move #include <paths.h> out of includes.h; ok markus@

KNF; ok djm@

spacing

Make code match intent; ok djm@

Move "Last logged in at.." message generation to the monitor, right
before recording the new login. Fixes missing lastlog message when
/var/log/lastlog is not world-readable and incorrect datestamp

Move "Last logged in at.." message generation to the monitor, right
before recording the new login. Fixes missing lastlog message when
/var/log/lastlog is not world-readable and incorrect datestamp when
multiple sessions are used (bz #463); much assistance & ok markus@

show more ...

Change login->username, will prevent -Wshadow errors in Portable; ok markus@

make ssh -Wshadow clean, no functional changes
markus@ ok

implement diffie-hellman-group14-sha1 kex method (trivial extension to
existing diffie-hellman-group1-sha1); ok markus@

improve some code lint did not like; djm millert ok

kill some more tiny files; ok deraadt@

Pass SIGALRM through to privsep child if LoginGraceTime expires. ok markus@

unexpand and delete whitespace at EOL; ok markus@

unbreak fake authloop for non-existent users (my screwup). Spotted and
tested by dtucker@; ok markus@

replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; test + ok jakob.

standardise arguments to auth methods - they should all take authctxt.
check authctxt->valid rather then pw != NULL; ok markus@

replace fatal_cleanup() and linked list of fatal callbacks with static
cleanup_exit() function. re-refine cleanup_exit() where appropriate,
allocate sshd's authctxt eary to allow simpler cleanup in

replace fatal_cleanup() and linked list of fatal callbacks with static
cleanup_exit() function. re-refine cleanup_exit() where appropriate,
allocate sshd's authctxt eary to allow simpler cleanup in sshd.
tested by many, ok deraadt@

show more ...

remove kerberos support from ssh1, since it has been replaced with GSSAPI;
but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...

fix passwd auth for 'username leaks via timing'; with djm@, original patches from solar

64 bit cleanups; markus ok

support GSS API user authentication; patches from Simon Wilkinson,
stripped down and tested by Jakob and myself.

remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
test+ok henning@

int -> u_int; ok djm@, deraadt@, mouring@

typos; dtucker at zip.com.au

deprecate VerifyReverseMapping since it's dangerous if combined
with IP based access control as noted by Mike Harding; replace with
a UseDNS option, UseDNS is on by default and includes the
VerifyRev

deprecate VerifyReverseMapping since it's dangerous if combined
with IP based access control as noted by Mike Harding; replace with
a UseDNS option, UseDNS is on by default and includes the
VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@
ok deraadt@, djm@

show more ...

cast some types for printing; ok markus@