-
-lsh-utils (1.2-1) unstable; urgency=low
-
- * New upstream release
- * Fixes do debian/installmans.pl's manpage section regex and sanity
- checking
- * Added manpage for new binary lshg (in lsh-client package), did
- some updates for the lshc binary as options have been added.
- * Heaps of packaging fixes/updates.
-
- -- Timshel Knoll <timshel@debian.org> Thu, 12 Apr 2001 13:02:27 +1000
-
-lsh-utils (1.0.2-3) unstable; urgency=low
-
- * debian/control: Split into 4 packages, lsh-utils, lsh-client,
- lsh-server and lsh-utils-doc, Standards-Version: 3.5.2,
- Build-Depends: zlib1g-dev -> libz-dev, added guile1.4-slib | scsh
- * Pulled original upstream configure script back in and modified that
- rather than re-generating with autoconf, which made for a huge .diff.gz.
- * lsh-server package debconf-ized, lsh-server-config script added
- to configure lshd.
- * debian/rules: Added support for DEB_BUILD_OPTIONS=nostrip,debug
-
- -- Timshel Knoll <timshel@debian.org> Mon, 9 Apr 2001 23:59:47 -0700
-
-lsh-utils (1.0.2-2) unstable; urgency=low
-
- * Changed order of ./configure checks for gmp.h and gmp2/gmp.h to fix
- compile failure - this now checks for gmp2/gmp.h first and thus fixes
- the problem. This compile is against libgmp3.
- * debian/installmans.pl: perl Debian::Debhelper program to install manpages
- properly - this replaces the dh_installmanpages call in debian/rules
- which will mean that manpages are installed under their correct names.
- (ie. lsh.1 will be installed as lshc.1) (closes: Bug#88197).
- * debian/control: Standards-Version: 3.1.1, Build-Depends: added
- (including texinfo and libgmp2-dev | libgmp3-dev
- - (closes: Bug#79645, Bug#84532)).
- * debian/rules: Removed call to obsolete dh_suidregister.
- * debian/init.d: changed default port of lshd from 2223 to 2222 (it should
- have been this from the start, since ssh runs on port 22 _not_ 23). :-)
-
- -- Timshel Knoll <timshel@debian.org> Tue, 13 Mar 2001 09:54:33 +1100
-
-lsh-utils (1.0.2-1) unstable; urgency=low
-
- * New upstream release (closes: Bug#75042)
-
- -- Timshel Knoll <timshel@debian.org> Tue, 12 Dec 2000 11:38:13 +1100
-
-lsh-utils (1.0.1-2) unstable; urgency=low
-
- * Fixed typo in debian/postinst (lsh_writekey needs -o before output
- filename) (closes: Bug#71240)
-
- -- Timshel Knoll <timshel@debian.org> Mon, 18 Sep 2000 23:52:02 +1100
-
-lsh-utils (1.0.1-1) unstable; urgency=low
-
- * New upstream release
-
- -- Timshel Knoll <timshel@debian.org> Tue, 18 Jul 2000 19:10:12 +1000
-
-lsh-utils (0.9.9-1) unstable; urgency=low
-
- * Initial Release.
-
- -- Timshel Knoll <timshel@debian.org> Thu, 15 Jun 2000 16:30:33 +1000
-
Index: 2.1-3/debian/lsh-server.templates
===================================================================
--- 2.1-3/debian/lsh-server.templates (revision 121)
+++ 2.1-3/debian/lsh-server.templates (nonexistent)
@@ -1,41 +0,0 @@
-# These templates have been reviewed by the debian-l10n-english
-# team
-#
-# If modifications/additions/rewording are needed, please ask
-# debian-l10n-english@lists.debian.org for advice.
-#
-# Even minor modifications require translation updates and such
-# changes should be coordinated with translators and reviewers.
-
-Template: lsh-server/lshd_port
-Type: string
-Default: 22
-_Description: lsh server port:
- The default port for lshd is 22. If lshd should run on a different port,
- please specify the alternative port here. If you specify 22, you will
- need to manually disable any other SSH servers running on port 22, other
- than OpenSSH (from the package openssh-server), which will be disabled
- automatically if you choose 22 here.
-
-Template: lsh-server/sftp
-Type: boolean
-Default: false
-_Description: Enable the SFTP subsystem?
- Please choose whether you want to use the EXPERIMENTAL lsh SFTP support.
- .
- Since it is experimental, the default is for it to be disabled, but it
- can be enabled now or later by manually changing /etc/default/lsh-server.
