libcli/auth/spnego.h

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    RFC2478 Compliant SPNEGO implementation
   5
   6    Copyright (C) Jim McDonough <jmcd@us.ibm.com>   2003
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License as published by
  10    the Free Software Foundation; either version 3 of the License, or
  11    (at your option) any later version.
  12
  13    This program is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16    GNU General Public License for more details.
  17
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #define OID_SPNEGO "1.3.6.1.5.5.2"
  24 #define OID_NTLMSSP "1.3.6.1.4.1.311.2.2.10"
  25 #define OID_KERBEROS5_OLD "1.2.840.48018.1.2.2"
  26 #define OID_KERBEROS5 "1.2.840.113554.1.2.2"
  27
  28 #define ADS_IGNORE_PRINCIPAL "not_defined_in_RFC4178@please_ignore"
  29
  30 #define SPNEGO_DELEG_FLAG    0x01
  31 #define SPNEGO_MUTUAL_FLAG   0x02
  32 #define SPNEGO_REPLAY_FLAG   0x04
  33 #define SPNEGO_SEQUENCE_FLAG 0x08
  34 #define SPNEGO_ANON_FLAG     0x10
  35 #define SPNEGO_CONF_FLAG     0x20
  36 #define SPNEGO_INTEG_FLAG    0x40
  37
  38 #define TOK_ID_KRB_AP_REQ       ((const uint8_t *)"\x01\x00")
  39 #define TOK_ID_KRB_AP_REP       ((const uint8_t *)"\x02\x00")
  40 #define TOK_ID_KRB_ERROR        ((const uint8_t *)"\x03\x00")
  41 #define TOK_ID_GSS_GETMIC       ((const uint8_t *)"\x01\x01")
  42 #define TOK_ID_GSS_WRAP         ((const uint8_t *)"\x02\x01")
  43
  44 enum spnego_negResult {
  45         SPNEGO_ACCEPT_COMPLETED = 0,
  46         SPNEGO_ACCEPT_INCOMPLETE = 1,
  47         SPNEGO_REJECT = 2,
  48         SPNEGO_NONE_RESULT = 3
  49 };
  50
  51 struct spnego_negTokenInit {
  52         const char **mechTypes;
  53         DATA_BLOB reqFlags;
  54         uint8_t reqFlagsPadding;
  55         DATA_BLOB mechToken;
  56         DATA_BLOB mechListMIC;
  57         char *targetPrincipal;
  58 };
  59
  60 struct spnego_negTokenTarg {
  61         uint8_t negResult;
  62         const char *supportedMech;
  63         DATA_BLOB responseToken;
  64         DATA_BLOB mechListMIC;
  65 };
  66
  67 struct spnego_data {
  68         int type;
  69         struct spnego_negTokenInit negTokenInit;
  70         struct spnego_negTokenTarg negTokenTarg;
  71 };
  72
  73 enum spnego_message_type {
  74         SPNEGO_NEG_TOKEN_INIT = 0,
  75         SPNEGO_NEG_TOKEN_TARG = 1,
  76 };
  77
  78 #include "../libcli/auth/spnego_proto.h"