xref: /onnv-gate/usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/wu_config.h (revision 0:68f95e015346)
1*0Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
2*0Sstevel@tonic-gate 
3*0Sstevel@tonic-gate /* config.h.  Generated automatically by configure.  */
4*0Sstevel@tonic-gate /****************************************************************************
5*0Sstevel@tonic-gate 
6*0Sstevel@tonic-gate   Copyright (c) 1999,2000 WU-FTPD Development Group.
7*0Sstevel@tonic-gate   All rights reserved.
8*0Sstevel@tonic-gate 
9*0Sstevel@tonic-gate   Portions Copyright (c) 1980, 1985, 1988, 1989, 1990, 1991, 1993, 1994
10*0Sstevel@tonic-gate     The Regents of the University of California.
11*0Sstevel@tonic-gate   Portions Copyright (c) 1993, 1994 Washington University in Saint Louis.
12*0Sstevel@tonic-gate   Portions Copyright (c) 1996, 1998 Berkeley Software Design, Inc.
13*0Sstevel@tonic-gate   Portions Copyright (c) 1989 Massachusetts Institute of Technology.
14*0Sstevel@tonic-gate   Portions Copyright (c) 1998 Sendmail, Inc.
15*0Sstevel@tonic-gate   Portions Copyright (c) 1983, 1995, 1996, 1997 Eric P.  Allman.
16*0Sstevel@tonic-gate   Portions Copyright (c) 1997 by Stan Barber.
17*0Sstevel@tonic-gate   Portions Copyright (c) 1997 by Kent Landfield.
18*0Sstevel@tonic-gate   Portions Copyright (c) 1991, 1992, 1993, 1994, 1995, 1996, 1997
19*0Sstevel@tonic-gate     Free Software Foundation, Inc.
20*0Sstevel@tonic-gate 
21*0Sstevel@tonic-gate   Use and distribution of this software and its source code are governed
22*0Sstevel@tonic-gate   by the terms and conditions of the WU-FTPD Software License ("LICENSE").
23*0Sstevel@tonic-gate 
24*0Sstevel@tonic-gate   If you did not receive a copy of the license, it may be obtained online
25*0Sstevel@tonic-gate   at http://www.wu-ftpd.org/license.html.
26*0Sstevel@tonic-gate 
27*0Sstevel@tonic-gate   $Id: config.h.in,v 1.15 2000/07/01 17:42:15 wuftpd Exp $
28*0Sstevel@tonic-gate 
29*0Sstevel@tonic-gate ****************************************************************************/
30*0Sstevel@tonic-gate 
31*0Sstevel@tonic-gate /*
32*0Sstevel@tonic-gate  * Top level config file... These values will be adjusted by autoconf.
33*0Sstevel@tonic-gate  * $Id: config.h.in,v 1.15 2000/07/01 17:42:15 wuftpd Exp $
34*0Sstevel@tonic-gate  */
35*0Sstevel@tonic-gate 
36*0Sstevel@tonic-gate /*
37*0Sstevel@tonic-gate  * allow "upload" keyword in ftpaccess
38*0Sstevel@tonic-gate  */
39*0Sstevel@tonic-gate 
40*0Sstevel@tonic-gate #define UPLOAD 1
41*0Sstevel@tonic-gate 
42*0Sstevel@tonic-gate /*
43*0Sstevel@tonic-gate  * allow "overwrite" keyword in ftpaccess.
44*0Sstevel@tonic-gate  */
45*0Sstevel@tonic-gate 
46*0Sstevel@tonic-gate #define OVERWRITE 1
47*0Sstevel@tonic-gate 
48*0Sstevel@tonic-gate /*
49*0Sstevel@tonic-gate  * allow "allow/deny" for individual users.
50*0Sstevel@tonic-gate  */
51*0Sstevel@tonic-gate 
52*0Sstevel@tonic-gate #define HOST_ACCESS 1
53*0Sstevel@tonic-gate 
54*0Sstevel@tonic-gate /*
55*0Sstevel@tonic-gate  * log failed login attempts
56*0Sstevel@tonic-gate  */
57*0Sstevel@tonic-gate 
58*0Sstevel@tonic-gate #define LOG_FAILED 1
59*0Sstevel@tonic-gate 
60*0Sstevel@tonic-gate /*
61*0Sstevel@tonic-gate  * log login attempts that fail because of class connection
62*0Sstevel@tonic-gate  * limits.  Busy servers may want to prevent this logging
63*0Sstevel@tonic-gate  * since it can fill up the log file and put a high load on
64*0Sstevel@tonic-gate  * syslog.