-
-Template: lsh-server/purge_hostkey
-Type: boolean
-Default: true
-_Description: Remove host key on purge?
- When this package is installed, a host key is generated to authenticate
- your host.
- .
- Please choose whether you want to purge the host key when the package
- is removed.
-
-Template: lsh-server/extra_args
-Type: string
-_Description: Additional arguments to pass to lshd:
Index: 2.1-3/debian/lsh-server.service
===================================================================
--- 2.1-3/debian/lsh-server.service (revision 121)
+++ 2.1-3/debian/lsh-server.service (nonexistent)
@@ -1,21 +0,0 @@
-[Unit]
-Description=Secure Shell v2 (SSH2) protocol server
-Documentation=man:lshd(8)
-After=local-fs.target remote-fs.target network.target syslog.target nss-lookup.target
-
-[Service]
-Type=simple
-ExecStart=/bin/sh -c "case \"$ENABLE_SFTP\" in \
- true|y*|Y*) ;; \
- *) SFTP_FLAG='';; esac; \
- exec /usr/sbin/lshd --port \"$LSHD_PORT\" $SFTP_FLAG $EXTRA_ARGS"
-Environment="LSHD_PORT=22" "SFTP_FLAG=--subsystems sftp=/usr/lib/lsh-server/sftp-server"
-EnvironmentFile=-/etc/default/lsh-server
-KillSignal=SIGHUP
-KillMode=process
-SendSIGKILL=no
-SyslogIdentifier=lshd
-TimeoutStopSec=1
-
-[Install]
-WantedBy=multi-user.target
Index: 2.1-3/debian/lsh-utils.install
===================================================================
--- 2.1-3/debian/lsh-utils.install (revision 121)
+++ 2.1-3/debian/lsh-utils.install (nonexistent)
@@ -1,11 +0,0 @@
-usr/bin/lsh-authorize
-usr/bin/lsh-decode-key
-usr/bin/lsh-decrypt-key
-usr/bin/lsh-export-key
-usr/bin/lsh-keygen
-usr/bin/lsh-make-seed
-usr/bin/lsh-upgrade
-usr/bin/lsh-upgrade-key
-usr/bin/lsh-writekey
-usr/bin/srp-gen
-usr/bin/ssh-conv
Index: 2.1-3/debian/rules
===================================================================
--- 2.1-3/debian/rules (revision 121)
+++ 2.1-3/debian/rules (nonexistent)
@@ -1,117 +0,0 @@
-#!/usr/bin/make -f
-# -*- makefile -*-
-# Sample debian/rules that uses debhelper.
-# GNU copyright 1997 to 1999 by Joey Hess.
-
-# Uncomment this to turn on verbose mode.
-#export DH_VERBOSE=1
-
-# These are used for cross-compiling and for saving the configure script
-# from having to guess our platform (since we know it already)
-DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
-DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
-
-ifeq ($(DEB_BUILD_GNU_TYPE), $(DEB_HOST_GNU_TYPE))
- buildflags = --build=$(DEB_BUILD_GNU_TYPE)
-else
- buildflags = --build=$(DEB_BUILD_GNU_TYPE) --host=$(DEB_HOST_GNU_TYPE)
-endif
-
-parallel = $(patsubst parallel=%,%,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
-ifneq (,$(parallel))
-jobsflag = -j$(parallel)
-endif
-
-config.status: configure.ac
- dh_testdir
- # Add here commands to configure the package.
- dh_autoreconf
- ./configure $(buildflags) \
- --prefix=/usr \
- --disable-dependency-tracking \
- --enable-pam --enable-kerberos --enable-srp \
- --with-pty --enable-tcp-forward --enable-x11-forward \
- --enable-agent-forward --enable-ipv6 --enable-utmp \
- --with-zlib --with-tcpwrappers --with-sshd1=/usr/sbin/sshd \
- --with-x XAUTH_PROGRAM=/usr/bin/xauth \
- $(shell DEB_LDFLAGS_MAINT_PREPEND="-Wl,-z,defs -Wl,--as-needed" dpkg-buildflags --export=configure)
-
-build: build-stamp
-build-stamp: config.status
- dh_testdir
-
- # Add here commands to compile the package.
- $(MAKE) $(jobsflag) MAKEINFO='makeinfo --enable-encoding'
-ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
- $(MAKE) check
-endif
-
- touch build-stamp
-
-clean:
- dh_testdir
- dh_testroot
- rm -f build-stamp
-
- # Add here commands to clean up after the build process.
