usr.bin/ssh/sshd-session.c

90 #include "auth-options.h"
105 /* Server configuration options. */
106 ServerOptions options;
160 /* global key/cert auth options. XXX move to permanent ssh->authctxt? */
209 	for (i = 0; i < options.num_host_key_files; i++) {
229 	for (i = 0; i < options.num_host_key_files; i++) {
400 	if (match_pattern_list(s, options.hostkeyalgorithms, 0) != 1) {
418 	for (i = 0; i < options.num_host_key_files; i++) {
474 	for (i = 0; i < options.num_host_key_files; i++) {
524 	if (ind < 0 || (u_int)ind >= options.num_host_key_files)
532 	if (ind < 0 || (u_int)ind >= options.num_host_key_files)
542 	for (i = 0; i < options.num_host_key_files; i++) {
579 	for (i = nkeys = 0; i < options.num_host_key_files; i++) {
584 		fp = sshkey_fingerprint(key, options.fingerprint_hash,
732  * If IP options are supported, make sure there are none (log and
740  * exit here if we detect any IP options.
757 	/* XXX IPv6 options? */
825 	/* Initialize configuration options to their default values. */
826 	initialize_server_options(&options);
833 			options.address_family = AF_INET;
836 			options.address_family = AF_INET6;
843 			    &options, optarg);
848 				options.log_level = SYSLOG_LEVEL_DEBUG1;
849 			} else if (options.log_level < SYSLOG_LEVEL_DEBUG3)
850 				options.log_level++;
874 			options.log_level = SYSLOG_LEVEL_QUIET;
880 			options.ports_from_cmdline = 1;
881 			if (options.num_ports >= MAX_PORTS) {
885 			options.ports[options.num_ports++] = a2port(optarg);
886 			if (options.ports[options.num_ports-1] <= 0) {
892 			if ((options.login_grace_time = convtime(optarg)) == -1) {
902 			    &options, optarg, 1);
924 			if (process_server_config_line(&options, line,
974 	    options.log_level == SYSLOG_LEVEL_NOT_SET ?
975 	    SYSLOG_LEVEL_INFO : options.log_level,
976 	    options.log_facility == SYSLOG_FACILITY_NOT_SET ?
977 	    SYSLOG_FACILITY_AUTH : options.log_facility,
988 	parse_server_config(&options, "rexec", cfg, &includes, NULL, 1);
989 	/* Fill in default values for those options not explicitly set. */
990 	fill_default_server_options(&options);
991 	options.timing_secret = timing_secret;
1003 	/* Check that options are sensible */
1004 	if (options.authorized_keys_command_user == NULL &&
1005 	    (options.authorized_keys_command != NULL &&
1006 	    strcasecmp(options.authorized_keys_command, "none") != 0))
1009 	if (options.authorized_principals_command_user == NULL &&
1010 	    (options.authorized_principals_command != NULL &&
1011 	    strcasecmp(options.authorized_principals_command, "none") != 0))
1021 	if (options.num_auth_methods != 0) {
1022 		for (i = 0; i < options.num_auth_methods; i++) {
1023 			if (auth2_methods_valid(options.auth_methods[i],
1027 		if (i >= options.num_auth_methods)
1033 	if (options.moduli_file != NULL)
1034 		dh_set_moduli_file(options.moduli_file);
1037 	if (options.host_key_agent) {
1038 		if (strcmp(options.host_key_agent, SSH_AUTHSOCKET_ENV_NAME))
1040 			    options.host_key_agent, 1);
1045 			    options.host_key_agent);
1048 	if (options.num_host_key_files != sensitive_data.num_hostkeys) {
1050 		    options.num_host_key_files, sensitive_data.num_hostkeys);
1053 	for (i = 0; i < options.num_host_key_files; i++) {
1070 	log_init(__progname, options.log_level,
1071 	    options.log_facility, log_stderr);
1072 	for (i = 0; i < options.num_log_verbose; i++)
1073 		log_verbose_add(options.log_verbose[i]);
1076 	log_init(__progname, options.log_level, options.log_facility, log_stderr);
1137 	channel_set_af(ssh, options.address_family);
1142 	if (options.tcp_keep_alive && ssh_packet_connection_is_on_socket(ssh) &&
1179 		alarm(options.login_grace_time);
1182 	    options.version_addendum)) != 0)
1194 	/* Set default key authentication options */
1233 	if (options.routing_domain != NULL)
1234 		set_process_rdomain(ssh, options.routing_domain);
1243 	ssh_packet_set_timeout(ssh, options.client_alive_interval,
1244 	    options.client_alive_count_max);
1272 		    data, dlen, alg, options.sk_provider, NULL,
1277 		    data, dlen, alg, options.sk_provider, NULL,
1293 	if (options.rekey_limit || options.rekey_interval)
1294 		ssh_packet_set_rekey_limits(ssh, options.rekey_limit,
1295 		    options.rekey_interval);
1297 	if (options.compression == COMP_NONE)
1301 	kex_proposal_populate_entries(ssh, myproposal, options.kex_algorithms,
1302 	    options.ciphers, options.macs, compression, hkalgs);
1309 	kex_set_server_sig_algs(ssh, options.pubkey_accepted_algos);