remove prototypes with no matching function; ok djm@

make ssh->kex->session_id a sshbuf instead of u_char*/size_t and
use that instead of global variables containing copies of it.
feedback/ok markus@

kerberos/gssapi fixes for buffer removal

one mention of Buffer that almost got away :)

refactor authentication logging

optionally record successful auth methods and public credentials
used in a file accessible to user sessions

feedback and ok markus@

bz#2107 - cache OIDs of supported GSSAPI mechanisms before privsep
sandboxing, as running this code in the sandbox can cause violations;
ok markus@

relocate server-only GSSAPI code from libssh to server; bz #1225
patch from simon AT sxw.org.uk; ok markus@ dtucker@

constify host argument to match the rest of the GSSAPI functions and
unbreak compilation with -Werror

bz #1218 - disable SPNEGO as per RFC4462; diff from simon AT sxw.org.uk
ok markus@

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

standardise spacing in $OpenBSD$ tags; requested by deraadt@

make ssh -Wshadow clean, no functional changes
markus@ ok

replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; test + ok jakob.

missing $OpenBSD:; dtucker

replace fatal_cleanup() and linked list of fatal callbacks with static
cleanup_exit() function. re-refine cleanup_exit() where appropriate,
allocate sshd's authctxt eary to allow simpler cleanup in

replace fatal_cleanup() and linked list of fatal callbacks with static
cleanup_exit() function. re-refine cleanup_exit() where appropriate,
allocate sshd's authctxt eary to allow simpler cleanup in sshd.
tested by many, ok deraadt@

show more ...

support GSS API user authentication; patches from Simon Wilkinson,
stripped down and tested by Jakob and myself.