- [ ! -f Makefile ] || $(MAKE) distclean
- dh_autoreconf_clean
- dh_clean
-
-install: build
- dh_testdir
- dh_testroot
- dh_prep
- dh_installdirs
-
- # Add here commands to install the package into debian/tmp
- $(MAKE) install DESTDIR=$(CURDIR)/debian/tmp
-
-build-indep build-arch: build
-
-# Build architecture-independent files here.
-binary-indep: build-indep install
- dh_testdir
- dh_testroot
- dh_install -i --sourcedir=debian/tmp
- dh_link -i
- dh_installchangelogs -i ChangeLog
- dh_installdocs -i -A README
- dh_installinfo -i
- dh_installman -i
- dh_installdebconf -i
- dh_compress -i
- dh_fixperms -i
- dh_makeshlibs -i
- dh_installdeb -i
- dh_shlibdeps -i
- dh_gencontrol -i
- dh_md5sums -i
- dh_builddeb -i
-
-# Build architecture-dependent files here.
-binary-arch: build-arch install
- dh_testdir
- dh_testroot
- dh_install -a --sourcedir=debian/tmp
- dh_link -a
- dh_installchangelogs -a ChangeLog
- dh_installdocs -a -A README
- dh_installexamples -a
- dh_installman -a
- dh_systemd_enable -a
- dh_installinit -a
- dh_systemd_start -a
- dh_installdebconf -a
- dh_strip -a
- dh_compress -a
- dh_fixperms -a
- dh_makeshlibs -a
- dh_installdeb -a
- dh_shlibdeps -a
- dh_gencontrol -a
- dh_md5sums -a
- dh_builddeb -a
-
-binary: binary-arch binary-indep
-.PHONY: build-indep build-arch build clean clean-patched binary-indep binary-arch binary install
/2.1-3/debian/rules
Property changes:
Deleted: svn:executable
## -1 +0,0 ##
-*
\ No newline at end of property
Index: 2.1-3/debian/lsh-client.manpages
===================================================================
--- 2.1-3/debian/lsh-client.manpages (revision 121)
+++ 2.1-3/debian/lsh-client.manpages (nonexistent)
@@ -1,4 +0,0 @@
-debian/mans/lcp.1
-doc/lsh.1
-doc/lshg.1
-src/sftp/lsftp.1
Index: 2.1-3/debian/lsh-server.config
===================================================================
--- 2.1-3/debian/lsh-server.config (revision 121)
+++ 2.1-3/debian/lsh-server.config (nonexistent)
@@ -1,119 +0,0 @@
-#!/usr/bin/perl -w
-#
-# debconf config script for lsh-server
-#
-# Copyright (c) 2000, 2001, 2002 Timshel Knoll <timshel@debian.org>
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-#
-# On Debian systems, see /usr/share/common-licenses/GPL for the GNU GPL.
-#
-use strict;
-use Debconf::Client::ConfModule ':all';
-
-
-sub ask_whether_to_purge_hostkey {
- &input ("medium", "lsh-server/purge_hostkey");
- my @ret = &go ();
-
- return ($ret[0] == 30 ? -1 : 1);
-}
-
-
-sub get_lshd_port {
- &input ("medium", "lsh-server/lshd_port");
- my @ret = &go ();
-
- my $port = &get ("lsh-server/lshd_port");
-
- if ($port and $port !~ m/^\d+$/) {
- $port = (getservbyname ($port, "tcp"))[2];
- }
-
- unless ($port) {
- # invalid service entered: wasn't a number, and
- # getservbyname failed, try again ...
- # FIXME: try putting some sort of error message here?
