libcli/auth/spnego.h

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    RFC2478 Compliant SPNEGO implementation
   5
   6    Copyright (C) Jim McDonough <jmcd@us.ibm.com>   2003
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License as published by
  10    the Free Software Foundation; either version 3 of the License, or
  11    (at your option) any later version.
  12
  13    This program is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16    GNU General Public License for more details.
  17
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #define OID_SPNEGO "1.3.6.1.5.5.2"
  24 #define OID_NTLMSSP "1.3.6.1.4.1.311.2.2.10"
  25 #define OID_KERBEROS5_OLD "1.2.840.48018.1.2.2"
  26 #define OID_KERBEROS5 "1.2.840.113554.1.2.2"
  27
  28 #define SPNEGO_DELEG_FLAG    0x01
  29 #define SPNEGO_MUTUAL_FLAG   0x02
  30 #define SPNEGO_REPLAY_FLAG   0x04
  31 #define SPNEGO_SEQUENCE_FLAG 0x08
  32 #define SPNEGO_ANON_FLAG     0x10
  33 #define SPNEGO_CONF_FLAG     0x20
  34 #define SPNEGO_INTEG_FLAG    0x40
  35
  36 #define TOK_ID_KRB_AP_REQ       ((const uint8_t *)"\x01\x00")
  37 #define TOK_ID_KRB_AP_REP       ((const uint8_t *)"\x02\x00")
  38 #define TOK_ID_KRB_ERROR        ((const uint8_t *)"\x03\x00")
  39 #define TOK_ID_GSS_GETMIC       ((const uint8_t *)"\x01\x01")
  40 #define TOK_ID_GSS_WRAP         ((const uint8_t *)"\x02\x01")
  41
  42 enum spnego_negResult {
  43         SPNEGO_ACCEPT_COMPLETED = 0,
  44         SPNEGO_ACCEPT_INCOMPLETE = 1,
  45         SPNEGO_REJECT = 2,
  46         SPNEGO_NONE_RESULT = 3
  47 };
  48
  49 struct spnego_negTokenInit {
  50         const char **mechTypes;
  51         DATA_BLOB reqFlags;
  52         uint8_t reqFlagsPadding;
  53         DATA_BLOB mechToken;
  54         DATA_BLOB mechListMIC;
  55         char *targetPrincipal;
  56 };
  57
  58 struct spnego_negTokenTarg {
  59         uint8_t negResult;
  60         const char *supportedMech;
  61         DATA_BLOB responseToken;
  62         DATA_BLOB mechListMIC;
  63 };
  64
  65 struct spnego_data {
  66         int type;
  67         struct spnego_negTokenInit negTokenInit;
  68         struct spnego_negTokenTarg negTokenTarg;
  69 };
  70
  71 enum spnego_message_type {
  72         SPNEGO_NEG_TOKEN_INIT = 0,
  73         SPNEGO_NEG_TOKEN_TARG = 1,
  74 };
  75
  76 #include "../libcli/auth/spnego_proto.h"