2 * Copyright (c) 1997, 1998, 1999 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
40 * First, include stddef.h to get size_t defined.
48 #include <sys/types.h>
50 #include <krb5-types.h>
53 * Now define the three implementation-dependent types.
56 typedef u_int32_t OM_uint32
;
59 * This is to avoid having to include <krb5.h>
62 struct krb5_auth_context_data
;
66 /* typedef void *gss_name_t; */
68 typedef struct Principal
*gss_name_t
;
70 typedef struct gss_ctx_id_t_desc_struct
{
71 struct krb5_auth_context_data
*auth_context
;
72 gss_name_t source
, target
;
74 enum { LOCAL
= 1, OPEN
= 2} more_flags
;
75 struct krb5_ticket
*ticket
;
78 typedef gss_ctx_id_t_desc
*gss_ctx_id_t
;
80 typedef struct gss_OID_desc_struct
{
83 } gss_OID_desc
, *gss_OID
;
85 typedef struct gss_OID_set_desc_struct
{
88 } gss_OID_set_desc
, *gss_OID_set
;
90 struct krb5_keytab_data
;
92 typedef int gss_cred_usage_t
;
94 typedef struct gss_cred_id_t_desc_struct
{
96 struct krb5_keytab_data
*keytab
;
98 gss_cred_usage_t usage
;
99 gss_OID_set mechanisms
;
100 } gss_cred_id_t_desc
;
102 typedef gss_cred_id_t_desc
*gss_cred_id_t
;
104 typedef struct gss_buffer_desc_struct
{
107 } gss_buffer_desc
, *gss_buffer_t
;
109 typedef struct gss_channel_bindings_struct
{
110 OM_uint32 initiator_addrtype
;
111 gss_buffer_desc initiator_address
;
112 OM_uint32 acceptor_addrtype
;
113 gss_buffer_desc acceptor_address
;
114 gss_buffer_desc application_data
;
115 } *gss_channel_bindings_t
;
118 * For now, define a QOP-type as an OM_uint32
120 typedef OM_uint32 gss_qop_t
;
123 * Flag bits for context-level services.
125 #define GSS_C_DELEG_FLAG 1
126 #define GSS_C_MUTUAL_FLAG 2
127 #define GSS_C_REPLAY_FLAG 4
128 #define GSS_C_SEQUENCE_FLAG 8
129 #define GSS_C_CONF_FLAG 16
130 #define GSS_C_INTEG_FLAG 32
131 #define GSS_C_ANON_FLAG 64
132 #define GSS_C_PROT_READY_FLAG 128
133 #define GSS_C_TRANS_FLAG 256
136 * Credential usage options
139 #define GSS_C_INITIATE 1
140 #define GSS_C_ACCEPT 2
143 * Status code types for gss_display_status
145 #define GSS_C_GSS_CODE 1
146 #define GSS_C_MECH_CODE 2
149 * The constant definitions for channel-bindings address families
151 #define GSS_C_AF_UNSPEC 0
152 #define GSS_C_AF_LOCAL 1
153 #define GSS_C_AF_INET 2
154 #define GSS_C_AF_IMPLINK 3
155 #define GSS_C_AF_PUP 4
156 #define GSS_C_AF_CHAOS 5
157 #define GSS_C_AF_NS 6
158 #define GSS_C_AF_NBS 7
159 #define GSS_C_AF_ECMA 8
160 #define GSS_C_AF_DATAKIT 9
161 #define GSS_C_AF_CCITT 10
162 #define GSS_C_AF_SNA 11
163 #define GSS_C_AF_DECnet 12
164 #define GSS_C_AF_DLI 13
165 #define GSS_C_AF_LAT 14
166 #define GSS_C_AF_HYLINK 15
167 #define GSS_C_AF_APPLETALK 16
168 #define GSS_C_AF_BSC 17
169 #define GSS_C_AF_DSS 18
170 #define GSS_C_AF_OSI 19
171 #define GSS_C_AF_X25 21
172 #define GSS_C_AF_INET6 24
174 #define GSS_C_AF_NULLADDR 255
177 * Various Null values
179 #define GSS_C_NO_NAME ((gss_name_t) 0)
180 #define GSS_C_NO_BUFFER ((gss_buffer_t) 0)
181 #define GSS_C_NO_OID ((gss_OID) 0)
182 #define GSS_C_NO_OID_SET ((gss_OID_set) 0)
183 #define GSS_C_NO_CONTEXT ((gss_ctx_id_t) 0)
184 #define GSS_C_NO_CREDENTIAL ((gss_cred_id_t) 0)
185 #define GSS_C_NO_CHANNEL_BINDINGS ((gss_channel_bindings_t) 0)
186 #define GSS_C_EMPTY_BUFFER {0, NULL}
189 * Some alternate names for a couple of the above
190 * values. These are defined for V1 compatibility.
