blob: 078c9f7c73d8d5dae9a8bae214b4ff3b3185fd70 [file] [log] [blame]
Ben Lindstromc7431342002-03-22 03:11:49 +00001/* $OpenBSD: ssh.h,v 1.65 2002/03/20 19:12:25 stevesk Exp $ */
Ben Lindstrom05764b92002-03-05 01:53:02 +00002
Damien Millerd4a8b7e1999-10-27 13:42:43 +10003/*
Damien Miller95def091999-11-25 00:26:21 +11004 * Author: Tatu Ylonen <ylo@cs.hut.fi>
Damien Miller95def091999-11-25 00:26:21 +11005 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
6 * All rights reserved
Damien Miller4af51302000-04-16 11:18:38 +10007 *
Damien Millere4340be2000-09-16 13:29:08 +11008 * As far as I am concerned, the code I have written for this software
9 * can be used freely for any purpose. Any derived versions of this
10 * software must be clearly marked as such, and if the derived work is
11 * incompatible with the protocol description in the RFC file, it must be
12 * called by a name other than "ssh" or "Secure Shell".
Damien Miller95def091999-11-25 00:26:21 +110013 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100014
Damien Millerd4a8b7e1999-10-27 13:42:43 +100015#ifndef SSH_H
16#define SSH_H
17
Damien Millerab18c411999-11-11 10:40:23 +110018#include <netinet/in.h> /* For struct sockaddr_in */
19#include <pwd.h> /* For struct pw */
Damien Miller5ce662a1999-11-11 17:57:39 +110020#include <stdarg.h> /* For va_list */
Damien Miller6dbfef62000-11-29 13:51:06 +110021#include <syslog.h> /* For LOG_AUTH and friends */
Damien Miller34132e52000-01-14 15:45:46 +110022#include <sys/socket.h> /* For struct sockaddr_storage */
Damien Miller3c027682001-03-14 11:39:45 +110023#include "openbsd-compat/fake-socket.h" /* For struct sockaddr_storage */
Damien Miller365199d1999-12-22 00:12:38 +110024#ifdef HAVE_SYS_SELECT_H
25# include <sys/select.h>
26#endif
Ben Lindstrom226cfa02001-01-22 05:34:40 +000027
Damien Millerd4a8b7e1999-10-27 13:42:43 +100028/* Cipher used for encrypting authentication files. */
29#define SSH_AUTHFILE_CIPHER SSH_CIPHER_3DES
30
31/* Default port number. */
32#define SSH_DEFAULT_PORT 22
33
34/* Maximum number of TCP/IP ports forwarded per direction. */
35#define SSH_MAX_FORWARDS_PER_DIRECTION 100
36
Damien Miller5428f641999-11-25 11:54:57 +110037/*
38 * Maximum number of RSA authentication identity files that can be specified
39 * in configuration files or on the command line.
40 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100041#define SSH_MAX_IDENTITY_FILES 100
42
Damien Miller5428f641999-11-25 11:54:57 +110043/*
44 * Major protocol version. Different version indicates major incompatiblity
45 * that prevents communication.
Damien Miller78928792000-04-12 20:17:38 +100046 *
Damien Miller5428f641999-11-25 11:54:57 +110047 * Minor protocol version. Different version indicates minor incompatibility
48 * that does not prevent interoperation.
49 */
Damien Miller78928792000-04-12 20:17:38 +100050#define PROTOCOL_MAJOR_1 1
51#define PROTOCOL_MINOR_1 5
52
53/* We support both SSH1 and SSH2 */
54#define PROTOCOL_MAJOR_2 2
55#define PROTOCOL_MINOR_2 0
Damien Millerd4a8b7e1999-10-27 13:42:43 +100056
Damien Miller5428f641999-11-25 11:54:57 +110057/*
58 * Name for the service. The port named by this service overrides the
59 * default port if present.
60 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100061#define SSH_SERVICE_NAME "ssh"
62
Damien Millerd0cff3e2000-04-20 23:12:58 +100063#if defined(USE_PAM) && !defined(SSHD_PAM_SERVICE)
Kevin Steves85ecbe72001-04-20 17:43:47 +000064# define SSHD_PAM_SERVICE __progname
Damien Millerd0cff3e2000-04-20 23:12:58 +100065#endif
66
Damien Miller5428f641999-11-25 11:54:57 +110067/*
Ben Lindstrom226cfa02001-01-22 05:34:40 +000068 * Name of the environment variable containing the pathname of the
69 * authentication socket.
Damien Miller5428f641999-11-25 11:54:57 +110070 */
Kevin Steves28a7f262001-02-05 15:43:59 +000071#define SSH_AGENTPID_ENV_NAME "SSH_AGENT_PID"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100072
Damien Miller5428f641999-11-25 11:54:57 +110073/*
74 * Name of the environment variable containing the pathname of the
75 * authentication socket.
76 */
Ben Lindstrom226cfa02001-01-22 05:34:40 +000077#define SSH_AUTHSOCKET_ENV_NAME "SSH_AUTH_SOCK"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100078
Damien Miller5428f641999-11-25 11:54:57 +110079/*
Ben Lindstrom226cfa02001-01-22 05:34:40 +000080 * Environment variable for overwriting the default location of askpass
Damien Miller5428f641999-11-25 11:54:57 +110081 */
Damien Milleraae6c611999-12-06 11:47:28 +110082#define SSH_ASKPASS_ENV "SSH_ASKPASS"
83
84/*
Damien Miller5428f641999-11-25 11:54:57 +110085 * Force host key length and server key length to differ by at least this
86 * many bits. This is to make double encryption with rsaref work.
87 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100088#define SSH_KEY_BITS_RESERVED 128
89
Damien Miller5428f641999-11-25 11:54:57 +110090/*
91 * Length of the session key in bytes. (Specified as 256 bits in the
92 * protocol.)
93 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100094#define SSH_SESSION_KEY_LENGTH 32
95
96/* Name of Kerberos service for SSH to use. */
97#define KRB4_SERVICE_NAME "rcmd"
98
Ben Lindstrom2b1f71b2001-06-05 20:32:21 +000099/* Used to identify ``EscapeChar none'' */
100#define SSH_ESCAPECHAR_NONE -2
101
Ben Lindstromc7431342002-03-22 03:11:49 +0000102/*
103 * unprivileged user when UsePrivilegeSeparation=yes;
104 * sshd will change its pivileges to this user and its
105 * primary group.
106 */
107#define SSH_PRIVSEP_USER "nobody"
108
Damien Miller95def091999-11-25 00:26:21 +1100109#endif /* SSH_H */