[gssapi-openssh.git] / openssh / ssh.h

/*	$OpenBSD: ssh.h,v 1.70 2002/06/03 12:04:07 deraadt Exp $	*/

/*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
 *                    All rights reserved
 *
 * As far as I am concerned, the code I have written for this software
 * can be used freely for any purpose.  Any derived versions of this
 * software must be clearly marked as such, and if the derived work is
 * incompatible with the protocol description in the RFC file, it must be
 * called by a name other than "ssh" or "Secure Shell".
 */

#ifndef SSH_H
#define SSH_H

#include <netinet/in.h> /* For struct sockaddr_in */
#include <pwd.h> /* For struct pw */
#include <stdarg.h> /* For va_list */
#include <syslog.h> /* For LOG_AUTH and friends */
#include <sys/socket.h> /* For struct sockaddr_storage */
#include "openbsd-compat/fake-socket.h" /* For struct sockaddr_storage */
#ifdef HAVE_SYS_SELECT_H
# include <sys/select.h>
#endif

/* Cipher used for encrypting authentication files. */
#define SSH_AUTHFILE_CIPHER	SSH_CIPHER_3DES

/* Default port number. */
#define SSH_DEFAULT_PORT	22

/* Maximum number of TCP/IP ports forwarded per direction. */
#define SSH_MAX_FORWARDS_PER_DIRECTION	100

/*
 * Maximum number of RSA authentication identity files that can be specified
 * in configuration files or on the command line.
 */
#define SSH_MAX_IDENTITY_FILES		100

/*
 * Major protocol version.  Different version indicates major incompatibility
 * that prevents communication.
 *
 * Minor protocol version.  Different version indicates minor incompatibility
 * that does not prevent interoperation.
 */
#define PROTOCOL_MAJOR_1	1
#define PROTOCOL_MINOR_1	5

/* We support both SSH1 and SSH2 */
#define PROTOCOL_MAJOR_2	2
#define PROTOCOL_MINOR_2	0

/*
 * Name for the service.  The port named by this service overrides the
 * default port if present.
 */
#define SSH_SERVICE_NAME	"ssh"

#if defined(USE_PAM) && !defined(SSHD_PAM_SERVICE)
# define SSHD_PAM_SERVICE       __progname
#endif

/*
 * Name of the environment variable containing the pathname of the
 * authentication socket.
 */
#define SSH_AGENTPID_ENV_NAME	"SSH_AGENT_PID"

/*
 * Name of the environment variable containing the pathname of the
 * authentication socket.
 */
#define SSH_AUTHSOCKET_ENV_NAME "SSH_AUTH_SOCK"

/*
 * Environment variable for overwriting the default location of askpass
 */
#define SSH_ASKPASS_ENV		"SSH_ASKPASS"

/*
 * Force host key length and server key length to differ by at least this
 * many bits.  This is to make double encryption with rsaref work.
 */
#define SSH_KEY_BITS_RESERVED		128

/*
 * Length of the session key in bytes.  (Specified as 256 bits in the
 * protocol.)
 */
#define SSH_SESSION_KEY_LENGTH		32

/* Name of Kerberos service for SSH to use. */
#define KRB4_SERVICE_NAME		"rcmd"

/* Used to identify ``EscapeChar none'' */
#define SSH_ESCAPECHAR_NONE		-2

/*
 * unprivileged user when UsePrivilegeSeparation=yes;
 * sshd will change its privileges to this user and its
 * primary group.
 */
#ifndef SSH_PRIVSEP_USER
#define SSH_PRIVSEP_USER		"sshd"
#endif

/* Minimum modulus size (n) for RSA keys. */
#define SSH_RSA_MINIMUM_MODULUS_SIZE	768

