lib/libgssapi/mech_switch.h

   1 /*-
   2  * Copyright (c) 2005 Doug Rabson
   3  * All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions
   7  * are met:
   8  * 1. Redistributions of source code must retain the above copyright
   9  *    notice, this list of conditions and the following disclaimer.
  10  * 2. Redistributions in binary form must reproduce the above copyright
  11  *    notice, this list of conditions and the following disclaimer in the
  12  *    documentation and/or other materials provided with the distribution.
  13  *
  14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  24  * SUCH DAMAGE.
  25  *
  26  *      $FreeBSD$
  27  */
  28
  29 #include <unistd.h>
  30 #include <sys/queue.h>
  31
  32 typedef OM_uint32 _gss_acquire_cred_t
  33               (OM_uint32 *,            /* minor_status */
  34                const gss_name_t,       /* desired_name */
  35                OM_uint32,              /* time_req */
  36                const gss_OID_set,      /* desired_mechs */
  37                gss_cred_usage_t,       /* cred_usage */
  38                gss_cred_id_t *,        /* output_cred_handle */
  39                gss_OID_set *,          /* actual_mechs */
  40                OM_uint32 *             /* time_rec */
  41               );
  42
  43 typedef OM_uint32 _gss_release_cred_t
  44               (OM_uint32 *,            /* minor_status */
  45                gss_cred_id_t *         /* cred_handle */
  46               );
  47
  48 typedef OM_uint32 _gss_init_sec_context_t
  49               (OM_uint32 *,            /* minor_status */
  50                const gss_cred_id_t,    /* initiator_cred_handle */
  51                gss_ctx_id_t *,         /* context_handle */
  52                const gss_name_t,       /* target_name */
  53                const gss_OID,          /* mech_type */
  54                OM_uint32,              /* req_flags */
  55                OM_uint32,              /* time_req */
  56                const gss_channel_bindings_t,
  57                                        /* input_chan_bindings */
  58                const gss_buffer_t,     /* input_token */
  59                gss_OID *,              /* actual_mech_type */
  60                gss_buffer_t,           /* output_token */
  61                OM_uint32 *,            /* ret_flags */
  62                OM_uint32 *             /* time_rec */
  63               );
  64
  65 typedef OM_uint32 _gss_accept_sec_context_t
  66               (OM_uint32 *,            /* minor_status */
  67                gss_ctx_id_t *,         /* context_handle */
  68                const gss_cred_id_t,    /* acceptor_cred_handle */
  69                const gss_buffer_t,     /* input_token_buffer */
  70                const gss_channel_bindings_t,
  71                                        /* input_chan_bindings */
  72                gss_name_t *,           /* src_name */
  73                gss_OID *,              /* mech_type */
  74                gss_buffer_t,           /* output_token */
  75                OM_uint32 *,            /* ret_flags */
  76                OM_uint32 *,            /* time_rec */
  77                gss_cred_id_t *         /* delegated_cred_handle */
  78               );
  79
  80 typedef OM_uint32 _gss_process_context_token_t
  81               (OM_uint32 *,            /* minor_status */
  82                const gss_ctx_id_t,     /* context_handle */
  83                const gss_buffer_t      /* token_buffer */
  84               );
  85
  86 typedef OM_uint32 _gss_delete_sec_context_t
  87               (OM_uint32 *,            /* minor_status */
  88                gss_ctx_id_t *,         /* context_handle */
  89                gss_buffer_t            /* output_token */
  90               );
  91
  92 typedef OM_uint32 _gss_context_time_t
  93               (OM_uint32 *,            /* minor_status */
  94                const gss_ctx_id_t,     /* context_handle */
  95                OM_uint32 *             /* time_rec */
  96               );
  97
  98 typedef OM_uint32 _gss_get_mic_t
  99               (OM_uint32 *,            /* minor_status */
 100                const gss_ctx_id_t,     /* context_handle */
 101                gss_qop_t,              /* qop_req */
 102                const gss_buffer_t,     /* message_buffer */
