/crypto/heimdal/lib/gssapi/krb5/gsskrb5_locl.h

https://bitbucket.org/freebsd/freebsd-head/ · C Header · 140 lines · 75 code · 19 blank · 46 comment · 4 complexity · 20e3daac92478d87e9671582c2474c95 MD5 · raw file

  1. /*
  2. * Copyright (c) 1997 - 2008 Kungliga Tekniska Hรถgskolan
  3. * (Royal Institute of Technology, Stockholm, Sweden).
  4. * All rights reserved.
  5. *
  6. * Redistribution and use in source and binary forms, with or without
  7. * modification, are permitted provided that the following conditions
  8. * are met:
  9. *
  10. * 1. Redistributions of source code must retain the above copyright
  11. * notice, this list of conditions and the following disclaimer.
  12. *
  13. * 2. Redistributions in binary form must reproduce the above copyright
  14. * notice, this list of conditions and the following disclaimer in the
  15. * documentation and/or other materials provided with the distribution.
  16. *
  17. * 3. Neither the name of the Institute nor the names of its contributors
  18. * may be used to endorse or promote products derived from this software
  19. * without specific prior written permission.
  20. *
  21. * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  22. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  23. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  24. * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  25. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  26. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  27. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  28. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  29. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  30. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  31. * SUCH DAMAGE.
  32. */
  33. /* $Id$ */
  34. #ifndef GSSKRB5_LOCL_H
  35. #define GSSKRB5_LOCL_H
  36. #include <config.h>
  37. #include <krb5_locl.h>
  38. #include <gkrb5_err.h>
  39. #include <gssapi.h>
  40. #include <gssapi_mech.h>
  41. #include <gssapi_krb5.h>
  42. #include <assert.h>
  43. #include "cfx.h"
  44. /*
  45. *
  46. */
  47. struct gss_msg_order;
  48. typedef struct gsskrb5_ctx {
  49. struct krb5_auth_context_data *auth_context;
  50. struct krb5_auth_context_data *deleg_auth_context;
  51. krb5_principal source, target;
  52. #define IS_DCE_STYLE(ctx) (((ctx)->flags & GSS_C_DCE_STYLE) != 0)
  53. OM_uint32 flags;
  54. enum { LOCAL = 1, OPEN = 2,
  55. COMPAT_OLD_DES3 = 4,
  56. COMPAT_OLD_DES3_SELECTED = 8,
  57. ACCEPTOR_SUBKEY = 16,
  58. RETRIED = 32,
  59. CLOSE_CCACHE = 64,
  60. IS_CFX = 128
  61. } more_flags;
  62. enum gss_ctx_id_t_state {
  63. /* initiator states */
  64. INITIATOR_START,
  65. INITIATOR_RESTART,
  66. INITIATOR_WAIT_FOR_MUTAL,
  67. INITIATOR_READY,
  68. /* acceptor states */
  69. ACCEPTOR_START,
  70. ACCEPTOR_WAIT_FOR_DCESTYLE,
  71. ACCEPTOR_READY
  72. } state;
  73. krb5_creds *kcred;
  74. krb5_ccache ccache;
  75. struct krb5_ticket *ticket;
  76. OM_uint32 lifetime;
  77. HEIMDAL_MUTEX ctx_id_mutex;
  78. struct gss_msg_order *order;
  79. krb5_keyblock *service_keyblock;
  80. krb5_data fwd_data;
  81. krb5_crypto crypto;
  82. } *gsskrb5_ctx;
  83. typedef struct {
  84. krb5_principal principal;
  85. int cred_flags;
  86. #define GSS_CF_DESTROY_CRED_ON_RELEASE 1
  87. #define GSS_CF_NO_CI_FLAGS 2
  88. struct krb5_keytab_data *keytab;
  89. OM_uint32 lifetime;
  90. gss_cred_usage_t usage;
  91. gss_OID_set mechanisms;
  92. struct krb5_ccache_data *ccache;
  93. HEIMDAL_MUTEX cred_id_mutex;
  94. krb5_enctype *enctypes;
  95. } *gsskrb5_cred;
  96. typedef struct Principal *gsskrb5_name;
  97. /*
  98. *
  99. */
  100. extern krb5_keytab _gsskrb5_keytab;
  101. extern HEIMDAL_MUTEX gssapi_keytab_mutex;
  102. /*
  103. * Prototypes
  104. */
  105. #include <gsskrb5-private.h>
  106. #define GSSAPI_KRB5_INIT(ctx) do { \
  107. krb5_error_code kret_gss_init; \
  108. if((kret_gss_init = _gsskrb5_init (ctx)) != 0) { \
  109. *minor_status = kret_gss_init; \
  110. return GSS_S_FAILURE; \
  111. } \
  112. } while (0)
  113. /* sec_context flags */
  114. #define SC_LOCAL_ADDRESS 0x01
  115. #define SC_REMOTE_ADDRESS 0x02
  116. #define SC_KEYBLOCK 0x04
  117. #define SC_LOCAL_SUBKEY 0x08
  118. #define SC_REMOTE_SUBKEY 0x10
  119. /* type to signal that that dns canon maybe should be done */
  120. #define MAGIC_HOSTBASED_NAME_TYPE 4711
  121. #endif