#endif				/* SSH_H */
Commit	Line	Data
f5799ae1	1	/* $OpenBSD: ssh.h,v 1.70 2002/06/03 12:04:07 deraadt Exp $ */
e9a17296	2
3c0ef626	3	/*
	4	* Author: Tatu Ylonen <ylo@cs.hut.fi>
	5	* Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
	6	* All rights reserved
	7	*
	8	* As far as I am concerned, the code I have written for this software
	9	* can be used freely for any purpose. Any derived versions of this
	10	* software must be clearly marked as such, and if the derived work is
	11	* incompatible with the protocol description in the RFC file, it must be
	12	* called by a name other than "ssh" or "Secure Shell".
	13	*/
	14
3c0ef626	15	#ifndef SSH_H
	16	#define SSH_H
	17
	18	#include <netinet/in.h> /* For struct sockaddr_in */
	19	#include <pwd.h> /* For struct pw */
	20	#include <stdarg.h> /* For va_list */
	21	#include <syslog.h> /* For LOG_AUTH and friends */
	22	#include <sys/socket.h> /* For struct sockaddr_storage */
	23	#include "openbsd-compat/fake-socket.h" /* For struct sockaddr_storage */
	24	#ifdef HAVE_SYS_SELECT_H
	25	# include <sys/select.h>
	26	#endif
	27
	28	/* Cipher used for encrypting authentication files. */
	29	#define SSH_AUTHFILE_CIPHER SSH_CIPHER_3DES
	30
	31	/* Default port number. */
	32	#define SSH_DEFAULT_PORT 22
	33
	34	/* Maximum number of TCP/IP ports forwarded per direction. */
	35	#define SSH_MAX_FORWARDS_PER_DIRECTION 100
	36
	37	/*
	38	* Maximum number of RSA authentication identity files that can be specified
	39	* in configuration files or on the command line.
	40	*/
	41	#define SSH_MAX_IDENTITY_FILES 100
	42
	43	/*
f5799ae1	44	* Major protocol version. Different version indicates major incompatibility
3c0ef626	45	* that prevents communication.
	46	*
	47	* Minor protocol version. Different version indicates minor incompatibility
	48	* that does not prevent interoperation.
	49	*/
	50	#define PROTOCOL_MAJOR_1 1
	51	#define PROTOCOL_MINOR_1 5
	52
	53	/* We support both SSH1 and SSH2 */
	54	#define PROTOCOL_MAJOR_2 2
	55	#define PROTOCOL_MINOR_2 0
	56
	57	/*
	58	* Name for the service. The port named by this service overrides the
	59	* default port if present.
	60	*/
	61	#define SSH_SERVICE_NAME "ssh"
	62
	63	#if defined(USE_PAM) && !defined(SSHD_PAM_SERVICE)
	64	# define SSHD_PAM_SERVICE __progname
	65	#endif
	66
	67	/*
	68	* Name of the environment variable containing the pathname of the
	69	* authentication socket.
	70	*/
	71	#define SSH_AGENTPID_ENV_NAME "SSH_AGENT_PID"
	72
	73	/*
	74	* Name of the environment variable containing the pathname of the
	75	* authentication socket.
	76	*/
	77	#define SSH_AUTHSOCKET_ENV_NAME "SSH_AUTH_SOCK"
	78
	79	/*
	80	* Environment variable for overwriting the default location of askpass
	81	*/
	82	#define SSH_ASKPASS_ENV "SSH_ASKPASS"
	83
	84	/*
	85	* Force host key length and server key length to differ by at least this
	86	* many bits. This is to make double encryption with rsaref work.
	87	*/
	88	#define SSH_KEY_BITS_RESERVED 128
	89
	90	/*
	91	* Length of the session key in bytes. (Specified as 256 bits in the
	92	* protocol.)
	93	*/
	94	#define SSH_SESSION_KEY_LENGTH 32
	95
	96	/* Name of Kerberos service for SSH to use. */
	97	#define KRB4_SERVICE_NAME "rcmd"
	98
	99	/* Used to identify ``EscapeChar none'' */
	100	#define SSH_ESCAPECHAR_NONE -2
	101
700318f3	102	/*
	103	* unprivileged user when UsePrivilegeSeparation=yes;
	104	* sshd will change its privileges to this user and its
	105	* primary group.
	106	*/
	107	#ifndef SSH_PRIVSEP_USER
	108	#define SSH_PRIVSEP_USER "sshd"
	109	#endif
	110
	111	/* Minimum modulus size (n) for RSA keys. */
	112	#define SSH_RSA_MINIMUM_MODULUS_SIZE 768
	113
3c0ef626	114	#endif /* SSH_H */