 103                gss_buffer_t            /* message_token */
 104               );
 105
 106 typedef OM_uint32 _gss_verify_mic_t
 107               (OM_uint32 *,            /* minor_status */
 108                const gss_ctx_id_t,     /* context_handle */
 109                const gss_buffer_t,     /* message_buffer */
 110                const gss_buffer_t,     /* token_buffer */
 111                gss_qop_t *             /* qop_state */
 112               );
 113
 114 typedef OM_uint32 _gss_wrap_t
 115               (OM_uint32 *,            /* minor_status */
 116                const gss_ctx_id_t,     /* context_handle */
 117                int,                    /* conf_req_flag */
 118                gss_qop_t,              /* qop_req */
 119                const gss_buffer_t,     /* input_message_buffer */
 120                int *,                  /* conf_state */
 121                gss_buffer_t            /* output_message_buffer */
 122               );
 123
 124 typedef OM_uint32 _gss_unwrap_t
 125               (OM_uint32 *,            /* minor_status */
 126                const gss_ctx_id_t,     /* context_handle */
 127                const gss_buffer_t,     /* input_message_buffer */
 128                gss_buffer_t,           /* output_message_buffer */
 129                int *,                  /* conf_state */
 130                gss_qop_t *             /* qop_state */
 131               );
 132
 133 typedef OM_uint32 _gss_display_status_t
 134               (OM_uint32 *,            /* minor_status */
 135                OM_uint32,              /* status_value */
 136                int,                    /* status_type */
 137                const gss_OID,          /* mech_type */
 138                OM_uint32 *,            /* message_context */
 139                gss_buffer_t            /* status_string */
 140               );
 141
 142 typedef OM_uint32 _gss_indicate_mechs_t
 143               (OM_uint32 *,            /* minor_status */
 144                gss_OID_set *           /* mech_set */
 145               );
 146
 147 typedef OM_uint32 _gss_compare_name_t
 148               (OM_uint32 *,            /* minor_status */
 149                const gss_name_t,       /* name1 */
 150                const gss_name_t,       /* name2 */
 151                int *                   /* name_equal */
 152               );
 153
 154 typedef OM_uint32 _gss_display_name_t
 155               (OM_uint32 *,            /* minor_status */
 156                const gss_name_t,       /* input_name */
 157                gss_buffer_t,           /* output_name_buffer */
 158                gss_OID *               /* output_name_type */
 159               );
 160
 161 typedef OM_uint32 _gss_import_name_t
 162               (OM_uint32 *,            /* minor_status */
 163                const gss_buffer_t,     /* input_name_buffer */
 164                const gss_OID,          /* input_name_type */
 165                gss_name_t *            /* output_name */
 166               );
 167
 168 typedef OM_uint32 _gss_export_name_t
 169               (OM_uint32 *,            /* minor_status */
 170                const gss_name_t,       /* input_name */
 171                gss_buffer_t            /* exported_name */
 172               );
 173
 174 typedef OM_uint32 _gss_release_name_t
 175               (OM_uint32 *,            /* minor_status */
 176                gss_name_t *            /* input_name */
 177               );
 178
 179 typedef OM_uint32 _gss_inquire_cred_t
 180               (OM_uint32 *,            /* minor_status */
 181                const gss_cred_id_t,    /* cred_handle */
 182                gss_name_t *,           /* name */
 183                OM_uint32 *,            /* lifetime */
 184                gss_cred_usage_t *,     /* cred_usage */
 185                gss_OID_set *           /* mechanisms */
 186               );
 187
 188 typedef OM_uint32 _gss_inquire_context_t
 189               (OM_uint32 *,            /* minor_status */
 190                const gss_ctx_id_t,     /* context_handle */
 191                gss_name_t *,           /* src_name */
 192                gss_name_t *,           /* targ_name */
 193                OM_uint32 *,            /* lifetime_rec */
 194                gss_OID *,              /* mech_type */
