2 struct PAC_SIGNATURE_DATA
;
4 /* work around broken krb5.h on sles9 */
10 #if defined(HAVE_KRB5)
11 krb5_error_code
smb_krb5_parse_name(krb5_context context
,
12 const char *name
, /* in unix charset */
13 krb5_principal
*principal
);
15 krb5_error_code
smb_krb5_unparse_name(TALLOC_CTX
*mem_ctx
,
17 krb5_const_principal principal
,
20 #ifndef HAVE_KRB5_SET_REAL_TIME
21 krb5_error_code
krb5_set_real_time(krb5_context context
, int32_t seconds
, int32_t microseconds
);
24 krb5_error_code
krb5_set_default_tgs_ktypes(krb5_context ctx
, const krb5_enctype
*enc
);
26 #if defined(HAVE_KRB5_AUTH_CON_SETKEY) && !defined(HAVE_KRB5_AUTH_CON_SETUSERUSERKEY)
27 krb5_error_code
krb5_auth_con_setuseruserkey(krb5_context context
, krb5_auth_context auth_context
, krb5_keyblock
*keyblock
);
30 #ifndef HAVE_KRB5_FREE_UNPARSED_NAME
31 void krb5_free_unparsed_name(krb5_context ctx
, char *val
);
34 /* Stub out initialize_krb5_error_table since it is not present in all
35 * Kerberos implementations. If it's not present, it's not necessary to
38 #ifndef HAVE_INITIALIZE_KRB5_ERROR_TABLE
39 #define initialize_krb5_error_table()
42 /* Samba wrapper function for krb5 functionality. */
43 bool setup_kaddr( krb5_address
*pkaddr
, struct sockaddr_storage
*paddr
);
44 int create_kerberos_key_from_string(krb5_context context
, krb5_principal host_princ
, krb5_data
*password
, krb5_keyblock
*key
, krb5_enctype enctype
, bool no_salt
);
45 bool get_auth_data_from_tkt(TALLOC_CTX
*mem_ctx
, DATA_BLOB
*auth_data
, krb5_ticket
*tkt
);
46 krb5_const_principal
get_principal_from_tkt(krb5_ticket
*tkt
);
47 krb5_error_code
smb_krb5_locate_kdc(krb5_context ctx
, const krb5_data
*realm
, struct sockaddr
**addr_pp
, int *naddrs
, int get_masters
);
48 #if defined(HAVE_KRB5_LOCATE_KDC)
49 krb5_error_code
krb5_locate_kdc(krb5_context ctx
, const krb5_data
*realm
, struct sockaddr
**addr_pp
, int *naddrs
, int get_masters
);
51 krb5_error_code
get_kerberos_allowed_etypes(krb5_context context
, krb5_enctype
**enctypes
);
52 bool get_krb5_smb_session_key(TALLOC_CTX
*mem_ctx
,
54 krb5_auth_context auth_context
,
55 DATA_BLOB
*session_key
, bool remote
);
56 krb5_error_code
smb_krb5_kt_free_entry(krb5_context context
, krb5_keytab_entry
*kt_entry
);
57 krb5_principal
kerberos_fetch_salt_princ_for_host_princ(krb5_context context
, krb5_principal host_princ
, int enctype
);
58 void kerberos_set_creds_enctype(krb5_creds
*pcreds
, int enctype
);
59 bool kerberos_compatible_enctypes(krb5_context context
, krb5_enctype enctype1
, krb5_enctype enctype2
);
60 void kerberos_free_data_contents(krb5_context context
, krb5_data
*pdata
);
61 NTSTATUS
decode_pac_data(TALLOC_CTX
*mem_ctx
,
62 DATA_BLOB
*pac_data_blob
,
64 krb5_keyblock
*service_keyblock
,
65 krb5_const_principal client_principal
,
67 struct PAC_DATA
**pac_data_out
);
68 void smb_krb5_checksum_from_pac_sig(krb5_checksum
*cksum
,
69 struct PAC_SIGNATURE_DATA
*sig
);
70 krb5_error_code
smb_krb5_verify_checksum(krb5_context context
