- jakob@cvs.openbsd.org 2001/08/02 16:14:05

[openssh.git] / readconf.h

diff --git a/readconf.h b/readconf.h
index 23df57b4271fae4726390a73e5e7ae39b5be2816..802fd1908a2a64313124b84f1458ad419011f646 100644 (file)
--- a/readconf.h
+++ b/readconf.h
@@ -11,11 +11,13 @@
  * called by a name other than "ssh" or "Secure Shell".
  */
 
-/* RCSID("$OpenBSD: readconf.h,v 1.21 2000/09/07 20:27:53 deraadt Exp $"); */
+/* RCSID("$OpenBSD: readconf.h,v 1.37 2001/08/01 22:03:33 markus Exp $"); */
 
 #ifndef READCONF_H
 #define READCONF_H
 
+#include "key.h"
+
 /* Data structure for representing a forwarding request. */
 
 typedef struct {
@@ -35,18 +37,23 @@ typedef struct {
        int     rhosts_rsa_authentication;      /* Try rhosts with RSA
                                                 * authentication. */
        int     rsa_authentication;     /* Try RSA authentication. */
-       int     dsa_authentication;     /* Try DSA authentication. */
-       int     skey_authentication;    /* Try S/Key or TIS authentication. */
-#ifdef KRB4
-       int     kerberos_authentication;        /* Try Kerberos
-                                                * authentication. */
+       int     pubkey_authentication;  /* Try ssh2 pubkey authentication. */
+       int     hostbased_authentication;       /* ssh2's rhosts_rsa */
+       int     challenge_response_authentication;
+                                       /* Try S/Key or TIS, authentication. */
+#if defined(KRB4) || defined(KRB5)
+       int     kerberos_authentication;        /* Try Kerberos authentication. */
+#endif
+#if defined(AFS) || defined(KRB5)
+       int     kerberos_tgt_passing;   /* Try Kerberos TGT passing. */
 #endif
 #ifdef AFS
-       int     kerberos_tgt_passing;   /* Try Kerberos tgt passing. */
        int     afs_token_passing;      /* Try AFS token passing. */
 #endif
        int     password_authentication;        /* Try password
                                                 * authentication. */
+       int     kbd_interactive_authentication; /* Try keyboard-interactive auth. */
+       char    *kbd_interactive_devices; /* Keyboard-interactive auth devices. */
        int     fallback_to_rsh;/* Use rsh if cannot connect with ssh. */
        int     use_rsh;        /* Always use rsh (don\'t try ssh). */
        int     batch_mode;     /* Batch mode: do not ask for passwords. */
@@ -65,8 +72,11 @@ typedef struct {
                                                 * prompts. */
        int     cipher;         /* Cipher to use. */
        char   *ciphers;        /* SSH2 ciphers in order of preference. */
+       char   *macs;           /* SSH2 macs in order of preference. */
+       char   *hostkeyalgorithms;      /* SSH2 server key types in order of preference. */
        int     protocol;       /* Protocol in order of preference. */
        char   *hostname;       /* Real host to connect. */
+       char   *host_key_alias; /* hostname alias for .ssh/known_hosts */
        char   *proxy_command;  /* Proxy command for connecting the host. */
        char   *user;           /* User to log in as. */
        int     escape_char;    /* Escape character; -2 = none */
@@ -75,11 +85,13 @@ typedef struct {
        char   *user_hostfile;  /* Path for $HOME/.ssh/known_hosts. */
        char   *system_hostfile2;
        char   *user_hostfile2;
+       char   *preferred_authentications;
+       char   *bind_address;   /* local socket address for connection to sshd */
+       char   *smartcard_device; /* Smartcard reader device */
 
-       int     num_identity_files;     /* Number of files for RSA identities. */
-       int     num_identity_files2;    /* DSA identities. */
+       int     num_identity_files;     /* Number of files for RSA/DSA identities. */
        char   *identity_files[SSH_MAX_IDENTITY_FILES];
-       char   *identity_files2[SSH_MAX_IDENTITY_FILES];
+       Key    *identity_keys[SSH_MAX_IDENTITY_FILES];
 
        /* Local TCP/IP forward requests. */
        int     num_local_forwards;
@@ -91,53 +103,14 @@ typedef struct {
 }       Options;
 
 
-/*
- * Initializes options to special values that indicate that they have not yet
- * been set.  Read_config_file will only set options with this value. Options
- * are processed in the following order: command line, user config file,
- * system config file.  Last, fill_default_options is called.
- */
-void    initialize_options(Options * options);
+void     initialize_options(Options *);
+void     fill_default_options(Options *);
+void    read_config_file(const char *, const char *, Options *);
 
-/*
- * Called after processing other sources of option data, this fills those
- * options for which no value has been specified with their default values.
- */
-void    fill_default_options(Options * options);
-
-/*
- * Processes a single option line as used in the configuration files. This
- * only sets those values that have not already been set. Returns 0 for legal
- * options
- */
 int
-process_config_line(Options * options, const char *host,
-    char *line, const char *filename, int linenum,
-    int *activep);
+process_config_line(Options *, const char *, char *, const char *, int, int *);
 
-/*
- * Reads the config file and modifies the options accordingly.  Options
- * should already be initialized before this call.  This never returns if
- * there is an error.  If the file does not exist, this returns immediately.
- */
-void
-read_config_file(const char *filename, const char *host,
-    Options * options);
-
-/*
- * Adds a local TCP/IP port forward to options.  Never returns if there is an
- * error.
- */
-void
-add_local_forward(Options * options, u_short port, const char *host,
-    u_short host_port);
-
-/*
- * Adds a remote TCP/IP port forward to options.  Never returns if there is
- * an error.
- */
-void
-add_remote_forward(Options * options, u_short port, const char *host,
-    u_short host_port);
+void    add_local_forward(Options *, u_short, const char *, u_short);
+void    add_remote_forward(Options *, u_short, const char *, u_short);
 
 #endif                         /* READCONF_H */