65*0Sstevel@tonic-gate  */
66*0Sstevel@tonic-gate #define LOG_TOOMANY 1
67*0Sstevel@tonic-gate 
68*0Sstevel@tonic-gate /*
69*0Sstevel@tonic-gate  * allow use of private file.  (for site group and site gpass)
70*0Sstevel@tonic-gate  * NO_PRIVATE
71*0Sstevel@tonic-gate  * Define this if you don't want to use the private authentication databases.
72*0Sstevel@tonic-gate  */
73*0Sstevel@tonic-gate 
74*0Sstevel@tonic-gate /* #undef NO_PRIVATE */
75*0Sstevel@tonic-gate 
76*0Sstevel@tonic-gate /*
77*0Sstevel@tonic-gate  * Try once more on failed DNS lookups (to allow far away connections
78*0Sstevel@tonic-gate  * which might resolve slowly)
79*0Sstevel@tonic-gate  */
80*0Sstevel@tonic-gate 
81*0Sstevel@tonic-gate /* #undef DNS_TRYAGAIN */
82*0Sstevel@tonic-gate 
83*0Sstevel@tonic-gate /*
84*0Sstevel@tonic-gate  * ANON_ONLY
85*0Sstevel@tonic-gate  * Permit only anonymous logins... disables all other type
86*0Sstevel@tonic-gate  * See FIXES-2.4-HOBBIT for more information on this option.
87*0Sstevel@tonic-gate  */
88*0Sstevel@tonic-gate 
89*0Sstevel@tonic-gate /* #undef ANON_ONLY */
90*0Sstevel@tonic-gate 
91*0Sstevel@tonic-gate /*
92*0Sstevel@tonic-gate  * PARANOID
93*0Sstevel@tonic-gate  * Disable "questionable" functions
94*0Sstevel@tonic-gate  * See FIXES-2.4-HOBBIT for more information on this option.
95*0Sstevel@tonic-gate  */
96*0Sstevel@tonic-gate 
97*0Sstevel@tonic-gate /* #undef PARANOID */
98*0Sstevel@tonic-gate 
99*0Sstevel@tonic-gate /*
100*0Sstevel@tonic-gate  * SKEY
101*0Sstevel@tonic-gate  * Add SKEY support -- REQUIRES SKEY libraries
102*0Sstevel@tonic-gate  * See FIXES-2.4-HOBBIT for more information on this option.
103*0Sstevel@tonic-gate  */
104*0Sstevel@tonic-gate 
105*0Sstevel@tonic-gate /* #undef SKEY */
106*0Sstevel@tonic-gate 
107*0Sstevel@tonic-gate /*
108*0Sstevel@tonic-gate  * OPIE
109*0Sstevel@tonic-gate  * One-time Passwords In Everything (OPIE)
110*0Sstevel@tonic-gate  * Add OPIE support -- REQUIRES OPIE libraries
111*0Sstevel@tonic-gate  */
112*0Sstevel@tonic-gate 
113*0Sstevel@tonic-gate #if !defined (LINUX)		/* Linux autodetects OPIE */
114*0Sstevel@tonic-gate /* #undef OPIE */
115*0Sstevel@tonic-gate #endif
116*0Sstevel@tonic-gate 
117*0Sstevel@tonic-gate /*
118*0Sstevel@tonic-gate  * ALTERNATE_CD
119*0Sstevel@tonic-gate  * Causes "cd ~" to return the chroot-relative directory instead of the
120*0Sstevel@tonic-gate  * real directory.
121*0Sstevel@tonic-gate  */
122*0Sstevel@tonic-gate #define ALTERNATE_CD 1
123*0Sstevel@tonic-gate 
124*0Sstevel@tonic-gate /*
125*0Sstevel@tonic-gate  * UNRESTRICTED_CHMOD
126*0Sstevel@tonic-gate  * If defined, any valid value for the mode will be accepted.
127*0Sstevel@tonic-gate  * Otherwise, only values between 0 and 777 are accepted.
128*0Sstevel@tonic-gate  */
129*0Sstevel@tonic-gate /* #undef UNRESTRICTED_CHMOD */
130*0Sstevel@tonic-gate 
131*0Sstevel@tonic-gate /*
132*0Sstevel@tonic-gate  * USE_RFC931
133*0Sstevel@tonic-gate  * Define this if you want to use RFC 931 'authentication' - this improves
134*0Sstevel@tonic-gate  * the logging at the cost of a possible slight delay in connection.
