#!/bin/sh
# $Id: sshd_system.sh $

VERSION='$Revision 1.0 $'

version() {
	cat <<EOF
`basename $0` $VERSION
EOF
	exit 0
}

usage() {
	cat <<EOF
Usage: `basename $0` [options]

options:

 -P|--port     port                          (default: 22)
 -s|--sshd     "sshd options"                (quotes are required, no default)
 -f|--config   sshd_config_file              (default: /etc/sshd_config)
 -c|--cygwin   "CYGWIN environment variable" (make sure to use quotes,
                                              default: "$CYGWIN")
 -?|--help                                   (this help screen)
 -v|--version                                (display version)
EOF
	exit 1
}

PORT=
SSHD=
SSHD_CONFIG=/etc/sshd_config

while [ $# -gt 0 ]
do
	case $1 in
	-P|--port|-p)
		shift
		PORT="-p $1"
		shift
		;;
	-s|--sshd)
		shift
		SSHD="$1"
		shift
		;;
	-c|--cygwin)
		shift
		CYGWIN="$1"
		shift
		;;
	-f|--config)
		shift
		SSHD_CONFIG="$1"
		shift
		;;
	-v|--version)
		version;
		exit 0
		;;
	-?|--help|-h)
		usage;
		exit 0
		;;
	*)
		echo $0: Unknown option: "$1"
		usage;
		exit 0
		;;
	esac
done

if [ "$SSHD_CONFIG" != "/etc/sshd_config" ]
then
	SSHD="${SSHD} -f $SSHD_CONFIG"
fi

if [ ! -f /etc/ssh_host_key ]
then
	echo `basename $0`: File not found: "/etc/ssh_host_key"
	echo Please run ssh-host-config to create your /etc/ssh_host_* files.
	exit 2
fi

grep -q -i "^[[:space:]*]UsePrivilegeSeparation[[:space:]]Yes" <$SSHD_CONFIG
if [ $? = 0 ]
then
	cat <<EOF
`basename $0`: Warning: $SSHD_CONFIG contains: UsePrivilegeSeparation Yes

Using PrivilegeSeparation precludes running a "SYSTEM" sshd daemon and a 
"USER" daemon at the same time.

EOF
fi

if [ ! -f /var/log/sshd.log ]
then
	touch /var/log/sshd.log 
fi
chown SYSTEM.SYSTEM /var/empty /etc/ssh* /var/log/sshd.log 
chmod 755 /var/empty
chmod 600 /etc/ssh_host_*
chmod 644 /etc/ssh_host_*.pub /var/log/sshd.log
cygrunsrv --stop sshd
cygrunsrv --remove sshd
cygrunsrv --install sshd \
  --path /usr/sbin/sshd.exe \
  --disp "sshd" \
  --desc "Cygwin's OpenSSH daemon; sshd options='${PORT} ${SSHD}'; CYGWIN='${CYGWIN}'" \
  --env "CYGWIN=${CYGWIN}" \
  --stdout /var/log/sshd.log \
  --stderr /var/log/sshd.log \
  --args "-e -D ${PORT} ${SSHD}"
cygrunsrv --start sshd