- &reset ("lsh-server/lshd_port");
- return 0;
- }
-
- return ($ret[0] == 30 ? -1 : 1);
-}
-
-
-
-sub ask_whether_to_enable_sftp {
- &input ("medium", "lsh-server/sftp");
- my @ret = &go ();
-
- return ($ret[0] == 30 ? -1 : 1);
-}
-
-
-sub configure () {
- my $state = 0;
-
- # The list of things to do, in order
- # Aren't really long, descriptive function names fun ;-)
- my @states = (
- \&ask_whether_to_purge_hostkey,
- \&get_lshd_port,
- \&ask_whether_to_enable_sftp
- );
-
- # This is 1 or -1, depending on whether we're going forward or backward
- # Required because otherwise when we back up to a question doesn't need
- # to be asked, the engine will go forward again :-(
- my $step = 1;
-
- until ($state > $#states) {
- if ($state < 0) {
- $state = 0;
- # We may have got here because of "backing up" to a question which
- # was skipped, so make sure we're going forward from here to avoid
- # an infinite loop
- $step = 1;
- }
-
- $step = &{ $states[$state] } ($step);
-
- $state += $step;
- }
-}
-
-
-
-die "Syntax error: no argument" if (@ARGV <= 0);
-
-version ('2.0');
-
-my $capb = &capb ('backup');
-
-system {'sh'} 'sh', '-c', <<'EOF';
-[ -e /etc/default/lsh-server ] || exit 0
-. /etc/default/lsh-server
-. /usr/share/debconf/confmodule
-
-db_set lsh-server/lshd_port "$LSHD_PORT" || true
-db_set lsh-server/sftp "$ENABLE_SFTP" || true
-db_set lsh-server/extra_args "$EXTRA_ARGS" || true
-EOF
-
-if ($ARGV[0] eq "configure" || $ARGV[0] eq "reconfigure") {
- &configure ();
-}
-
-
-
Index: 2.1-3/debian/mans/lsh-execuv.8
===================================================================
--- 2.1-3/debian/mans/lsh-execuv.8 (revision 121)
+++ 2.1-3/debian/mans/lsh-execuv.8 (nonexistent)
@@ -1,70 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH-EXECUV 8 "Jul 05 2002" lsh-execuv "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh-execuv \- program to securely execute a program as another user
-.SH SYNOPSIS
-.B lsh-execuv
-.RI [ options ] " program " [ -- ] " real-argv"
-.SH DESCRIPTION
-This manual page documents briefly the
-.B lsh-execuv
-command.
-This manual page was written for the Debian distribution
-because the original program does not have a manual page.
-.PP
-.\" TeX users may be more comfortable with the \fB<whatever>\fP and
-.\" \fI<whatever>\fP escape sequences to invode bold face and italics,
-.\" respectively.
-\fBlsh-execuv\fP is a utility program for the lsh server that securely executes
-a program as a different user.
-another user.
-.SH OPTIONS
-A summary of options is included below.
-.TP
-.B \-u \fIuid\fP
-setuid to numeric \fIuid\fP before running \fIprogram\fP. Usernames are
-not supported, only numeric uids.
-.TP
-.B \-g \fIgid\fP
-setgid to numeric \fIgid\fP before running \fIprogram\fP. Group names are
-not supported, only numeric gids.
-.TP
-.B \-n \fIuser-name\fP
-User name, needed for initgroups
-.TP
-.B \-i
-Call initgroups, requires that -n \fIuser-name\fP be specified.
-.TP
-.B \-c
-Clear the list of supplimentary groups.
-.TP
-.B \-p
-Use $PATH variable to search for program.
-.TP
-.B \-?
-Show summary of options.
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (8).
-.BR
-The programs are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-3/debian/mans/lsh-pam-checkpw.8
===================================================================
--- 2.1-3/debian/mans/lsh-pam-checkpw.8 (revision 121)
+++ 2.1-3/debian/mans/lsh-pam-checkpw.8 (nonexistent)
@@ -1,53 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH-PAM-CHECKPW 8 "Jul 05 2002" lsh-pam-checkpw "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh-pam-checkpw \- program to check a PAM username/password combination
-.SH SYNOPSIS
-.B lsh-pam-checkpw
-.RI username-to-check
-.SH DESCRIPTION
-This manual page documents briefly the
-.B lsh-pam-checkpw
-command.
-This manual page was written for the Debian distribution
-because the original program does not have a manual page.
-Instead, it has documentation in the GNU Info format; see below.
-.PP
-.\" TeX users may be more comfortable with the \fB<whatever>\fP and
-.\" \fI<whatever>\fP escape sequences to invode bold face and italics,
-.\" respectively.
-\fBlsh-pam-checkpw\fP is a program that checks if a username and password
-combination is valid for login by doing a PAM lookup. It is designed to be
-used as a password helper program for \fBlshd (8)\fP, (eg.
-\fB\-\-password\-helper=/usr/sbin/lsh-pam-checkpw\fP.
-.PP
-.B lsh-pam-checkpw
-takes one required argument, which is the username, and reads the password from
-stdin, then returns 0 if the password is valid, or 1 otherwise. Note that the
-password must be supplied exactly, ie. there must be no newline after the
-password, so if invoking from a shell, just type "<your-password><CTRL-D>".
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (8).
-.BR
-The programs are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-3/debian/mans/lsh-export-key.1
===================================================================
--- 2.1-3/debian/mans/lsh-export-key.1 (revision 121)
+++ 2.1-3/debian/mans/lsh-export-key.1 (nonexistent)
@@ -1,77 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH-EXPORT-KEY 1 "Apr 19, 2002" lsh-export-key "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh-export-key \- Converts an s-expression to the OpenSSH/SSH2 encoding format.
