3 Make default for GSSAPIStrictAcceptorCheck be Yes, to match previous, and
4 documented, behaviour. Reported by Dan Watson.
7 - [ gss-genr.c kexgssc.c kexgsss.c kex.h monitor.c sshconnect2.c sshd.c
9 add support for gss-group14-sha1 key exchange mechanisms
10 - [ gss-serv.c servconf.c servconf.h sshd_config sshd_config.5 ]
11 Add GSSAPIStrictAcceptorCheck option to allow the disabling of
12 acceptor principal checking on multi-homed machines.
14 - [ sshd_config ssh_config ]
15 Add settings for GSSAPIKeyExchange and GSSAPITrustDNS to the sample
17 - [ kexgss.c kegsss.c sshconnect2.c sshd.c ]
18 Code cleanup. Replace strlen/xmalloc/snprintf sequences with xasprintf()
19 Limit length of error messages displayed by client
22 - [ gss-genr.c gss-serv.c ]
23 move ssh_gssapi_acquire_cred() and ssh_gssapi_server_ctx to be server
24 only, where they belong
29 Fix CCAPI credentials cache name when creating KRB5CCNAME environment
34 Avoid Heimdal context freeing problem
35 <Fixed upstream 20060829>
38 - [ gss-genr.c ssh-gss.h sshconnect2.c ]
39 Make sure that SPENGO is disabled
40 <Bugzilla #1218 - Fixed upstream 20060818>
43 - [ gssgenr.c, sshconnect2.c ]
44 a few type changes (signed versus unsigned, int versus size_t) to
45 fix compiler errors/warnings
46 (from jbasney AT ncsa.uiuc.edu)
47 - [ kexgssc.c, sshconnect2.c ]
48 fix uninitialized variable warnings
49 (from jbasney AT ncsa.uiuc.edu)
51 pass oid to gss_display_status (helpful when using GSSAPI mechglue)
52 (from jbasney AT ncsa.uiuc.edu)
55 #ifdef HAVE_GSSAPI_KRB5 should be #ifdef HAVE_GSSAPI_KRB5_H
56 (from jbasney AT ncsa.uiuc.edu)
57 <Fixed upstream 20060304>
58 - [ readconf.c, readconf.h, ssh_config.5, sshconnect2.c
59 add client-side GssapiKeyExchange option
60 (from jbasney AT ncsa.uiuc.edu)
62 add support for GssapiTrustDns option for gssapi-with-mic
63 (from jbasney AT ncsa.uiuc.edu)
64 <gssapi-with-mic support is Bugzilla #1008>