135*0Sstevel@tonic-gate  */
136*0Sstevel@tonic-gate /* #undef USE_RFC931 */
137*0Sstevel@tonic-gate 
138*0Sstevel@tonic-gate /*
139*0Sstevel@tonic-gate  * BUFFER_SIZE
140*0Sstevel@tonic-gate  * You can specify the buffer size for binary transfers; the defaults
141*0Sstevel@tonic-gate  * are often far too small for efficiency.
142*0Sstevel@tonic-gate  */
143*0Sstevel@tonic-gate /* #undef BUFFER_SIZE */
144*0Sstevel@tonic-gate 
145*0Sstevel@tonic-gate /*
146*0Sstevel@tonic-gate  * If you want to specify the syslog facility, you should modify CFLAGS in
147*0Sstevel@tonic-gate  * the appropriate src/makefile/Makefile.*.
148*0Sstevel@tonic-gate  */
149*0Sstevel@tonic-gate 
150*0Sstevel@tonic-gate /* If you want to set the paths where the configuration files, pids and logs
151*0Sstevel@tonic-gate  * are stored, you should inspect src/pathnames.h and modify the appropriate
152*0Sstevel@tonic-gate  * src/config/config.*.
153*0Sstevel@tonic-gate  */
154*0Sstevel@tonic-gate 
155*0Sstevel@tonic-gate /*
156*0Sstevel@tonic-gate  * RATIO
157*0Sstevel@tonic-gate  * Support for Upload/Download ratios (may download x bytes for uploading 1 byte)
158*0Sstevel@tonic-gate  */
159*0Sstevel@tonic-gate /* #undef RATIO */
160*0Sstevel@tonic-gate 
161*0Sstevel@tonic-gate /*
162*0Sstevel@tonic-gate  * OTHER_PASSWD
163*0Sstevel@tonic-gate  * Support for using alternative passwd/shadow files
164*0Sstevel@tonic-gate  */
165*0Sstevel@tonic-gate #define OTHER_PASSWD 1
166*0Sstevel@tonic-gate 
167*0Sstevel@tonic-gate /*
168*0Sstevel@tonic-gate  * DAEMON
169*0Sstevel@tonic-gate  * If ftpd called with -D then run as a standalone daemon listing on the
170*0Sstevel@tonic-gate  * ftp port.   This can speed up ftpd response as all ftpd then needs to
171*0Sstevel@tonic-gate  * do is fork off a copy to handle an incoming request.  Under inetd
172*0Sstevel@tonic-gate  * a new copy has to be opened and exec'd.
173*0Sstevel@tonic-gate  */
174*0Sstevel@tonic-gate #define DAEMON 1
175*0Sstevel@tonic-gate 
176*0Sstevel@tonic-gate /*
177*0Sstevel@tonic-gate  * MAX_BACKLOG
178*0Sstevel@tonic-gate  * Only used in DAEMON mode.
179*0Sstevel@tonic-gate  * This is second parameter to listen.  It defines the number of incoming
180*0Sstevel@tonic-gate  * processes to allow to backlog, prior to being accept() processing them,
181*0Sstevel@tonic-gate  * before rejecting.
182*0Sstevel@tonic-gate  */
183*0Sstevel@tonic-gate #define MAX_BACKLOG 100
184*0Sstevel@tonic-gate 
185*0Sstevel@tonic-gate /*
186*0Sstevel@tonic-gate  * MAPPING_CHDIR
187*0Sstevel@tonic-gate  * Keep track of the path the user has chdir'd into and respond with
188*0Sstevel@tonic-gate  * that to pwd commands.  This is to avoid having the absolue disk
189*0Sstevel@tonic-gate  * path returned.  This helps avoid returning dirs like '.1/fred'
190*0Sstevel@tonic-gate  * when lots of disks make up the ftp area.
191*0Sstevel@tonic-gate  */
192*0Sstevel@tonic-gate 
193*0Sstevel@tonic-gate #define MAPPING_CHDIR 1
194*0Sstevel@tonic-gate 
195*0Sstevel@tonic-gate /*
196*0Sstevel@tonic-gate  * THROUGHPUT
197*0Sstevel@tonic-gate  * Keep track of total throughput for the user and limit if required.
198*0Sstevel@tonic-gate  */
199*0Sstevel@tonic-gate 
200*0Sstevel@tonic-gate #define THROUGHPUT 1
201*0Sstevel@tonic-gate 
202*0Sstevel@tonic-gate /*
203*0Sstevel@tonic-gate  * TRANSFER_COUNT
204*0Sstevel@tonic-gate  * Keep track of total bytes for statistics.
