source4/kdc/kdc-glue.h

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    KDC structures
   5
   6    Copyright (C) Andrew Tridgell        2005
   7    Copyright (C) Andrew Bartlett <abartlet@samba.org> 2005
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #ifndef _KDC_KDC_H
  24 #define _KDC_KDC_H
  25
  26 #include "system/kerberos.h"
  27 #include "auth/kerberos/kerberos.h"
  28 #include <hdb.h>
  29 #include <kdc.h>
  30 #include <krb5/windc_plugin.h>
  31 #include "kdc/samba_kdc.h"
  32
  33 struct tsocket_address;
  34
  35 /*
  36   top level context structure for the kdc server
  37 */
  38 struct kdc_server {
  39         struct task_server *task;
  40         krb5_kdc_configuration *config;
  41         struct smb_krb5_context *smb_krb5_context;
  42         struct samba_kdc_base_context *base_ctx;
  43         struct ldb_context *samdb;
  44         bool am_rodc;
  45         uint32_t proxy_timeout;
  46 };
  47
  48 enum kdc_process_ret {
  49         KDC_PROCESS_OK=0,
  50         KDC_PROCESS_FAILED,
  51         KDC_PROCESS_PROXY};
  52
  53 enum kdc_process_ret kpasswdd_process(struct kdc_server *kdc,
  54                                       TALLOC_CTX *mem_ctx,
  55                                       DATA_BLOB *input,
  56                                       DATA_BLOB *reply,
  57                                       struct tsocket_address *peer_addr,
  58                                       struct tsocket_address *my_addr,
  59                                       int datagram_reply);
  60
  61 /* from hdb-samba4.c */
  62 NTSTATUS hdb_samba4_create_kdc(struct samba_kdc_base_context *base_ctx,
  63                                krb5_context context, struct HDB **db);
  64
  65 /* from proxy.c */
  66 struct tevent_req *kdc_udp_proxy_send(TALLOC_CTX *mem_ctx,
  67                                       struct tevent_context *ev,
  68                                       struct kdc_server *kdc,
  69                                       uint16_t port,
  70                                       DATA_BLOB in);
  71 NTSTATUS kdc_udp_proxy_recv(struct tevent_req *req,
  72                             TALLOC_CTX *mem_ctx,
  73                             DATA_BLOB *out);
  74
  75 struct tevent_req *kdc_tcp_proxy_send(TALLOC_CTX *mem_ctx,
  76                                       struct tevent_context *ev,
  77                                       struct kdc_server *kdc,
  78                                       uint16_t port,
  79                                       DATA_BLOB in);
  80 NTSTATUS kdc_tcp_proxy_recv(struct tevent_req *req,
  81                             TALLOC_CTX *mem_ctx,
  82                             DATA_BLOB *out);
  83
  84 /* from kdc-glue.c */
  85 int kdc_check_pac(krb5_context krb5_context,
  86                   DATA_BLOB server_sig,
  87                   struct PAC_SIGNATURE_DATA *kdc_sig,
  88                   hdb_entry_ex *ent);
  89 #endif