 195                OM_uint32 *,            /* ctx_flags */
 196                int *,                  /* locally_initiated */
 197                int *                   /* open */
 198               );
 199
 200 typedef OM_uint32 _gss_wrap_size_limit_t
 201               (OM_uint32 *,            /* minor_status */
 202                const gss_ctx_id_t,     /* context_handle */
 203                int,                    /* conf_req_flag */
 204                gss_qop_t,              /* qop_req */
 205                OM_uint32,              /* req_output_size */
 206                OM_uint32 *             /* max_input_size */
 207               );
 208
 209 typedef OM_uint32 _gss_add_cred_t (
 210                OM_uint32 *,            /* minor_status */
 211                const gss_cred_id_t,    /* input_cred_handle */
 212                const gss_name_t,       /* desired_name */
 213                const gss_OID,          /* desired_mech */
 214                gss_cred_usage_t,       /* cred_usage */
 215                OM_uint32,              /* initiator_time_req */
 216                OM_uint32,              /* acceptor_time_req */
 217                gss_cred_id_t *,        /* output_cred_handle */
 218                gss_OID_set *,          /* actual_mechs */
 219                OM_uint32 *,            /* initiator_time_rec */
 220                OM_uint32 *             /* acceptor_time_rec */
 221               );
 222
 223 typedef OM_uint32 _gss_inquire_cred_by_mech_t (
 224                OM_uint32 *,            /* minor_status */
 225                const gss_cred_id_t,    /* cred_handle */
 226                const gss_OID,          /* mech_type */
 227                gss_name_t *,           /* name */
 228                OM_uint32 *,            /* initiator_lifetime */
 229                OM_uint32 *,            /* acceptor_lifetime */
 230                gss_cred_usage_t *      /* cred_usage */
 231               );
 232
 233 typedef OM_uint32 _gss_export_sec_context_t (
 234                OM_uint32 *,            /* minor_status */
 235                gss_ctx_id_t *,         /* context_handle */
 236                gss_buffer_t            /* interprocess_token */
 237               );
 238
 239 typedef OM_uint32 _gss_import_sec_context_t (
 240                OM_uint32 *,            /* minor_status */
 241                const gss_buffer_t,     /* interprocess_token */
 242                gss_ctx_id_t *          /* context_handle */
 243               );
 244
 245 typedef OM_uint32 _gss_inquire_names_for_mech_t (
 246                OM_uint32 *,            /* minor_status */
 247                const gss_OID,          /* mechanism */
 248                gss_OID_set *           /* name_types */
 249               );
 250
 251 typedef OM_uint32 _gss_inquire_mechs_for_name_t (
 252                OM_uint32 *,            /* minor_status */
 253                const gss_name_t,       /* input_name */
 254                gss_OID_set *           /* mech_types */
 255               );
 256
 257 typedef OM_uint32 _gss_canonicalize_name_t (
 258                OM_uint32 *,            /* minor_status */
 259                const gss_name_t,       /* input_name */
 260                const gss_OID,          /* mech_type */
 261                gss_name_t *            /* output_name */
 262               );
 263
 264 typedef OM_uint32 _gss_duplicate_name_t (
 265                OM_uint32 *,            /* minor_status */
 266                const gss_name_t,       /* src_name */
 267                gss_name_t *            /* dest_name */
 268               );
 269
 270 typedef OM_uint32 _gss_inquire_sec_context_by_oid
 271               (OM_uint32 *,             /* minor_status */
 272                const gss_ctx_id_t,      /* context_handle */
 273                const gss_OID,           /* desired_object */
 274                gss_buffer_set_t *       /* result */
 275               );
 276
 277 typedef OM_uint32 _gss_inquire_cred_by_oid
 278               (OM_uint32 *,            /* bminor_status */
 279                const gss_cred_id_t,    /* cred_handle, */
 280                const gss_OID,          /* desired_object */
 281                gss_buffer_set_t *      /* data_set */
 282               );
 283
 284 typedef OM_uint32 _gss_set_sec_context_option
