http://bugzilla.mindrot.org/show_bug.cgi?id=560
Privsep child continues to run after monitor killed.
Pass monitor signals through to child; Darren Tucker

implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@
server interops with commercial client; ok jakob@ djm@

rename log() into logit() to avoid name conflict. markus ok, from netbsd

reapply rekeying chage, tested by henning@, ok djm@

backout rekeying changes (for 3.6.1)

rekeying bugfixes and automatic rekeying:

* both client and server rekey _automatically_
(a) after 2^31 packets, because after 2^32 packets
the sequence number for packets wraps

rekeying bugfixes and automatic rekeying:

* both client and server rekey _automatically_
(a) after 2^31 packets, because after 2^32 packets
the sequence number for packets wraps
(b) after 2^(blocksize_in_bits/4) blocks
(see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt)
(a) and (b) are _enabled_ by default, and only disabled for known
openssh versions, that don't support rekeying properly.
* client option 'RekeyLimit'
* do not reply to requests during rekeying

show more ...

unbreak rekeying for privsep; ok millert@

fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@

fix permitrootlogin forced-commands-only for privsep; bux #387; ok provos@

skey/bsdauth: use 0 to indicate failure instead of -1, because
the buffer API only supports unsigned ints.

handle overflows for size_t larger than u_int; siw@goneko.de, bug #425

krb4 + privsep; ok dugsong@, deraadt@

only call kerberos code for authctxt->valid

only call auth_krb5 if kerberos is enabled; ok deraadt@

signed vs unsigned from -pedantic; ok henning@

kerberos support for privsep. confirmed to work by lha@stacken.kth.se
patch from markus

pass addrlen with sockaddr *; from Hajimu UMEMOTO <ume@FreeBSD.org>
NOTE: there are also p-specific parts to this patch. ok markus@

Change mm_zalloc() sanity checks to be more in line with what
we do in calloc() and add a check to monitor_mm.c.
OK provos@ and markus@

u_int here; ok provos@

use xfree()

improve mm_zalloc check; markus ok

correct %u

be careful in mm_zalloc

save auth method before monitor_reset_key_state(); bugzilla bug #284;
ok provos@

Don't initialise compression buffers when compression=no in sshd_config;
ok Niels@