[BACK]Return to servconf.h CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Annotation of src/usr.bin/ssh/servconf.h, Revision 1.20

1.1       deraadt     1: /*
1.18      markus      2:  *
1.13      deraadt     3:  * servconf.h
1.18      markus      4:  *
1.13      deraadt     5:  * Author: Tatu Ylonen <ylo@cs.hut.fi>
1.18      markus      6:  *
1.13      deraadt     7:  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
                      8:  *                    All rights reserved
1.18      markus      9:  *
1.13      deraadt    10:  * Created: Mon Aug 21 15:35:03 1995 ylo
1.18      markus     11:  *
1.13      deraadt    12:  * Definitions for server configuration data and for the functions reading it.
1.18      markus     13:  *
1.13      deraadt    14:  */
1.1       deraadt    15:
1.20    ! markus     16: /* RCSID("$Id: servconf.h,v 1.19 2000/05/01 18:50:59 markus Exp $"); */
1.1       deraadt    17:
                     18: #ifndef SERVCONF_H
                     19: #define SERVCONF_H
                     20:
1.15      markus     21: #define MAX_PORTS              256     /* Max # ports. */
                     22:
1.13      deraadt    23: #define MAX_ALLOW_USERS                256     /* Max # users on allow list. */
                     24: #define MAX_DENY_USERS         256     /* Max # users on deny list. */
                     25: #define MAX_ALLOW_GROUPS       256     /* Max # groups on allow list. */
                     26: #define MAX_DENY_GROUPS                256     /* Max # groups on deny list. */
                     27:
                     28: typedef struct {
1.15      markus     29:        unsigned int num_ports;
                     30:        unsigned int ports_from_cmdline;
                     31:        u_short ports[MAX_PORTS];       /* Port number to listen on. */
                     32:        char   *listen_addr;            /* Address on which the server listens. */
                     33:        struct addrinfo *listen_addrs;  /* Addresses on which the server listens. */
1.13      deraadt    34:        char   *host_key_file;  /* File containing host key. */
1.20    ! markus     35:        char   *host_dsa_key_file;      /* File containing dsa host key. */
1.19      markus     36:        char   *pid_file;       /* Where to put our pid */
1.13      deraadt    37:        int     server_key_bits;/* Size of the server key. */
                     38:        int     login_grace_time;       /* Disconnect if no auth in this time
                     39:                                         * (sec). */
                     40:        int     key_regeneration_time;  /* Server key lifetime (seconds). */
                     41:        int     permit_root_login;      /* If true, permit root login. */
                     42:        int     ignore_rhosts;  /* Ignore .rhosts and .shosts. */
                     43:        int     ignore_user_known_hosts;        /* Ignore ~/.ssh/known_hosts
                     44:                                                 * for RhostsRsaAuth */
                     45:        int     print_motd;     /* If true, print /etc/motd. */
                     46:        int     check_mail;     /* If true, check for new mail. */
                     47:        int     x11_forwarding; /* If true, permit inet (spoofing) X11 fwd. */
                     48:        int     x11_display_offset;     /* What DISPLAY number to start
                     49:                                         * searching at */
                     50:        int     strict_modes;   /* If true, require string home dir modes. */
                     51:        int     keepalives;     /* If true, set SO_KEEPALIVE. */
1.17      markus     52:        char   *ciphers;        /* Ciphers in order of preference. */
                     53:        int     protocol;       /* Protocol in order of preference. */
1.13      deraadt    54:        SyslogFacility log_facility;    /* Facility for system logging. */
                     55:        LogLevel log_level;     /* Level for system logging. */
                     56:        int     rhosts_authentication;  /* If true, permit rhosts
                     57:                                         * authentication. */
                     58:        int     rhosts_rsa_authentication;      /* If true, permit rhosts RSA
                     59:                                                 * authentication. */
                     60:        int     rsa_authentication;     /* If true, permit RSA authentication. */
1.1       deraadt    61: #ifdef KRB4
1.13      deraadt    62:        int     kerberos_authentication;        /* If true, permit Kerberos
                     63:                                                 * authentication. */
                     64:        int     kerberos_or_local_passwd;       /* If true, permit kerberos
                     65:                                                 * and any other password
                     66:                                                 * authentication mechanism,
                     67:                                                 * such as SecurID or
                     68:                                                 * /etc/passwd */
                     69:        int     kerberos_ticket_cleanup;        /* If true, destroy ticket
                     70:                                                 * file on logout. */
1.1       deraadt    71: #endif
1.3       dugsong    72: #ifdef AFS
1.13      deraadt    73:        int     kerberos_tgt_passing;   /* If true, permit Kerberos tgt
                     74:                                         * passing. */
                     75:        int     afs_token_passing;      /* If true, permit AFS token passing. */
1.1       deraadt    76: #endif
1.13      deraadt    77:        int     password_authentication;        /* If true, permit password
                     78:                                                 * authentication. */
1.5       markus     79: #ifdef SKEY
1.13      deraadt    80:        int     skey_authentication;    /* If true, permit s/key
                     81:                                         * authentication. */
1.5       markus     82: #endif
1.13      deraadt    83:        int     permit_empty_passwd;    /* If false, do not permit empty
                     84:                                         * passwords. */
                     85:        int     use_login;      /* If true, login(1) is used */
                     86:        unsigned int num_allow_users;
                     87:        char   *allow_users[MAX_ALLOW_USERS];
                     88:        unsigned int num_deny_users;
                     89:        char   *deny_users[MAX_DENY_USERS];
                     90:        unsigned int num_allow_groups;
                     91:        char   *allow_groups[MAX_ALLOW_GROUPS];
                     92:        unsigned int num_deny_groups;
                     93:        char   *deny_groups[MAX_DENY_GROUPS];
                     94: }       ServerOptions;
1.14      markus     95: /*
                     96:  * Initializes the server options to special values that indicate that they
                     97:  * have not yet been set.
                     98:  */
1.13      deraadt    99: void    initialize_server_options(ServerOptions * options);
1.1       deraadt   100:
1.14      markus    101: /*
                    102:  * Reads the server configuration file.  This only sets the values for those
                    103:  * options that have the special value indicating they have not been set.
                    104:  */
1.13      deraadt   105: void    read_server_config(ServerOptions * options, const char *filename);
1.1       deraadt   106:
                    107: /* Sets values for those values that have not yet been set. */
1.13      deraadt   108: void    fill_default_server_options(ServerOptions * options);
1.1       deraadt   109:
1.13      deraadt   110: #endif                         /* SERVCONF_H */