-.SH SYNOPSIS
-.B lsh-export-key
-.RI [ options ]
-.SH DESCRIPTION
-\fBlsh-export-key\fP is a utility which reads an s-expression on stdin,
-and writes the same s-expression to stdout, using the OpenSSH/SSH2
-encoding format.
-.SH OPTIONS
-These programs follow the usual GNU command line syntax, with long
-options starting with two dashes (`-').
-A summary of options is included below.
-.TP
-.B \-c, \-\-comment=\fIcomment\fP
-Adds \fIcomment\fP to output key as its comment
-.TP
-.B \-o, \-\-output\-file=\fIfilename\fP
-Write output key to \fIfilename\fP, default is stdout
-.TP
-.B \-r, \-\-input\-file=\fIfilename\fP
-Read input key from \fIfilename\fP, default is stdin
-.TP
-.B \-s, \-\-subject=\fIsubject\fP
-Adds \fIsubject\fP to the output key as its subject
-.TP
-.B \-\-debug
-Prints huge amounts of debug information
-.TP
-.B \-q, \-\-quiet
-Suppress all warnings and diagnostic messages
-.TP
-.B \-\-trace
-Detailed program trace
-.TP
-.B \-\-verbose
-verbose diagnostic messages
-.TP
-.B \-i, \-\-input\-format=\fIformat\fP
-Input is in the \fIformat\fP variant of s-expression syntax, \fIformat\fP must
-be one of "transport", "canonical", "advanced" or "international"
-.TP
-.B \-?, \-\-help
-Show summary of options
-.TP
-.B \-\-usage
-Prints a short usage message
-.TP
-.B \-V, \-\-version
-Prints the program version
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (8),
-.BR sexp-conv (1),
-.BR ssh-conv (1),
-.BR lsh-decode-key (1).
-.br
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-3/debian/mans/srp-gen.1
===================================================================
--- 2.1-3/debian/mans/srp-gen.1 (revision 121)
+++ 2.1-3/debian/mans/srp-gen.1 (nonexistent)
@@ -1,90 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH SRP-GEN 1 "Apr 10, 2002" srp-gen "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-srp-gen \- generate a password verifier for the SRP protocol.
-.SH SYNOPSIS
-.B srp-gen
-.RI [ options ]
-.SH DESCRIPTION
-This manual page documents briefly the
-.B srp-gen
-command.
-This manual page was written for the Debian GNU/Linux distribution
-because the original program does not have a manual page.
-Instead, it has documentation in the GNU Info format; see below.
-.PP
-.\" TeX users may be more comfortable with the \fB<whatever>\fP and
-.\" \fI<whatever>\fP escape sequences to invode bold face and italics,
-.\" respectively.
-\fBsrp-gen\fP is a program that generates a password verifier for the Secure
-Remote Password protocol. The password verifier should be stored as
-~/.lsh/srp-verifier on the target (remote) machine on which you want to
-authenticate using SRP.
-
-For more information about SRP, see the "srp" node of the "Getting started"
-section of the Lsh manual available via the info system.
-.SH OPTIONS
-This program follows the usual GNU command line syntax, with long
-options starting with two dashes (`-').
-A summary of options is included below.
-For a complete description, see the Info files.
-.TP
-.B \-l, \-\-user=\fIusername\fP
-User name.
-.TP
-.B \-o, \-\-output\-file=\fIfilename\fP
-The file to output to. Default is to output to stdout.
-.TP
-.B \-p, \-\-password=\fIpassword\fP
-The password to use.
-.TP
-.B \-\-debug
-Print lots of debug information.
-.TP
-.B \-q, \-\-quiet
-Suppress all warnings and diagnostic messages.
-.TP
-.B \-\-trace
-Detailed trace.
-.TP
-.B \-v, \-\-verbose
-Print verbose diagnostic messages.
-.TP
-.B \-f, \-\-output\-format=format
-The S-expression output format. Valid sexp formats are: transport, canonical,
-advanced and international.
-.TP
-.B \-?, \-\-help
-Show summary of options.
-.TP
-.B \-\-usage
-Show a short usage message.
-.TP
-.B \-V, \-\-version
-Show version of program.
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (1),
-.BR sexp-conv (1).
