2 Unix SMB/CIFS implementation.
3 kerberos authorization data (PAC) utility library
4 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2011
5 Copyright (C) Simo Sorce 2010-2012
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "lib/krb5_wrap/krb5_samba.h"
25 #include "lib/krb5_wrap/gss_samba.h"
27 struct PAC_SIGNATURE_DATA
;
29 struct PAC_LOGON_INFO
;
31 krb5_error_code
check_pac_checksum(DATA_BLOB pac_data
,
32 struct PAC_SIGNATURE_DATA
*sig
,
34 const krb5_keyblock
*keyblock
);
36 NTSTATUS
kerberos_decode_pac(TALLOC_CTX
*mem_ctx
,
37 DATA_BLOB pac_data_blob
,
39 const krb5_keyblock
*krbtgt_keyblock
,
40 const krb5_keyblock
*service_keyblock
,
41 krb5_const_principal client_principal
,
43 struct PAC_DATA
**pac_data_out
);
45 NTSTATUS
kerberos_pac_logon_info(TALLOC_CTX
*mem_ctx
,
48 const krb5_keyblock
*krbtgt_keyblock
,
49 const krb5_keyblock
*service_keyblock
,
50 krb5_const_principal client_principal
,
52 struct PAC_LOGON_INFO
**logon_info
);
54 NTSTATUS
gssapi_obtain_pac_blob(TALLOC_CTX
*mem_ctx
,
55 gss_ctx_id_t gssapi_context
,
56 gss_name_t gss_client_name
,
58 NTSTATUS
gssapi_get_session_key(TALLOC_CTX
*mem_ctx
,
59 gss_ctx_id_t gssapi_context
,
60 DATA_BLOB
*session_key
,
63 /* not the best place here, need to move to a more generic gssapi
65 char *gssapi_error_string(TALLOC_CTX
*mem_ctx
,
66 OM_uint32 maj_stat
, OM_uint32 min_stat
,
68 #endif /* _PAC_UTILS_H */