- markus@cvs.openbsd.org 2003/11/17 11:06:07

[openssh.git] / monitor_wrap.h

diff --git a/monitor_wrap.h b/monitor_wrap.h
index 3c8378024c715c423bf6c66ab4197783cc5b6ccf..55be10b195149c04516b1cf1ecfeec4e5548de26 100644 (file)
--- a/monitor_wrap.h
+++ b/monitor_wrap.h
@@ -1,3 +1,5 @@
+/*     $OpenBSD: monitor_wrap.h,v 1.13 2003/11/17 11:06:07 markus Exp $        */
+
 /*
  * Copyright 2002 Niels Provos <provos@citi.umich.edu>
  * All rights reserved.
@@ -28,72 +30,79 @@
 #include "key.h"
 #include "buffer.h"
 
-struct mm_moduli {
-       int min;
-       int want;
-       int max;
-};
-
-enum mm_keytype {MM_HOSTKEY, MM_USERKEY};
+extern int use_privsep;
+#define PRIVSEP(x)     (use_privsep ? mm_##x : x)
 
-struct mm_keyallowed {
-       enum mm_keytype type;
-       char chost[MAXHOSTNAMELEN];
-       char cuser[MAXLOGNAME];
-};
+enum mm_keytype {MM_NOKEY, MM_HOSTKEY, MM_USERKEY, MM_RSAHOSTKEY, MM_RSAUSERKEY};
 
+struct monitor;
 struct mm_master;
-
 struct passwd;
-DH *mm_choose_dh(int, int, int, int);
-DH *mm_read_moduli(int);
-int mm_key_sign(int, int, u_char **, u_int *, u_char *, u_int);
-void mm_inform_authserv(int, char *, char *);
-struct passwd *mm_getpwnamallow(int, const char *, int *);
-int mm_auth_password(int, char *);
-int mm_key_allowed(int, enum mm_keytype, char *, char *, Key *);
-#define mm_hostbased_key_allowed(x,u,h,z) \
-       mm_key_allowed(x, MM_HOSTKEY, u, h, z)
-#define mm_user_key_allowed(x,z) \
-       mm_key_allowed(x, MM_USERKEY, NULL, NULL, z)
-
-int mm_key_verify(int, enum mm_keytype, char *, char *,
-    Key *, u_char *, u_int, u_char *, u_int);
-
-void mm_terminate(int);
+struct Authctxt;
+
+int mm_is_monitor(void);
+DH *mm_choose_dh(int, int, int);
+int mm_key_sign(Key *, u_char **, u_int *, u_char *, u_int);
+void mm_inform_authserv(char *, char *);
+struct passwd *mm_getpwnamallow(const char *);
+char *mm_auth2_read_banner(void);
+int mm_auth_password(struct Authctxt *, char *);
+int mm_key_allowed(enum mm_keytype, char *, char *, Key *);
+int mm_user_key_allowed(struct passwd *, Key *);
+int mm_hostbased_key_allowed(struct passwd *, char *, char *, Key *);
+int mm_auth_rhosts_rsa_key_allowed(struct passwd *, char *, char *, Key *);
+int mm_key_verify(Key *, u_char *, u_int, u_char *, u_int);
+int mm_auth_rsa_key_allowed(struct passwd *, BIGNUM *, Key **);
+int mm_auth_rsa_verify_response(Key *, BIGNUM *, u_char *);
+BIGNUM *mm_auth_rsa_generate_challenge(Key *);
+
+#ifdef GSSAPI
+#include "ssh-gss.h"
+OM_uint32 mm_ssh_gssapi_server_ctx(Gssctxt **ctxt, gss_OID oid);
+OM_uint32 mm_ssh_gssapi_accept_ctx(Gssctxt *ctxt,
+   gss_buffer_desc *recv, gss_buffer_desc *send, OM_uint32 *flags);
+int mm_ssh_gssapi_userok(char *user);
+OM_uint32 mm_ssh_gssapi_checkmic(Gssctxt *, gss_buffer_t, gss_buffer_t);
+#endif
+
+#ifdef USE_PAM
+void mm_start_pam(char *);
+u_int mm_do_pam_account(void);
+void *mm_sshpam_init_ctx(struct Authctxt *);
+int mm_sshpam_query(void *, char **, char **, u_int *, char ***, u_int **);
+int mm_sshpam_respond(void *, u_int, char **);
+void mm_sshpam_free_ctx(void *);
+#endif
+
+struct Session;
+void mm_terminate(void);
+int mm_pty_allocate(int *, int *, char *, int);
+void mm_session_pty_cleanup2(struct Session *);
+
+/* SSHv1 interfaces */
+void mm_ssh1_session_id(u_char *);
+int mm_ssh1_session_key(BIGNUM *);
 
 /* Key export functions */
 struct Newkeys *mm_newkeys_from_blob(u_char *, int);
 int mm_newkeys_to_blob(int, u_char **, u_int *);
 
-void mm_apply_keystate(struct mm_master *);
-void mm_get_keystate(int);
-void mm_send_keystate(int);
+void monitor_apply_keystate(struct monitor *);
+void mm_get_keystate(struct monitor *);
+void mm_send_keystate(struct monitor*);
 
-int mm_pty_allocown(int, int *, int *, char *, int);
+/* bsdauth */
+int mm_bsdauth_query(void *, char **, char **, u_int *, char ***, u_int **);
+int mm_bsdauth_respond(void *, u_int, char **);
 
-/* Functions on the montior that answer unprivileged requests */
+/* skey */
+int mm_skey_query(void *, char **, char **, u_int *, char ***, u_int **);
+int mm_skey_respond(void *, u_int, char **);
 
-int mm_answer_moduli(int, Buffer *);
-int mm_answer_sign(int, Buffer *);
-int mm_answer_pwnamallow(int, Buffer *);
-int mm_answer_authserv(int, Buffer *);
-int mm_answer_authpassword(int, Buffer *);
-int mm_answer_keyallowed(int, Buffer *);
-int mm_answer_keyverify(int, Buffer *);
-int mm_answer_pty(int, Buffer *);
-int mm_answer_term(int, Buffer *);
-
-void mm_request_send(int , enum monitor_reqtype, Buffer *);
-void mm_request_receive(int, Buffer *);
-void mm_request_receive_expect(int, enum monitor_reqtype,
-    Buffer *);
+/* zlib allocation hooks */
 
 void *mm_zalloc(struct mm_master *, u_int, u_int);
 void mm_zfree(struct mm_master *, void *);
 void mm_init_compression(struct mm_master *);
 
-/* Utility functions */
-
-void pwfree(struct passwd *);
 #endif /* _MM_H_ */