-.br
-The lsh programs (including this one) are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-3/debian/mans/lsh-krb-checkpw.8
===================================================================
--- 2.1-3/debian/mans/lsh-krb-checkpw.8 (revision 121)
+++ 2.1-3/debian/mans/lsh-krb-checkpw.8 (nonexistent)
@@ -1,53 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH-KRB-CHECKPW 8 "Nov 15 2005" lsh-krb-checkpw "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh-krb-checkpw \- program to check a Kerberos username/password combination
-.SH SYNOPSIS
-.B lsh-krb-checkpw
-.RI username-to-check
-.SH DESCRIPTION
-This manual page documents briefly the
-.B lsh-krb-checkpw
-command.
-This manual page was written for the Debian distribution
-because the original program does not have a manual page.
-Instead, it has documentation in the GNU Info format; see below.
-.PP
-.\" TeX users may be more comfortable with the \fB<whatever>\fP and
-.\" \fI<whatever>\fP escape sequences to invode bold face and italics,
-.\" respectively.
-\fBlsh-krb-checkpw\fP is a program that checks if a username and password
-combination is valid for login by doing a kerberos lookup. It is designed to be
-used as a password helper program for \fBlshd (8)\fP, (eg.
-\fB\-\-password\-helper=/usr/sbin/lsh-krb-checkpw\fP.
-.PP
-.B lsh-krb-checkpw
-takes one required argument, which is the username, and reads the password from
-stdin, then returns 0 if the password is valid, or 1 otherwise. Note that the
-password must be supplied exactly, ie. there must be no newline after the
-password, so if invoking from a shell, just type "<your-password><CTRL-D>".
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (8).
-.BR
-The programs are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-3/debian/mans/lcp.1
===================================================================
--- 2.1-3/debian/mans/lcp.1 (revision 121)
+++ 2.1-3/debian/mans/lcp.1 (nonexistent)
@@ -1,73 +0,0 @@
-.\" -*- nroff -*-
-.\"
-.\" lcp.1
-.\"
-.Dd November 8, 2005
-.Dt LCP 1
-.Os
-.Sh NAME
-.Nm lcp
-.Nd Secure remote file copy
-.Sh SYNOPSIS
-.Nm lcp
-.Bk -words
-.Op Fl fvn
-.Sm off
-.Oo
-.Op Ar user No @
-.Ar host1 No :
-.Oc Ns Ar file1
-.Sm on
-.Sm off
-.Oo
-.Op Ar user No @
-.Ar host2 No :
-.Oc Ar file2
-.Sm on
-.Ek
-.\"
-.Sh DESCRIPTION
-.Nm
-is a program that securely copies files between two hosts on a
-network. This is intended as a secure replacement for
-.Xr rcp 1 .
-Note
-that both the source and the destination can be on remote machines.
-.\"
-.Sh OPTIONS
-Available options:
-.\"
-.Bl -tag -width Ds
-.It Fl \-help
-Show summary of options.
-.It Fl f, \-force
-Overwrite existing files.
-.It Fl v, \-version
-Display commands before they are executed.
-.It Fl n, \-dry\-run
-Don't execute any commands. Implies -v.
-.El
-.\"
-.\"
-.Sh ENVIRONMENT
-.Bl -tag -width ".Ev LSFTP_RSH"
-.It Ev LSFTP_RSH
-The program to use for the SSH tunnel. If the variable is not set, lcp
-defaults to using lsh.
-.El
-.\"
-.Sh "REPORTING BUGS"
-Report bugs to <bug-lsh@gnu.org>.
-.\"
-.Sh AUTHOR
-The lsh program suite is written mainly by Niels M\[:o]ller <nisse@lysator.liu.se>.
-.\"
-This man-page was written for
-the Debian GNU/Linux system by Charles Fry <debian@frogcircus.org>.
-.\"
-.Sh "SEE ALSO"
-.Xr rcp 1 ,
-.Xr scp 1 ,
-.Xr lsftp 1 ,
-.Xr lsh 1 ,
-.Xr lshd 8
Index: 2.1-3/debian/mans/lsh_proxy.8
===================================================================
--- 2.1-3/debian/mans/lsh_proxy.8 (revision 121)
+++ 2.1-3/debian/mans/lsh_proxy.8 (nonexistent)
@@ -1,129 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH_PROXY 1 "Apr 19, 2000" lsh_proxy "Lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh_proxy \- Server for the ssh-2 protocol.
-.SH SYNOPSIS
-.B lsh_proxy
-.RI [ options ]
-.SH DESCRIPTION
-This manual page documents briefly the
-.B lsh_proxy
-command.
-.SH OPTIONS
-These programs follow the usual GNU command line syntax, with long
-options starting with two dashes (`-').
-A summary of options is included below.