205*0Sstevel@tonic-gate  */
206*0Sstevel@tonic-gate 
207*0Sstevel@tonic-gate #define TRANSFER_COUNT 1
208*0Sstevel@tonic-gate 
209*0Sstevel@tonic-gate /*
210*0Sstevel@tonic-gate  * TRANSFER_LIMIT
211*0Sstevel@tonic-gate  * Limit file and bytes transferred in a session.
212*0Sstevel@tonic-gate  */
213*0Sstevel@tonic-gate 
214*0Sstevel@tonic-gate #define TRANSFER_LIMIT 1
215*0Sstevel@tonic-gate 
216*0Sstevel@tonic-gate /*
217*0Sstevel@tonic-gate  * NO_SUCKING_NEWLINES
218*0Sstevel@tonic-gate  * Don't suppress some extra blank lines on messages and banners.
219*0Sstevel@tonic-gate  */
220*0Sstevel@tonic-gate 
221*0Sstevel@tonic-gate /* #undef NO_SUCKING_NEWLINES */
222*0Sstevel@tonic-gate 
223*0Sstevel@tonic-gate /*
224*0Sstevel@tonic-gate  * HELP_CRACKERS
225*0Sstevel@tonic-gate  * Define this to help crackers break into your system by letting them
226*0Sstevel@tonic-gate  * figure out which user names exist to guess passwords on.
227*0Sstevel@tonic-gate  */
228*0Sstevel@tonic-gate 
229*0Sstevel@tonic-gate /* #undef HELP_CRACKERS */
230*0Sstevel@tonic-gate 
231*0Sstevel@tonic-gate /*
232*0Sstevel@tonic-gate  * VERBOSE_ERROR_LOGING
233*0Sstevel@tonic-gate  * Log all problems with USER and PASS as well as all rejected commands
234*0Sstevel@tonic-gate  * and denied uploads/downloads.
235*0Sstevel@tonic-gate  */
236*0Sstevel@tonic-gate 
237*0Sstevel@tonic-gate #define VERBOSE_ERROR_LOGING 1
238*0Sstevel@tonic-gate 
239*0Sstevel@tonic-gate /*
240*0Sstevel@tonic-gate  * IGNORE_NOOP
241*0Sstevel@tonic-gate  * Undefine this to let NOOP reset the idle timeout.
242*0Sstevel@tonic-gate  */
243*0Sstevel@tonic-gate 
244*0Sstevel@tonic-gate #define IGNORE_NOOP 1
245*0Sstevel@tonic-gate 
246*0Sstevel@tonic-gate /*
247*0Sstevel@tonic-gate  * CLOSED_VIRTUAL_SERVER
248*0Sstevel@tonic-gate  * Undefine this to allow real and non-owner guests to log in on a virutal server's address.
249*0Sstevel@tonic-gate  */
250*0Sstevel@tonic-gate #define CLOSED_VIRTUAL_SERVER 1
251*0Sstevel@tonic-gate 
252*0Sstevel@tonic-gate /*
253*0Sstevel@tonic-gate  * Some people don't like PASV and want to disable it.  Whatever.
254*0Sstevel@tonic-gate  * PORT can be abused to attack other hosts.  Let's give the option to
255*0Sstevel@tonic-gate  * disable one or the other.  We'll ignore DISABLE_PASV if you defined
256*0Sstevel@tonic-gate  * DISABLE_PORT (hey, you gotta have at least one!).
257*0Sstevel@tonic-gate  */
258*0Sstevel@tonic-gate /* #undef DISABLE_PORT */
259*0Sstevel@tonic-gate /* #undef DISABLE_PASV */
260*0Sstevel@tonic-gate 
261*0Sstevel@tonic-gate /*
262*0Sstevel@tonic-gate  * Define this to suppress messages about PID locks causing the daemon to
263*0Sstevel@tonic-gate  * sleep.  This should only be needed at busy sites.
264*0Sstevel@tonic-gate  */
265*0Sstevel@tonic-gate #define NO_PID_SLEEP_MSGS 1
266*0Sstevel@tonic-gate 
267*0Sstevel@tonic-gate /*
268*0Sstevel@tonic-gate  * Define this to require the remove end of a PASV connection to have the
269*0Sstevel@tonic-gate  * same IP as the control connection.  This limits, but does not eliminate,
270*0Sstevel@tonic-gate  * the risk of PASV port race stealing the connection.  It also is non-RFC
271*0Sstevel@tonic-gate  * compliant, so it may cause problems for some client sites.
