2 * Copyright (c) 1997 - 2006 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 /* $Id: gssapi_krb5.h,v 1.17 2006/11/10 01:05:34 lha Exp $ */
36 #ifndef GSSAPI_KRB5_H_
37 #define GSSAPI_KRB5_H_
39 #include <gssapi/gssapi.h>
46 * This is for kerberos5 names.
49 extern gss_OID GSS_KRB5_NT_PRINCIPAL_NAME
;
50 extern gss_OID GSS_KRB5_NT_USER_NAME
;
51 extern gss_OID GSS_KRB5_NT_MACHINE_UID_NAME
;
52 extern gss_OID GSS_KRB5_NT_STRING_UID_NAME
;
54 extern gss_OID GSS_KRB5_MECHANISM
;
56 /* for compatibility with MIT api */
58 #define gss_mech_krb5 GSS_KRB5_MECHANISM
59 #define gss_krb5_nt_general_name GSS_KRB5_NT_PRINCIPAL_NAME
61 /* Extensions set contexts options */
62 extern gss_OID GSS_KRB5_COPY_CCACHE_X
;
63 extern gss_OID GSS_KRB5_COMPAT_DES3_MIC_X
;
64 extern gss_OID GSS_KRB5_REGISTER_ACCEPTOR_IDENTITY_X
;
65 extern gss_OID GSS_KRB5_SET_DNS_CANONICALIZE_X
;
66 extern gss_OID GSS_KRB5_SEND_TO_KDC_X
;
67 extern gss_OID GSS_KRB5_SET_DEFAULT_REALM_X
;
68 /* Extensions inquire context */
69 extern gss_OID GSS_KRB5_GET_TKT_FLAGS_X
;
70 extern gss_OID GSS_KRB5_EXTRACT_AUTHZ_DATA_FROM_SEC_CONTEXT_X
;
71 extern gss_OID GSS_C_PEER_HAS_UPDATED_SPNEGO
;
72 extern gss_OID GSS_KRB5_EXPORT_LUCID_CONTEXT_X
;
73 extern gss_OID GSS_KRB5_EXPORT_LUCID_CONTEXT_V1_X
;
74 extern gss_OID GSS_KRB5_GET_SUBKEY_X
;
75 extern gss_OID GSS_KRB5_GET_INITIATOR_SUBKEY_X
;
76 extern gss_OID GSS_KRB5_GET_ACCEPTOR_SUBKEY_X
;
77 extern gss_OID GSS_KRB5_GET_AUTHTIME_X
;
78 extern gss_OID GSS_KRB5_GET_SERVICE_KEYBLOCK_X
;
79 /* Extensions creds */
80 extern gss_OID GSS_KRB5_IMPORT_CRED_X
;
81 extern gss_OID GSS_KRB5_SET_ALLOWABLE_ENCTYPES_X
;
84 * kerberos mechanism specific functions
87 struct krb5_keytab_data
;
88 struct krb5_ccache_data
;
92 gss_krb5_ccache_name(OM_uint32
* /*minor_status*/,
93 const char * /*name */,
94 const char ** /*out_name */);
96 OM_uint32 gsskrb5_register_acceptor_identity
97 (const char */
*identity*/
);
99 OM_uint32 gss_krb5_copy_ccache
100 (OM_uint32 */
*minor*/
,
101 gss_cred_id_t
/*cred*/,
102 struct krb5_ccache_data */
*out*/
);
105 gss_krb5_import_cred(OM_uint32 */
*minor*/
,
106 struct krb5_ccache_data
* /*in*/,
107 struct Principal
* /*keytab_principal*/,
108 struct krb5_keytab_data
* /*keytab*/,
109 gss_cred_id_t */
*out*/
);
111 OM_uint32 gss_krb5_get_tkt_flags
112 (OM_uint32 */
*minor*/
,
113 gss_ctx_id_t
/*context_handle*/,
114 OM_uint32 */
*tkt_flags*/
);
117 gsskrb5_extract_authz_data_from_sec_context
118 (OM_uint32
* /*minor_status*/,
119 gss_ctx_id_t
/*context_handle*/,
121 gss_buffer_t
/*ad_data*/);
124 gsskrb5_set_dns_canonicalize(int);
126 struct gsskrb5_send_to_kdc
{
132 gsskrb5_set_send_to_kdc(struct gsskrb5_send_to_kdc
*);
135 gsskrb5_set_default_realm(const char *);
138 gsskrb5_extract_authtime_from_sec_context(OM_uint32
*, gss_ctx_id_t
, time_t *);
140 struct EncryptionKey
;
143 gsskrb5_extract_service_keyblock(OM_uint32
*minor_status
,
144 gss_ctx_id_t context_handle
,
145 struct EncryptionKey
**out
);
147 gsskrb5_get_initiator_subkey(OM_uint32
*minor_status
,
148 gss_ctx_id_t context_handle
,
149 struct EncryptionKey
**out
);
151 gsskrb5_get_subkey(OM_uint32
*minor_status
,
152 gss_ctx_id_t context_handle
,
153 struct EncryptionKey
**out
);
156 * Lucid - NFSv4 interface to GSS-API KRB5 to expose key material to
157 * do GSS content token handling in-kernel.
160 typedef struct gss_krb5_lucid_key
{
164 } gss_krb5_lucid_key_t
;
166 typedef struct gss_krb5_rfc1964_keydata
{
169 gss_krb5_lucid_key_t ctx_key
;
170 } gss_krb5_rfc1964_keydata_t
;
172 typedef struct gss_krb5_cfx_keydata
{
173 OM_uint32 have_acceptor_subkey
;
174 gss_krb5_lucid_key_t ctx_key
;
175 gss_krb5_lucid_key_t acceptor_subkey
;
176 } gss_krb5_cfx_keydata_t
;
178 typedef struct gss_krb5_lucid_context_v1
{
185 gss_krb5_rfc1964_keydata_t rfc1964_kd
;
186 gss_krb5_cfx_keydata_t cfx_kd
;
187 } gss_krb5_lucid_context_v1_t
;
189 typedef struct gss_krb5_lucid_context_version
{
190 OM_uint32 version
; /* Structure version number */
191 } gss_krb5_lucid_context_version_t
;
194 * Function declarations
198 gss_krb5_export_lucid_sec_context(OM_uint32
*minor_status
,
199 gss_ctx_id_t
*context_handle
,
205 gss_krb5_free_lucid_sec_context(OM_uint32
*minor_status
,
210 gss_krb5_set_allowable_enctypes(OM_uint32
*minor_status
,
212 OM_uint32 num_enctypes
,
219 #endif /* GSSAPI_SPNEGO_H_ */