-For a complete description, see the Info files.
-.TP
-.B \-D, \-\-destination=\fIdestination:port\fP
-Destination ssh server address (transparent if not given).
-.TP
-.B \-h, \-\-host\-key=\fIkey\-file\fP
-Location of the server's public key.
-.TP
-.B \-\-interface=\fIinterface\fP
-Listen on this network interface.
-.TP
-.B \-\-no\-tcp\-forward
-Disable TCP/IP forwarding.
-.TP
-.B \-p, \-\-port=\fIport\fP
-Listen on this port.
-.TP
-.B \-\-tcp\-forward
-Enable TCP/IP forwarding (default).
-.TP
-.B \-c, \-\-crypto=\fIcrypto\-algorithm\fP
-The crypto algorithm to use. Supported types of \fIcrypto\-algorithm\fP (in
-order of preference) are "3des-cbc", "twofish-cbc", "cast128-cbc",
-"serpent-cbc@lysator.liu.se", "rijndael@lysator.liu.se", "blowfish-cbc",
-"arcfour", "none". The default is to use triple-DES in CBC mode ("3des-cbc").
-You may also specify "all" to enable all supported crypto
-algorithms (except "none").
-.TP
-.B \-\-hostkey\-algorithm=\fIhostkey\-algorithm\fP
-The hostkey algorithm to use. Supported types of \fIhostkey\-algorithm\fP (in
-order of preference) are "ssh-dss", "spki", "none".
-.TP
-.B \-m, \-\-mac=\fImac\-algorithm\fP
-The MAC (message authentication) algorithm to use. Supported types of
-\fImac\-algorithm\fP (in order of preference) are "hmac-sha1", "hmac-md5",
-"none".
-.TP
-.B \-z, \-\-compression[=\fIcompression\-algorithm\fP]
-The compression algorithm to use. Supported types of
-\fIcompression\-algorithm\fP are "none", "zlib". The default preference list
-supports zlib compression, but prefers not to use it. If \-z or \-\-compression
-is specified with no argument, the compression algorithm list is changed to
-"zlib", "none", which means that zlib is the preferred method of compression.
-A somewhat unobvious consequence of -z having an optional argument is that if
-you provide an argument, it must follow directly after the option letter, no
-spaces allowed.
-.TP
-.B \-\-list\-algorithms
-List supported crypto, compression, MAC and hostkey algorithms.
-.TP
-.B \-i, \-\-input\-format=\fIformat\fP
-Accept S-expressions of format \fIformat\fP.
-.TP
-.B \-\-daemonic
-Run in the background, redirect stdio to /dev/null, chdir to /.
-.TP
-.B \-\-enable\-core
-Dump core on fatal errors (disabled by default).
-.TP
-.B \-\-no\-daemonic
-Run in the foreground, with messages to stderr (default).
-.TP
-.B \-\-no\-pid\-file
-Don't use any pid file. Default in non-daemonic mode.
-.TP
-.B \-\-pid\-file=\fIpid\-file\fP
-Create pid file \fIpid\-file\fP. When running in daemonic mode, the default is
-/var/run/lsh_proxy.pid.
-.TP
-.B \-\-debug
-Print huge amounts of debug information.
-.TP
-.B \-q, \-\-quiet
-Suppress all warnings and diagnostic messages.
-.TP
-.B \-\-trace
-Print a detailed program trace.
-.TP
-.B \-\-verbose
-Print verbose diagnostic messages.
-.TP
-.B \-?, \-\-help
-Show summary of options.
-.TP
-.B \-\-usage
-Give a short usage message.
-.TP
-.B \-V, \-\-version
-Show version of program.
-.SH SEE ALSO
-.BR lsh (1).
-.BR lshd (8)
-.BR
-The programs are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Robert Bihlmeyer <robbe@orcus.priv.at>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-3/debian/lsh-server.install
===================================================================
--- 2.1-3/debian/lsh-server.install (revision 121)
+++ 2.1-3/debian/lsh-server.install (nonexistent)
@@ -1,5 +0,0 @@
-usr/sbin/lshd
-usr/sbin/lsh-execuv
-usr/sbin/lsh-krb-checkpw
-usr/sbin/lsh-pam-checkpw
-usr/sbin/sftp-server usr/lib/lsh-server
Index: 2.1-3/debian/source/format
===================================================================
--- 2.1-3/debian/source/format (revision 121)
+++ 2.1-3/debian/source/format (nonexistent)
@@ -1 +0,0 @@
-3.0 (quilt)
Index: 2.1-3/debian/source/lintian-overrides
===================================================================
--- 2.1-3/debian/source/lintian-overrides (revision 121)
+++ 2.1-3/debian/source/lintian-overrides (nonexistent)
@@ -1,5 +0,0 @@
-# Internet-draft by LSH author; may be used under free licenseas long
-# as IETF parts are deleted. Contrast with GFDL-licensed documents
-# with invariant sections, where the invariant sections may not be
-# removed.
