2 * Copyright (c) 1997-2006 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 #ifndef __KRB5_LOCL_H__
37 #define __KRB5_LOCL_H__
48 #ifdef HAVE_SYS_TYPES_H
49 #include <sys/types.h>
51 #ifdef HAVE_SYS_MMAN_H
61 #if defined(HAVE_SYS_IOCTL_H) && SunOS != 40
62 #include <sys/ioctl.h>
65 #undef _POSIX_PTHREAD_SEMANTICS
66 /* This gets us the 5-arg getpwnam_r on Solaris 9. */
67 #define _POSIX_PTHREAD_SEMANTICS
71 #ifdef HAVE_SYS_PARAM_H
72 #include <sys/param.h>
75 #ifdef HAVE_SYS_TIME_H
78 #ifdef HAVE_SYS_SELECT_H
79 #include <sys/select.h>
81 #ifdef HAVE_SYS_SOCKET_H
82 #include <sys/socket.h>
84 #ifdef HAVE_NETINET_IN_H
85 #include <netinet/in.h>
87 #ifdef HAVE_NETINET_IN6_H
88 #include <netinet/in6.h>
90 #ifdef HAVE_NETINET6_IN6_H
91 #include <netinet6/in6.h>
101 #ifdef HAVE_ARPA_INET_H
102 #include <arpa/inet.h>
104 #ifdef HAVE_ARPA_NAMESER_H
105 #include <arpa/nameser.h>
107 #ifdef HAVE_SYS_UIO_H
110 #ifdef HAVE_SYS_FILIO_H
111 #include <sys/filio.h>
113 #ifdef HAVE_SYS_FILE_H
114 #include <sys/file.h>
117 #define HEIMDAL_TEXTDOMAIN "heimdal_krb5"
121 #define N_(x,y) dgettext(HEIMDAL_TEXTDOMAIN, x)
124 #define bindtextdomain(package, localedir)
130 #define des_encrypt wingless_pigs_mostly_fail_to_fly
135 #ifdef HAVE_DOOR_CREATE
142 #include <parse_time.h>
147 #define HC_DEPRECATED_CRYPTO
148 #include "crypto-headers.h"
151 #include <krb5_asn1.h>
155 /* XXX glue for pkinit */
156 struct hx509_certs_data
;
157 struct krb5_pk_identity
;
160 struct AlgorithmIdentifier
;
161 typedef struct krb5_pk_init_ctx_data
*krb5_pk_init_ctx
;
162 struct krb5_dh_moduli
;
165 struct _krb5_krb_auth_data
;
170 #include <krb5_err.h>
171 #include <asn1_err.h>
175 #include <krb5-private.h>
177 #include "heim_threads.h"
179 #define ALLOC(X, N) (X) = calloc((N), sizeof(*(X)))
180 #define ALLOC_SEQ(X, N) do { (X)->len = (N); ALLOC((X)->val, (N)); } while(0)
182 /* should this be public? */
183 #define KEYTAB_DEFAULT "FILE:" SYSCONFDIR "/krb5.keytab"
184 #define KEYTAB_DEFAULT_MODIFY "FILE:" SYSCONFDIR "/krb5.keytab"
186 #define MODULI_FILE SYSCONFDIR "/krb5.moduli"
197 #define SOCK_CLOEXEC 0
201 #define KRB5_BUFSIZ 1024
204 KRB5_INIT_CREDS_TRISTATE_UNSET
= 0,
205 KRB5_INIT_CREDS_TRISTATE_TRUE
,
206 KRB5_INIT_CREDS_TRISTATE_FALSE
207 } krb5_get_init_creds_tristate
;
209 struct _krb5_get_init_creds_opt_private
{
212 const char *password
;
213 krb5_s2k_proc key_proc
;
215 krb5_get_init_creds_tristate req_pac
;
217 krb5_pk_init_ctx pk_init_ctx
;
218 krb5_get_init_creds_tristate addressless
;
220 #define KRB5_INIT_CREDS_CANONICALIZE 1
221 #define KRB5_INIT_CREDS_NO_C_CANON_CHECK 2
223 krb5_gic_process_last_req func
;
228 typedef struct krb5_context_data
{
229 krb5_enctype
*etypes
;
230 krb5_enctype
*etypes_des
;
231 char **default_realms
;
234 unsigned max_retries
;
235 int32_t kdc_sec_offset
;
236 int32_t kdc_usec_offset
;
237 krb5_config_section
*cf
;
238 struct et_list
*et_list
;
239 struct krb5_log_facility
*warn_dest
;
240 struct krb5_log_facility
*debug_dest
;
241 const krb5_cc_ops
**cc_ops
;
243 const char *http_proxy
;
244 const char *time_fmt
;
245 krb5_boolean log_utc
;
246 const char *default_keytab
;
247 const char *default_keytab_modify
;
248 krb5_boolean use_admin_kdc
;
249 krb5_addresses
*extra_addresses
;
250 krb5_boolean scan_interfaces
; /* `ifconfig -a' */
251 krb5_boolean srv_lookup
; /* do SRV lookups */
252 krb5_boolean srv_try_txt
; /* try TXT records also */
253 int32_t fcache_vno
; /* create cache files w/ this
255 int num_kt_types
; /* # of registered keytab types */
256 struct krb5_keytab_data
*kt_types
; /* registered keytab types */
257 const char *date_fmt
;
259 krb5_error_code error_code
;
260 krb5_addresses
*ignore_addresses
;
261 char *default_cc_name
;
262 char *default_cc_name_env
;
263 int default_cc_name_set
;
264 void *mutex
; /* protects error_string/error_buf */
267 #define KRB5_CTX_F_DNS_CANONICALIZE_HOSTNAME 1
268 #define KRB5_CTX_F_CHECK_PAC 2
269 #define KRB5_CTX_F_HOMEDIR_ACCESS 4
270 struct send_to_kdc
*send_to_kdc
;
272 hx509_context hx509ctx
;
276 #define KRB5_DEFAULT_CCNAME_FILE "FILE:/tmp/krb5cc_%{uid}"
277 #define KRB5_DEFAULT_CCNAME_API "API:"
278 #define KRB5_DEFAULT_CCNAME_KCM "KCM:%{uid}"
280 #define EXTRACT_TICKET_ALLOW_CNAME_MISMATCH 1
281 #define EXTRACT_TICKET_ALLOW_SERVER_MISMATCH 2
282 #define EXTRACT_TICKET_MATCH_REALM 4
283 #define EXTRACT_TICKET_AS_REQ 8
286 * Configurable options
289 #ifndef KRB5_DEFAULT_CCTYPE
291 #define KRB5_DEFAULT_CCTYPE (&krb5_acc_ops)
293 #define KRB5_DEFAULT_CCTYPE (&krb5_fcc_ops)
297 #ifndef KRB5_ADDRESSLESS_DEFAULT
298 #define KRB5_ADDRESSLESS_DEFAULT TRUE
303 struct krb5_pk_identity
{
304 hx509_verify_ctx verify_ctx
;
308 hx509_certs certpool
;
309 hx509_revoke_ctx revokectx
;
319 #endif /* __KRB5_LOCL_H__ */