[BACK]Return to servconf.h CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Annotation of src/usr.bin/ssh/servconf.h, Revision 1.25

1.1       deraadt     1: /*
1.18      markus      2:  *
1.13      deraadt     3:  * servconf.h
1.18      markus      4:  *
1.13      deraadt     5:  * Author: Tatu Ylonen <ylo@cs.hut.fi>
1.18      markus      6:  *
1.13      deraadt     7:  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
                      8:  *                    All rights reserved
1.18      markus      9:  *
1.13      deraadt    10:  * Created: Mon Aug 21 15:35:03 1995 ylo
1.18      markus     11:  *
1.13      deraadt    12:  * Definitions for server configuration data and for the functions reading it.
1.18      markus     13:  *
1.13      deraadt    14:  */
1.1       deraadt    15:
1.25    ! markus     16: /* RCSID("$OpenBSD: servconf.h,v 1.24 2000/06/17 22:52:33 jakob Exp $"); */
1.1       deraadt    17:
                     18: #ifndef SERVCONF_H
                     19: #define SERVCONF_H
                     20:
1.15      markus     21: #define MAX_PORTS              256     /* Max # ports. */
                     22:
1.13      deraadt    23: #define MAX_ALLOW_USERS                256     /* Max # users on allow list. */
                     24: #define MAX_DENY_USERS         256     /* Max # users on deny list. */
                     25: #define MAX_ALLOW_GROUPS       256     /* Max # groups on allow list. */
                     26: #define MAX_DENY_GROUPS                256     /* Max # groups on deny list. */
1.24      jakob      27: #define MAX_SUBSYSTEMS         256     /* Max # subsystems. */
1.13      deraadt    28:
                     29: typedef struct {
1.15      markus     30:        unsigned int num_ports;
                     31:        unsigned int ports_from_cmdline;
                     32:        u_short ports[MAX_PORTS];       /* Port number to listen on. */
                     33:        char   *listen_addr;            /* Address on which the server listens. */
                     34:        struct addrinfo *listen_addrs;  /* Addresses on which the server listens. */
1.13      deraadt    35:        char   *host_key_file;  /* File containing host key. */
1.20      markus     36:        char   *host_dsa_key_file;      /* File containing dsa host key. */
1.19      markus     37:        char   *pid_file;       /* Where to put our pid */
1.13      deraadt    38:        int     server_key_bits;/* Size of the server key. */
                     39:        int     login_grace_time;       /* Disconnect if no auth in this time
                     40:                                         * (sec). */
                     41:        int     key_regeneration_time;  /* Server key lifetime (seconds). */
                     42:        int     permit_root_login;      /* If true, permit root login. */
                     43:        int     ignore_rhosts;  /* Ignore .rhosts and .shosts. */
                     44:        int     ignore_user_known_hosts;        /* Ignore ~/.ssh/known_hosts
                     45:                                                 * for RhostsRsaAuth */
                     46:        int     print_motd;     /* If true, print /etc/motd. */
                     47:        int     check_mail;     /* If true, check for new mail. */
                     48:        int     x11_forwarding; /* If true, permit inet (spoofing) X11 fwd. */
                     49:        int     x11_display_offset;     /* What DISPLAY number to start
                     50:                                         * searching at */
1.23      markus     51:        char   *xauth_location; /* Location of xauth program */
1.13      deraadt    52:        int     strict_modes;   /* If true, require string home dir modes. */
                     53:        int     keepalives;     /* If true, set SO_KEEPALIVE. */
1.17      markus     54:        char   *ciphers;        /* Ciphers in order of preference. */
                     55:        int     protocol;       /* Protocol in order of preference. */
1.21      markus     56:        int     gateway_ports;  /* If true, allow remote connects to forwarded ports. */
1.13      deraadt    57:        SyslogFacility log_facility;    /* Facility for system logging. */
                     58:        LogLevel log_level;     /* Level for system logging. */
                     59:        int     rhosts_authentication;  /* If true, permit rhosts
                     60:                                         * authentication. */
                     61:        int     rhosts_rsa_authentication;      /* If true, permit rhosts RSA
                     62:                                                 * authentication. */
                     63:        int     rsa_authentication;     /* If true, permit RSA authentication. */
1.22      markus     64:        int     dsa_authentication;     /* If true, permit DSA authentication. */
1.1       deraadt    65: #ifdef KRB4
1.13      deraadt    66:        int     kerberos_authentication;        /* If true, permit Kerberos
                     67:                                                 * authentication. */
                     68:        int     kerberos_or_local_passwd;       /* If true, permit kerberos
                     69:                                                 * and any other password
                     70:                                                 * authentication mechanism,
                     71:                                                 * such as SecurID or
                     72:                                                 * /etc/passwd */
                     73:        int     kerberos_ticket_cleanup;        /* If true, destroy ticket
                     74:                                                 * file on logout. */
1.1       deraadt    75: #endif
1.3       dugsong    76: #ifdef AFS
1.13      deraadt    77:        int     kerberos_tgt_passing;   /* If true, permit Kerberos tgt
                     78:                                         * passing. */
                     79:        int     afs_token_passing;      /* If true, permit AFS token passing. */
1.1       deraadt    80: #endif
1.13      deraadt    81:        int     password_authentication;        /* If true, permit password
                     82:                                                 * authentication. */
1.5       markus     83: #ifdef SKEY
1.13      deraadt    84:        int     skey_authentication;    /* If true, permit s/key
                     85:                                         * authentication. */
1.5       markus     86: #endif
1.13      deraadt    87:        int     permit_empty_passwd;    /* If false, do not permit empty
                     88:                                         * passwords. */
                     89:        int     use_login;      /* If true, login(1) is used */
                     90:        unsigned int num_allow_users;
                     91:        char   *allow_users[MAX_ALLOW_USERS];
                     92:        unsigned int num_deny_users;
                     93:        char   *deny_users[MAX_DENY_USERS];
                     94:        unsigned int num_allow_groups;
                     95:        char   *allow_groups[MAX_ALLOW_GROUPS];
                     96:        unsigned int num_deny_groups;
                     97:        char   *deny_groups[MAX_DENY_GROUPS];
1.24      jakob      98:
                     99:        unsigned int num_subsystems;
                    100:        char   *subsystem_name[MAX_SUBSYSTEMS];
                    101:        char   *subsystem_command[MAX_SUBSYSTEMS];
1.13      deraadt   102: }       ServerOptions;
1.14      markus    103: /*
                    104:  * Initializes the server options to special values that indicate that they
                    105:  * have not yet been set.
                    106:  */
1.13      deraadt   107: void    initialize_server_options(ServerOptions * options);
1.1       deraadt   108:
1.14      markus    109: /*
                    110:  * Reads the server configuration file.  This only sets the values for those
                    111:  * options that have the special value indicating they have not been set.
                    112:  */
1.13      deraadt   113: void    read_server_config(ServerOptions * options, const char *filename);
1.1       deraadt   114:
                    115: /* Sets values for those values that have not yet been set. */
1.13      deraadt   116: void    fill_default_server_options(ServerOptions * options);
1.1       deraadt   117:
1.13      deraadt   118: #endif                         /* SERVCONF_H */