X-Git-Url: http://andersk.mit.edu/gitweb/openssh.git/blobdiff_plain/91885a4d5370e317c337cdc779bfdd654d921a1a..caba7de7d39b58f9f4fa9f33ca04531e0358e266:/monitor_wrap.h

diff --git a/monitor_wrap.h b/monitor_wrap.h
index 3c837802..329189c2 100644
--- a/monitor_wrap.h
+++ b/monitor_wrap.h
@@ -1,3 +1,5 @@
+/* $OpenBSD: monitor_wrap.h,v 1.20 2006/08/03 03:34:42 deraadt Exp $ */
+
 /*
  * Copyright 2002 Niels Provos <provos@citi.umich.edu>
  * All rights reserved.
@@ -25,75 +27,84 @@
 
 #ifndef _MM_WRAP_H_
 #define _MM_WRAP_H_
-#include "key.h"
-#include "buffer.h"
-
-struct mm_moduli {
-	int min;
-	int want;
-	int max;
-};
 
-enum mm_keytype {MM_HOSTKEY, MM_USERKEY};
+extern int use_privsep;
+#define PRIVSEP(x)	(use_privsep ? mm_##x : x)
 
-struct mm_keyallowed {
-	enum mm_keytype type;
-	char chost[MAXHOSTNAMELEN];
-	char cuser[MAXLOGNAME];
-};
+enum mm_keytype {MM_NOKEY, MM_HOSTKEY, MM_USERKEY, MM_RSAHOSTKEY, MM_RSAUSERKEY};
 
+struct monitor;
 struct mm_master;
-
-struct passwd;
-DH *mm_choose_dh(int, int, int, int);
-DH *mm_read_moduli(int);
-int mm_key_sign(int, int, u_char **, u_int *, u_char *, u_int);
-void mm_inform_authserv(int, char *, char *);
-struct passwd *mm_getpwnamallow(int, const char *, int *);
-int mm_auth_password(int, char *);
-int mm_key_allowed(int, enum mm_keytype, char *, char *, Key *);
-#define mm_hostbased_key_allowed(x,u,h,z) \
-	mm_key_allowed(x, MM_HOSTKEY, u, h, z)
-#define mm_user_key_allowed(x,z) \
-	mm_key_allowed(x, MM_USERKEY, NULL, NULL, z)
-
-int mm_key_verify(int, enum mm_keytype, char *, char *,
-    Key *, u_char *, u_int, u_char *, u_int);
-
-void mm_terminate(int);
+struct Authctxt;
+
+int mm_is_monitor(void);
+DH *mm_choose_dh(int, int, int);
+int mm_key_sign(Key *, u_char **, u_int *, u_char *, u_int);
+void mm_inform_authserv(char *, char *);
+struct passwd *mm_getpwnamallow(const char *);
+char *mm_auth2_read_banner(void);
+int mm_auth_password(struct Authctxt *, char *);
+int mm_key_allowed(enum mm_keytype, char *, char *, Key *);
+int mm_user_key_allowed(struct passwd *, Key *);
+int mm_hostbased_key_allowed(struct passwd *, char *, char *, Key *);
+int mm_auth_rhosts_rsa_key_allowed(struct passwd *, char *, char *, Key *);
+int mm_key_verify(Key *, u_char *, u_int, u_char *, u_int);
+int mm_auth_rsa_key_allowed(struct passwd *, BIGNUM *, Key **);
+int mm_auth_rsa_verify_response(Key *, BIGNUM *, u_char *);
+BIGNUM *mm_auth_rsa_generate_challenge(Key *);
+
+#ifdef GSSAPI
+OM_uint32 mm_ssh_gssapi_server_ctx(Gssctxt **, gss_OID);
+OM_uint32 mm_ssh_gssapi_accept_ctx(Gssctxt *,
+   gss_buffer_desc *, gss_buffer_desc *, OM_uint32 *);
+int mm_ssh_gssapi_userok(char *user);
+OM_uint32 mm_ssh_gssapi_checkmic(Gssctxt *, gss_buffer_t, gss_buffer_t);
+#endif
+
+#ifdef USE_PAM
+void mm_start_pam(struct Authctxt *);
+u_int mm_do_pam_account(void);
+void *mm_sshpam_init_ctx(struct Authctxt *);
+int mm_sshpam_query(void *, char **, char **, u_int *, char ***, u_int **);
+int mm_sshpam_respond(void *, u_int, char **);
+void mm_sshpam_free_ctx(void *);
+#endif
+
+#ifdef SSH_AUDIT_EVENTS
+#include "audit.h"
+void mm_audit_event(ssh_audit_event_t);
+void mm_audit_run_command(const char *);
+#endif
+
+struct Session;
+void mm_terminate(void);
+int mm_pty_allocate(int *, int *, char *, size_t);
+void mm_session_pty_cleanup2(struct Session *);
+
+/* SSHv1 interfaces */
+void mm_ssh1_session_id(u_char *);
+int mm_ssh1_session_key(BIGNUM *);
 
 /* Key export functions */
 struct Newkeys *mm_newkeys_from_blob(u_char *, int);
 int mm_newkeys_to_blob(int, u_char **, u_int *);
 
-void mm_apply_keystate(struct mm_master *);
-void mm_get_keystate(int);
-void mm_send_keystate(int);
-
-int mm_pty_allocown(int, int *, int *, char *, int);
+void monitor_apply_keystate(struct monitor *);
+void mm_get_keystate(struct monitor *);
+void mm_send_keystate(struct monitor*);
 
-/* Functions on the montior that answer unprivileged requests */
+/* bsdauth */
+int mm_bsdauth_query(void *, char **, char **, u_int *, char ***, u_int **);
+int mm_bsdauth_respond(void *, u_int, char **);
 
-int mm_answer_moduli(int, Buffer *);
-int mm_answer_sign(int, Buffer *);
-int mm_answer_pwnamallow(int, Buffer *);
-int mm_answer_authserv(int, Buffer *);
-int mm_answer_authpassword(int, Buffer *);
-int mm_answer_keyallowed(int, Buffer *);
-int mm_answer_keyverify(int, Buffer *);
-int mm_answer_pty(int, Buffer *);
-int mm_answer_term(int, Buffer *);
+/* skey */
+int mm_skey_query(void *, char **, char **, u_int *, char ***, u_int **);
+int mm_skey_respond(void *, u_int, char **);
 
-void mm_request_send(int , enum monitor_reqtype, Buffer *);
-void mm_request_receive(int, Buffer *);
-void mm_request_receive_expect(int, enum monitor_reqtype,
-    Buffer *);
+/* zlib allocation hooks */
 
 void *mm_zalloc(struct mm_master *, u_int, u_int);
 void mm_zfree(struct mm_master *, void *);
 void mm_init_compression(struct mm_master *);
 
-/* Utility functions */
-
-void pwfree(struct passwd *);
-#endif /* _MM_H_ */
+#endif /* _MM_WRAP_H_ */