source3/libads/kerberos_proto.h

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *  kerberos utility library
   4  *
   5  *  Copyright (C) Andrew Tridgell                       2001
   6  *  Copyright (C) Remus Koos (remuskoos@yahoo.com)      2001
   7  *  Copyright (C) Luke Howard                           2002-2003
   8  *  Copyright (C) Jim McDonough <jmcd@us.ibm.com>       2003
   9  *  Copyright (C) Guenther Deschner                     2003-2008
  10  *  Copyright (C) Andrew Bartlett <abartlet@samba.org>  2004-2005
  11  *  Copyright (C) Jeremy Allison                        2004,2007
  12  *  Copyright (C) Stefan Metzmacher                     2004-2005
  13  *  Copyright (C) Nalin Dahyabhai <nalin@redhat.com>    2004
  14  *  Copyright (C) Gerald Carter                         2006
  15  *
  16  *  This program is free software; you can redistribute it and/or modify
  17  *  it under the terms of the GNU General Public License as published by
  18  *  the Free Software Foundation; either version 3 of the License, or
  19  *  (at your option) any later version.
  20  *
  21  *  This program is distributed in the hope that it will be useful,
  22  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  23  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  24  *  GNU General Public License for more details.
  25  *
  26  *  You should have received a copy of the GNU General Public License
  27  *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
  28  */
  29
  30 #ifndef _LIBADS_KERBEROS_PROTO_H_
  31 #define _LIBADS_KERBEROS_PROTO_H_
  32
  33 #include "system/kerberos.h"
  34
  35 struct PAC_DATA;
  36
  37 struct PAC_DATA_CTR {
  38         DATA_BLOB pac_blob;
  39         struct PAC_DATA *pac_data;
  40 };
  41
  42 #define DEFAULT_KRB5_PORT 88
  43
  44 #include "libads/ads_status.h"
  45
  46 /* The following definitions come from libads/kerberos.c  */
  47
  48 int kerberos_kinit_password_ext(const char *principal,
  49                                 const char *password,
  50                                 int time_offset,
  51                                 time_t *expire_time,
  52                                 time_t *renew_till_time,
  53                                 const char *cache_name,
  54                                 bool request_pac,
  55                                 bool add_netbios_addr,
  56                                 time_t renewable_time,
  57                                 NTSTATUS *ntstatus);
  58 int ads_kdestroy(const char *cc_name);
  59 char* kerberos_standard_des_salt( void );
  60 bool kerberos_secrets_store_des_salt( const char* salt );
  61 char *kerberos_fetch_salt_princ_for_host_princ(krb5_context context,
  62                                                const char *host_princ_s,
  63                                                int enctype);
  64
  65 bool kerberos_secrets_store_salting_principal(const char *service,
  66                                               int enctype,
  67                                               const char *principal);
  68 int kerberos_kinit_password(const char *principal,
  69                             const char *password,
  70                             int time_offset,
  71                             const char *cache_name);
  72 bool create_local_private_krb5_conf_for_domain(const char *realm,
  73                                                 const char *domain,
  74                                                 const char *sitename,
  75                                                 const struct sockaddr_storage *pss);
  76
  77 /* The following definitions come from libads/authdata.c  */
  78
  79 NTSTATUS kerberos_return_pac(TALLOC_CTX *mem_ctx,
  80                              const char *name,
  81                              const char *pass,
  82                              time_t time_offset,
  83                              time_t *expire_time,
  84                              time_t *renew_till_time,
  85                              const char *cache_name,
  86                              bool request_pac,
  87                              bool add_netbios_addr,
  88                              time_t renewable_time,
  89                              const char *impersonate_princ_s,
  90                              const char *local_service,
  91                              struct PAC_DATA_CTR **pac_data_ctr);
  92
  93 /* The following definitions come from libads/krb5_setpw.c  */
  94
  95 ADS_STATUS ads_krb5_set_password(const char *kdc_host, const char *princ,
  96                                  const char *newpw, int time_offset);
  97 ADS_STATUS kerberos_set_password(const char *kpasswd_server,
  98                                  const char *auth_principal, const char *auth_password,
  99                                  const char *target_principal, const char *new_password,
 100                                  int time_offset);
 101
 102 #ifdef HAVE_KRB5
 103 int create_kerberos_key_from_string(krb5_context context,
 104                                         krb5_principal host_princ,
 105                                         krb5_principal salt_princ,
 106                                         krb5_data *password,
 107                                         krb5_keyblock *key,
 108                                         krb5_enctype enctype,
 109                                         bool no_salt);
 110 #endif
 111
 112 #endif /* _LIBADS_KERBEROS_PROTO_H_ */