kdc/kdc_locl.h

   1 /*
   2  * Copyright (c) 1997-2003 Kungliga Tekniska Högskolan
   3  * (Royal Institute of Technology, Stockholm, Sweden).
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  *
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  *
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  *
  17  * 3. Neither the name of the Institute nor the names of its contributors
  18  *    may be used to endorse or promote products derived from this software
  19  *    without specific prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  31  * SUCH DAMAGE.
  32  */
  33
  34 /*
  35  * $Id$
  36  */
  37
  38 #ifndef __KDC_LOCL_H__
  39 #define __KDC_LOCL_H__
  40
  41 #include "headers.h"
  42
  43 extern krb5_context context;
  44
  45 extern int require_preauth;
  46 extern sig_atomic_t exit_flag;
  47 extern size_t max_request;
  48 extern time_t kdc_warn_pwexpire;
  49 extern struct dbinfo {
  50     char *realm;
  51     char *dbname;
  52     char *mkey_file;
  53     struct dbinfo *next;
  54 } *databases;
  55 extern HDB **db;
  56 extern int num_db;
  57 extern const char *port_str;
  58 extern krb5_addresses explicit_addresses;
  59
  60 extern int enable_http;
  61 extern krb5_boolean encode_as_rep_as_tgs_rep;
  62 extern krb5_boolean check_ticket_addresses;
  63 extern krb5_boolean allow_null_ticket_addresses;
  64 extern krb5_boolean allow_anonymous;
  65 enum { TRPOLICY_ALWAYS_CHECK,
  66        TRPOLICY_ALLOW_PER_PRINCIPAL,
  67        TRPOLICY_ALWAYS_HONOUR_REQUEST };
  68 extern int trpolicy;
  69 extern int enable_524;
  70 extern int enable_v4_cross_realm;
  71
  72 #ifdef KRB4
  73 extern char *v4_realm;
  74 extern int enable_v4;
  75 extern krb5_boolean enable_kaserver;
  76 #endif
  77
  78 #define _PATH_KDC_CONF          HDB_DB_DIR "/kdc.conf"
  79 #define DEFAULT_LOG_DEST        "0-1/FILE:" HDB_DB_DIR "/kdc.log"
  80
  81 extern struct timeval now;
  82 #define kdc_time (now.tv_sec)
  83
  84 krb5_error_code as_rep (KDC_REQ*, krb5_data*, const char*, struct sockaddr*);
  85 void configure (int, char**);
  86 krb5_error_code db_fetch (krb5_principal, hdb_entry**);
  87 void free_ent(hdb_entry *);
  88 void kdc_log (int, const char*, ...)
  89     __attribute__ ((format (printf, 2,3)));
  90
  91 char* kdc_log_msg (int, const char*, ...)
  92     __attribute__ ((format (printf, 2,3)));
  93 char* kdc_log_msg_va (int, const char*, va_list)
  94     __attribute__ ((format (printf, 2,0)));
  95 void kdc_openlog (void);
  96 void loop (void);
  97 void set_master_key (EncryptionKey);
  98 krb5_error_code tgs_rep (KDC_REQ*, krb5_data*, const char*, struct sockaddr *);
  99 Key* unseal_key (Key*);
 100 krb5_error_code check_flags(hdb_entry *client, const char *client_name,
 101                             hdb_entry *server, const char *server_name,
 102                             krb5_boolean is_as_req);
 103
 104 krb5_error_code get_des_key(hdb_entry*, krb5_boolean, krb5_boolean, Key**);
 105 krb5_error_code encode_v4_ticket (void*, size_t, const EncTicketPart*,
 106                                   const PrincipalName*, size_t*);
 107 krb5_error_code do_524 (const Ticket*, krb5_data*, const char*, struct sockaddr*);
 108
 109 #ifdef KRB4
 110 krb5_error_code db_fetch4 (const char*, const char*, const char*, hdb_entry**);
 111 krb5_error_code do_version4 (unsigned char*, size_t, krb5_data*, const char*,
 112                              struct sockaddr_in*);
 113 int maybe_version4 (unsigned char*, int);
 114 #endif
 115
 116 #ifdef KRB4
 117 krb5_error_code do_kaserver (unsigned char*, size_t, krb5_data*, const char*,
 118                              struct sockaddr_in*);
 119 #endif
 120
 121 #ifdef HAVE_OPENSSL
 122 #define des_new_random_key des_random_key
 123 #endif
 124
 125 #endif /* __KDC_LOCL_H__ */