272*0Sstevel@tonic-gate  */
273*0Sstevel@tonic-gate #define FIGHT_PASV_PORT_RACE 1
274*0Sstevel@tonic-gate 
275*0Sstevel@tonic-gate /*
276*0Sstevel@tonic-gate  * Define this to completely disable anonymous FTP access.
277*0Sstevel@tonic-gate  */
278*0Sstevel@tonic-gate /* #undef NO_ANONYMOUS_ACCESS */
279*0Sstevel@tonic-gate 
280*0Sstevel@tonic-gate /*
281*0Sstevel@tonic-gate  * Define this to have an ls command compiled into the daemon. That way you
282*0Sstevel@tonic-gate  * don't need to put statically linked ls's into every chroot directory.
283*0Sstevel@tonic-gate  */
284*0Sstevel@tonic-gate /* #undef INTERNAL_LS */
285*0Sstevel@tonic-gate 
286*0Sstevel@tonic-gate /*
287*0Sstevel@tonic-gate  * Define this if you want the internal ls to display UIDs/GIDs rather than
288*0Sstevel@tonic-gate  * user/group names. This is faster, but doesn't look as nice.
289*0Sstevel@tonic-gate  */
290*0Sstevel@tonic-gate /* #undef LS_NUMERIC_UIDS */
291*0Sstevel@tonic-gate 
292*0Sstevel@tonic-gate /*
293*0Sstevel@tonic-gate  * Define this if you want to hide setuid bits in the internal ls
294*0Sstevel@tonic-gate  * this might be a good idea for security.
295*0Sstevel@tonic-gate  */
296*0Sstevel@tonic-gate #define HIDE_SETUID 1
297*0Sstevel@tonic-gate 
298*0Sstevel@tonic-gate /*
299*0Sstevel@tonic-gate  * Define this if you want to support virtual servers
300*0Sstevel@tonic-gate  */
301*0Sstevel@tonic-gate #define VIRTUAL 1
302*0Sstevel@tonic-gate 
303*0Sstevel@tonic-gate /*
304*0Sstevel@tonic-gate  * Define this if you want to be able to receive mail on anonymous
305*0Sstevel@tonic-gate  * uploads
306*0Sstevel@tonic-gate  */
307*0Sstevel@tonic-gate #define MAIL_ADMIN 1
308*0Sstevel@tonic-gate 
309*0Sstevel@tonic-gate /*
310*0Sstevel@tonic-gate  * Config files in /etc by default
311*0Sstevel@tonic-gate  */
312*0Sstevel@tonic-gate #define USE_ETC 1
313*0Sstevel@tonic-gate 
314*0Sstevel@tonic-gate /*
315*0Sstevel@tonic-gate  * Define this to support quota mechanisms...
316*0Sstevel@tonic-gate  */
317*0Sstevel@tonic-gate #define QUOTA 1
318*0Sstevel@tonic-gate 
319*0Sstevel@tonic-gate /*
320*0Sstevel@tonic-gate  * The intention of SITE NEWER was to enable mirrors to quickly determine which
321*0Sstevel@tonic-gate  * files have changed since the last run. Since most mirror packages wish to
322*0Sstevel@tonic-gate  * work with all daemons (not just wu-ftpd), and since SITE NEWER is a wu-ftpd
323*0Sstevel@tonic-gate  * only feature, they don't use the feature. Therefore there seems little
324*0Sstevel@tonic-gate  * reason to continue to support it.
325*0Sstevel@tonic-gate  *
326*0Sstevel@tonic-gate  * Define this to support SITE NEWER and SITE MINFO.
327*0Sstevel@tonic-gate  */
328*0Sstevel@tonic-gate /* #undef SITE_NEWER */
329*0Sstevel@tonic-gate 
330*0Sstevel@tonic-gate /*
331*0Sstevel@tonic-gate  * Define this to revert the NLST command to showing directories.
332*0Sstevel@tonic-gate  *
333*0Sstevel@tonic-gate  * This will cause mget to have errors when it attempts to RETR the
334*0Sstevel@tonic-gate  * directory name (which is not a RETRievable object) but will revert
335*0Sstevel@tonic-gate  * the NLST command enough to quell complains from Solaris command-
336*0Sstevel@tonic-gate  * line FTP client users.
337*0Sstevel@tonic-gate  */
338*0Sstevel@tonic-gate #define NLST_SHOWS_DIRS 1
339