-lsh-utils source: license-problem-non-free-RFC doc/srp-spec.nroff
Index: 2.1-3/debian/lsh-doc.doc-base
===================================================================
--- 2.1-3/debian/lsh-doc.doc-base (revision 121)
+++ 2.1-3/debian/lsh-doc.doc-base (nonexistent)
@@ -1,13 +0,0 @@
-Document: lsh
-Title: LSH documentation
-Author: Niels Möller
-Abstract: This document describes `lsh' and related programs.
-Section: Network/Remote Access
-
-Format: HTML
-Index: /usr/share/doc/lsh-doc/lsh.html
-Files: /usr/share/doc/lsh-doc/lsh.html
-
-Format: Info
-Index: /usr/share/info/lsh.info.gz
-Files: /usr/share/info/lsh.info.gz
Index: 2.1-3/debian/watch
===================================================================
--- 2.1-3/debian/watch (revision 121)
+++ 2.1-3/debian/watch (nonexistent)
@@ -1,6 +0,0 @@
-# use the newest watch file format.
-version=3
-# Site+Directory Pattern Version Script
-ftp://ftp.gnu.org/gnu/lsh/lsh-(\d[^-]*)\.(?:tgz|tbz2|txz|tar\.(?:gz|bz2|xz))
-ftp://ftp.lysator.liu.se/pub/security/lsh/lsh-(\d[^-]*)\.(?:tgz|tbz2|txz|tar\.(?:gz|bz2|xz))
-http://www.lysator.liu.se/~nisse/archive/lsh-(\d[^-]*)\.(?:tgz|tbz2|txz|tar\.(?:gz|bz2|xz))
Index: 2.1-3/debian/lsh-client.install
===================================================================
--- 2.1-3/debian/lsh-client.install (revision 121)
+++ 2.1-3/debian/lsh-client.install (nonexistent)
@@ -1,4 +0,0 @@
-usr/bin/lsh
-usr/bin/lshg
-usr/bin/lcp
-usr/bin/lsftp
Index: 2.1-3/debian/copyright
===================================================================
--- 2.1-3/debian/copyright (revision 121)
+++ 2.1-3/debian/copyright (nonexistent)
@@ -1,48 +0,0 @@
-This package was debianized by Timshel Knoll <timshel@debian.org> on
-Thu, 25 May 2000 13:13:39 +1000. Package based on initial work by
-Robert Bihlmeyer <robbe@orcus.priv.at>
-
-It was downloaded from ftp://ftp.lysator.liu.se/pub/security/lsh/
-
-Upstream Authors: Niels Möller <nisse@lysator.liu.se>
- Balázs Scheidler
- Many others, too numerous to list here. See the file
- `/usr/share/doc/lsh-utils/AUTHORS' for a more complete list of
- the authors and licenses the of various lsh components.
-
-Copyright:
-
- Copyright (C) 1999 Niels Möller
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
-
-On Debian GNU/Linux systems, the complete text of the GNU General
-Public License can be found in `/usr/share/common-licenses/GPL'.
-
-Some of the components of lsh are licensed under the GNU Lesser
-General Public License (LGPL) which can be found (on Debian GNU
-systems) in the file `/usr/share/common-licenses/LGPL'
-
-Other components of lsh are from the public domain. For a more
-complete list of the authors and licenses of various components
-within lsh, see the file `/usr/share/doc/lsh-utils/AUTHORS'
-
-doc/srp-spec.nroff is an old IETF Internet draft written by Niels, and
-as such the actual text, from the abstract and up to and including the
-references can be assumed to be freely reusable, which should be good
-enough. Despite what the copyright notice says the IETF doesn't claim
-copyright to the contents of the draft, only the complete draft in its
-special form.
-
-The Debian patch debian/patches/blacklist.patch contains code from
-the openssh package, apparently written by Colin Watson (cjwatson) and
-released under a BSD license.
Index: 2.1-3/debian
===================================================================
--- 2.1-3/debian (revision 121)
+++ 2.1-3/debian (nonexistent)
/2.1-3/debian
Property changes:
Deleted: mergeWithUpstream
## -1 +0,0 ##
-1
\ No newline at end of property