src/usr.bin/ssh/auth.h - diff

Return to auth.h CVS log

Up to [local] / src / usr.bin / ssh

Diff for /src/usr.bin/ssh/auth.h between version 1.7 and 1.7.2.5

-version 1.7, 2000/10/16 09:38:44
+version 1.7.2.5, 2001/09/27 00:15:41
 Line 26
 Line 26
 Line 26
  #ifndef AUTH_H
  #define AUTH_H
+ #include "key.h"
+ #include "hostfile.h"
+ #include <openssl/rsa.h>
+ #ifdef HAVE_LOGIN_CAP
+ #include <login_cap.h>
+ #endif
+ #ifdef BSD_AUTH
+ #include <bsd_auth.h>
+ #endif
+ #ifdef KRB5
+ #include <krb5.h>
+ #endif
  typedef struct Authctxt Authctxt;
+ typedef struct KbdintDevice KbdintDevice;
  struct Authctxt {
-         int success;
+         int              success;
-         int valid;
+         int              postponed;
-         int attempt;
+         int              valid;
-         char *user;
+         int              attempt;
-         char *service;
+         int              failures;
-         struct passwd *pw;
+         char            *user;
+         char            *service;
+         struct passwd   *pw;
+         char            *style;
+         void            *kbdintctxt;
+ #ifdef BSD_AUTH
+         auth_session_t  *as;
+ #endif
+ #ifdef KRB4
+         char            *krb4_ticket_file;
+ #endif
+ #ifdef KRB5
+         krb5_context     krb5_ctx;
+         krb5_auth_context krb5_auth_ctx;
+         krb5_ccache      krb5_fwd_ccache;
+         krb5_principal   krb5_user;
+         char            *krb5_ticket_file;
+ #endif
  };
+ /*
+  * Keyboard interactive device:
+  * init_ctx     returns: non NULL upon success
+  * query        returns: 0 - success, otherwise failure
+  * respond      returns: 0 - success, 1 - need further interaction,
+  *              otherwise - failure
+  */
+ struct KbdintDevice
+ {
+         const char *name;
+         void*   (*init_ctx)     __P((Authctxt*));
+         int     (*query)        __P((void *ctx, char **name, char **infotxt,
+                                 u_int *numprompts, char ***prompts,
+                                 u_int **echo_on));
+         int     (*respond)      __P((void *ctx, u_int numresp, char **responses));
+         void    (*free_ctx)     __P((void *ctx));
+ };
+ int     auth_rhosts(struct passwd *, const char *);
+ int
+ auth_rhosts2(struct passwd *, const char *, const char *, const char *);
+ int      auth_rhosts_rsa(struct passwd *, const char *, RSA *);
+ int      auth_password(Authctxt *, const char *);
+ int      auth_rsa(struct passwd *, BIGNUM *);
+ int      auth_rsa_read_key(char **, u_int *, BIGNUM *, BIGNUM *);
+ int      auth_rsa_challenge_dialog(RSA *);
+ #ifdef KRB4
+ #include <krb.h>
+ int     auth_krb4(Authctxt *, KTEXT, char **);
+ int     auth_krb4_password(Authctxt *, const char *);
+ void    krb4_cleanup_proc(void *);
+ #ifdef AFS
+ #include <kafs.h>
+ int     auth_krb4_tgt(Authctxt *, const char *);
+ int     auth_afs_token(Authctxt *, const char *);
+ #endif /* AFS */
+ #endif /* KRB4 */
+ #ifdef KRB5
+ int     auth_krb5(Authctxt *authctxt, krb5_data *auth, char **client);
+ int     auth_krb5_tgt(Authctxt *authctxt, krb5_data *tgt);
+ int     auth_krb5_password(Authctxt *authctxt, const char *password);
+ void    krb5_cleanup_proc(void *authctxt);
+ #endif /* KRB5 */
  void    do_authentication(void);
  void    do_authentication2(void);
- void    userauth_log(Authctxt *authctxt, int authenticated, char *method);
+ Authctxt *authctxt_new(void);
- void    userauth_reply(Authctxt *authctxt, int authenticated);
+ void    auth_log(Authctxt *, int, char *, char *);
+ void    userauth_finish(Authctxt *, int, char *);
+ int     auth_root_allowed(char *);
- int     auth2_skey(Authctxt *authctxt);
+ int     auth2_challenge(Authctxt *, char *);
- int     allowed_user(struct passwd * pw);
+ int     allowed_user(struct passwd *);
+ char    *get_challenge(Authctxt *);
+ int     verify_response(Authctxt *, const char *);
  struct passwd * auth_get_user(void);
+ char    *expand_filename(const char *, struct passwd *);
+ char    *authorized_keys_file(struct passwd *);
+ char    *authorized_keys_file2(struct passwd *);
+ int
+ secure_filename(FILE *, const char *, struct passwd *, char *, size_t);
+ HostStatus
+ check_key_in_hostfiles(struct passwd *, Key *, const char *,
+     const char *, const char *);
  #define AUTH_FAIL_MAX 6
  #define AUTH_FAIL_LOG (AUTH_FAIL_MAX/2)