 285               (OM_uint32 *,             /* minor status */
 286                gss_ctx_id_t *,          /* context */
 287                const gss_OID,           /* option to set */
 288                const gss_buffer_t       /* option value */
 289               );
 290
 291 typedef OM_uint32 _gss_set_cred_option
 292               (OM_uint32 *,             /* minor status */
 293                gss_cred_id_t *,         /* cred */
 294                const gss_OID,           /* option to set */
 295                const gss_buffer_t       /* option value */
 296               );
 297
 298 typedef OM_uint32 _gss_pseudo_random
 299               (OM_uint32 *,            /* minor status */
 300                gss_ctx_id_t,           /* context */
 301                int,                    /* PRF key */
 302                const gss_buffer_t,     /* PRF input */
 303                ssize_t,                /* desired output length */
 304                gss_buffer_t            /* PRF output */
 305               );
 306
 307 typedef OM_uint32 _gss_pname_to_uid
 308               (OM_uint32 *,             /* minor status */
 309                gss_name_t pname,        /* principal name */
 310                gss_OID mech,            /* mechanism to query */
 311                uid_t *uidp              /* pointer to UID for result */
 312               );
 313
 314 struct _gss_mech_switch {
 315         SLIST_ENTRY(_gss_mech_switch)   gm_link;
 316         const char                      *gm_name_prefix;
 317         gss_OID_desc                    gm_mech_oid;
 318         void                            *gm_so;
 319         _gss_acquire_cred_t             *gm_acquire_cred;
 320         _gss_release_cred_t             *gm_release_cred;
 321         _gss_init_sec_context_t         *gm_init_sec_context;
 322         _gss_accept_sec_context_t       *gm_accept_sec_context;
 323         _gss_process_context_token_t    *gm_process_context_token;
 324         _gss_delete_sec_context_t       *gm_delete_sec_context;
 325         _gss_context_time_t             *gm_context_time;
 326         _gss_get_mic_t                  *gm_get_mic;
 327         _gss_verify_mic_t               *gm_verify_mic;
 328         _gss_wrap_t                     *gm_wrap;
 329         _gss_unwrap_t                   *gm_unwrap;
 330         _gss_display_status_t           *gm_display_status;
 331         _gss_indicate_mechs_t           *gm_indicate_mechs;
 332         _gss_compare_name_t             *gm_compare_name;
 333         _gss_display_name_t             *gm_display_name;
 334         _gss_import_name_t              *gm_import_name;
 335         _gss_export_name_t              *gm_export_name;
 336         _gss_release_name_t             *gm_release_name;
 337         _gss_inquire_cred_t             *gm_inquire_cred;
 338         _gss_inquire_context_t          *gm_inquire_context;
 339         _gss_wrap_size_limit_t          *gm_wrap_size_limit;
 340         _gss_add_cred_t                 *gm_add_cred;
 341         _gss_inquire_cred_by_mech_t     *gm_inquire_cred_by_mech;
 342         _gss_export_sec_context_t       *gm_export_sec_context;
 343         _gss_import_sec_context_t       *gm_import_sec_context;
 344         _gss_inquire_names_for_mech_t   *gm_inquire_names_for_mech;
 345         _gss_inquire_mechs_for_name_t   *gm_inquire_mechs_for_name;
 346         _gss_canonicalize_name_t        *gm_canonicalize_name;
 347         _gss_duplicate_name_t           *gm_duplicate_name;
 348         _gss_inquire_sec_context_by_oid *gm_inquire_sec_context_by_oid;
 349         _gss_inquire_cred_by_oid        *gm_inquire_cred_by_oid;
 350         _gss_set_sec_context_option     *gm_set_sec_context_option;
 351         _gss_set_cred_option            *gm_set_cred_option;
 352         _gss_pseudo_random              *gm_pseudo_random;
 353         _gss_pname_to_uid               *gm_pname_to_uid;
 354 };
 355 SLIST_HEAD(_gss_mech_switch_list, _gss_mech_switch);
 356 extern struct _gss_mech_switch_list _gss_mechs;
 357 extern gss_OID_set _gss_mech_oids;
 358
 359 extern void _gss_load_mech(void);
 360 extern struct _gss_mech_switch *_gss_find_mech_switch(gss_OID);
 361 extern void _gss_mg_error(struct _gss_mech_switch *m, OM_uint32 maj,
 362     OM_uint32 min);
 363 extern void _gss_mg_collect_error(gss_OID mech, OM_uint32 maj, OM_uint32 min);