security/openssh-portable 10.6.p1,1

- GSSAPI patch improved for kerbers5 and hemidal

Submitted by:	bg@sics.se

- cleanup GSSAPI option

- Fix BATCH=yes patch for bento.

- update to 3.7.1p2 more regressions tests successfull

- Security Fix in PAM handling Obtained from:	des

- mark FORBIDDEN until fixed.

- Security Fix obtained from OpenBSD http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/buffer.c.diff?r1=1.18&r2=1.19

Submitted by:	ash@lab.poc.net

Add Solar Designer's additional fixes to buffer management.

- Securitry Fix revision 2 http://www.openssh.com/txt/buffer.adv Approved by:	lioux (portmgr)

Do not record expanded size before attempting to reallocate associated memory.

Obtained from:	OpenBSD

- use OPENSSLRPATH from bsd.openssl.mk - strip CONFIGURE_ENV, LDFLAGS is set in bsd.openssl.mk

- use hook for bsd.openssl.mk

- Update to gssapi-20030430 Submitted by:	wollman@lcs.mit.edu

- Update to 3.6.1p2

- honor any given LDFLAGS

- Change all USE_OPENSSL_* to WITH_OPENSSL_*

- use bsd.openssl.mk

- Update to 3.6.1p1

- extend regression tests

- Update to 3.6p1

- add USE_PERL5_BUILD

- retire pkg-comment

- add COMMENT

- openssh-3.5p1 doesn't log utmp for IPv6 connection correctly Submitted by:	ume

openssh-gssapi-3.5p1 is marked as broken

- cleanup of mor patches - fix Makefile to avoid key-generation on bento.

remove an disfuntional MASTER_SITE

Update to 3.5p1

Craete moduli on bento.

add bugfix from CURRENT

Fix resolver problem with privilege-separation. PR:		39953

- add pam_cleanup from CURRENT - Fix build problems < 4.0 PR:		40576

Add bits for regression tests Fix build for /var/empty is schg and have open permissions.

- Fix Problem with HAVE_HOST_IN_UTMP - update monitor.c

PR:		40576
Submitted by:	lxv@a-send-pr.sink.omut.org

merge PAM buffer management from current.

PermitRootLogin no explanation added.

'PermitRootLogin no' is the new default for the OpenSSH port. This now matches the PermitRootLogin configuration of OpenSSH in the base system.  Please be aware of this when upgrading your OpenSSH port, and if truly necessary, re-enable remote root login by readjusting this option in your sshd_config.

Users are encouraged to create single-purpose users with ssh keys
and very narrowly defined sudo privileges instead of using root
for automated tasks.

- PKGNAMESUFFIX for GSSAPI set.
- Merged some patches from current to improve PAM.
- Fix BATCH=yes for bento.

Cleanup patch to avoid conflicts with GSSAPI patches

Revert changes.

give Enviroment from login.conf priority over all others, problem found by drs@rucus.ru.ac.za.

Update gssapi patch

Defaults changed: (Gregory Sutter)  ChallengeResponseAuthentication no  UseLogin no

patch for configure, to detect MAP_ANON submitted by:
Christophe Labouisse,Michael Handler,Gert Doering,Phil Oleson,Dave Baker

fix missing includes for "canohost.h"

nuke obsolete file

update patch for 3.4

Update to openssh-3.4 Update to openssh-3.4p1

Security FIX, Please update to this Version.

Options for both:
USE_OPENSSL_BASE=yes
	uses an older opensssl in the base system.

Options for portable:
OPENSSH_OVERWRITE_BASE=yes
	includes USE_OPENSSL_BASE=yes
	installls in the paths of the base system

Thanks to max@wide.ad.jp, maxim, obraun@informatik.unibw-muenchen.de, fjoe Patch from current, noted by drs@rucus.ru.ac.za: environment variables in the 'setenv' field of login.conf are set now.

Streamline OPENSSH_OVERWRITE_BASE=yes

Migrate configuration files to $PREFIX/etc/ssh/ Add ${PREFIX}/etc/rc.d/sshd.sh.sample

change --with-privsep-path if OPENSSH_OVERWRITE_BASE is in effect. Submitted by:	brad@brad-x.com