,
71 const krb5_keyblock
*keyblock
,
76 time_t get_authtime_from_tkt(krb5_ticket
*tkt
);
77 void smb_krb5_free_ap_req(krb5_context context
,
79 krb5_error_code
smb_krb5_get_keyinfo_from_ap_req(krb5_context context
,
80 const krb5_data
*inbuf
,
82 krb5_enctype
*enctype
);
83 krb5_error_code
krb5_rd_req_return_keyblock_from_keytab(krb5_context context
,
84 krb5_auth_context
*auth_context
,
85 const krb5_data
*inbuf
,
86 krb5_const_principal server
,
88 krb5_flags
*ap_req_options
,
90 krb5_keyblock
**keyblock
);
91 krb5_error_code
smb_krb5_parse_name_norealm(krb5_context context
,
93 krb5_principal
*principal
);
94 bool smb_krb5_principal_compare_any_realm(krb5_context context
,
95 krb5_const_principal princ1
,
96 krb5_const_principal princ2
);
97 krb5_error_code
smb_krb5_renew_ticket(const char *ccache_string
, const char *client_string
, const char *service_string
, time_t *expire_time
);
98 krb5_error_code
kpasswd_err_to_krb5_err(krb5_error_code res_code
);
99 krb5_error_code
smb_krb5_gen_netbios_krb5_address(smb_krb5_addresses
**kerb_addr
);
100 krb5_error_code
smb_krb5_free_addresses(krb5_context context
, smb_krb5_addresses
*addr
);
101 NTSTATUS
krb5_to_nt_status(krb5_error_code kerberos_error
);
102 krb5_error_code
nt_status_to_krb5(NTSTATUS nt_status
);
103 void smb_krb5_free_error(krb5_context context
, krb5_error
*krberror
);
104 krb5_error_code
handle_krberror_packet(krb5_context context
,
107 void smb_krb5_get_init_creds_opt_free(krb5_context context
,
108 krb5_get_init_creds_opt
*opt
);
109 krb5_error_code
smb_krb5_get_init_creds_opt_alloc(krb5_context context
,
110 krb5_get_init_creds_opt
**opt
);
111 krb5_error_code
smb_krb5_mk_error(krb5_context context
,
112 krb5_error_code error_code
,
113 const krb5_principal server
,
115 krb5_enctype
smb_get_enctype_from_kt_entry(krb5_keytab_entry
*kt_entry
);
116 krb5_error_code
smb_krb5_enctype_to_string(krb5_context context
,
117 krb5_enctype enctype
,
119 krb5_error_code
smb_krb5_open_keytab(krb5_context context
,
120 const char *keytab_name
,
122 krb5_keytab
*keytab
);
123 krb5_error_code
smb_krb5_keytab_name(TALLOC_CTX
*mem_ctx
,
124 krb5_context context
,
126 const char **keytab_name
);
127 int smb_krb5_kt_add_entry_ext(krb5_context context
,
131 krb5_enctype
*enctypes
,
134 bool keep_old_entries
);
135 krb5_error_code
smb_krb5_get_credentials(krb5_context context
,
138 krb5_principal server
,
139 krb5_principal impersonate_princ
,
140 krb5_creds
**out_creds
);
141 krb5_error_code
smb_krb5_get_creds(const char *server_s
,
144 const char *impersonate_princ_s
,
145 krb5_creds
**creds_p
);
146 char *smb_krb5_principal_get_realm(krb5_context context
,
147 krb5_principal principal
);
148 #endif /* HAVE_KRB5 */
150 int cli_krb5_get_ticket(TALLOC_CTX
*mem_ctx
,
151 const char *principal
, time_t time_offset
,
152 DATA_BLOB
*ticket
, DATA_BLOB
*session_key_krb5
,
153 uint32_t extra_ap_opts
, const char *ccname
,
155 const char *impersonate_princ_s
);