192 #define GSS_C_NULL_OID GSS_C_NO_OID
193 #define GSS_C_NULL_OID_SET GSS_C_NO_OID_SET
196 * Define the default Quality of Protection for per-message
197 * services. Note that an implementation that offers multiple
198 * levels of QOP may define GSS_C_QOP_DEFAULT to be either zero
199 * (as done here) to mean "default protection", or to a specific
200 * explicit QOP value. However, a value of 0 should always be
201 * interpreted by a GSSAPI implementation as a request for the
202 * default protection level.
204 #define GSS_C_QOP_DEFAULT 0
207 * Expiration time of 2^32-1 seconds means infinite lifetime for a
208 * credential or security context
210 #define GSS_C_INDEFINITE 0xfffffffful
213 * The implementation must reserve static storage for a
214 * gss_OID_desc object containing the value
215 * {10, (void *)"\x2a\x86\x48\x86\xf7\x12"
216 * "\x01\x02\x01\x01"},
217 * corresponding to an object-identifier value of
218 * {iso(1) member-body(2) United States(840) mit(113554)
219 * infosys(1) gssapi(2) generic(1) user_name(1)}. The constant
220 * GSS_C_NT_USER_NAME should be initialized to point
221 * to that gss_OID_desc.
223 extern gss_OID GSS_C_NT_USER_NAME
;
226 * The implementation must reserve static storage for a
227 * gss_OID_desc object containing the value
228 * {10, (void *)"\x2a\x86\x48\x86\xf7\x12"
229 * "\x01\x02\x01\x02"},
230 * corresponding to an object-identifier value of
231 * {iso(1) member-body(2) United States(840) mit(113554)
232 * infosys(1) gssapi(2) generic(1) machine_uid_name(2)}.
233 * The constant GSS_C_NT_MACHINE_UID_NAME should be
234 * initialized to point to that gss_OID_desc.
236 extern gss_OID GSS_C_NT_MACHINE_UID_NAME
;
239 * The implementation must reserve static storage for a
240 * gss_OID_desc object containing the value
241 * {10, (void *)"\x2a\x86\x48\x86\xf7\x12"
242 * "\x01\x02\x01\x03"},
243 * corresponding to an object-identifier value of
244 * {iso(1) member-body(2) United States(840) mit(113554)
245 * infosys(1) gssapi(2) generic(1) string_uid_name(3)}.
246 * The constant GSS_C_NT_STRING_UID_NAME should be
247 * initialized to point to that gss_OID_desc.
249 extern gss_OID GSS_C_NT_STRING_UID_NAME
;
252 * The implementation must reserve static storage for a
253 * gss_OID_desc object containing the value
254 * {6, (void *)"\x2b\x06\x01\x05\x06\x02"},
255 * corresponding to an object-identifier value of
256 * {1(iso), 3(org), 6(dod), 1(internet), 5(security),
257 * 6(nametypes), 2(gss-host-based-services)}. The constant
258 * GSS_C_NT_HOSTBASED_SERVICE should be initialized to point
259 * to that gss_OID_desc.
261 extern gss_OID GSS_C_NT_HOSTBASED_SERVICE
;
264 * The implementation must reserve static storage for a
265 * gss_OID_desc object containing the value
266 * {6, (void *)"\x2b\x06\01\x05\x06\x03"},
267 * corresponding to an object identifier value of
268 * {1(iso), 3(org), 6(dod), 1(internet), 5(security),
269 * 6(nametypes), 3(gss-anonymous-name)}. The constant
270 * and GSS_C_NT_ANONYMOUS should be initialized to point
271 * to that gss_OID_desc.
273 extern gss_OID GSS_C_NT_ANONYMOUS
;
276 * The implementation must reserve static storage for a
277 * gss_OID_desc object containing the value
278 * {6, (void *)"\x2b\x06\x01\x05\x06\x04"},
279 * corresponding to an object-identifier value of
280 * {1(iso), 3(org), 6(dod), 1(internet), 5(security),
281 * 6(nametypes), 4(gss-api-exported-name)}. The constant
282 * GSS_C_NT_EXPORT_NAME should be initialized to point
283 * to that gss_OID_desc.
285 extern gss_OID GSS_C_NT_EXPORT_NAME
;
288 * This if for kerberos5 names.
291 extern gss_OID GSS_KRB5_NT_PRINCIPAL_NAME
;
292 extern gss_OID GSS_KRB5_NT_USER_NAME
;
293 extern gss_OID GSS_KRB5_NT_MACHINE_UID_NAME
;
294 extern gss_OID GSS_KRB5_NT_STRING_UID_NAME
;
296 extern gss_OID GSS_KRB5_MECHANISM
;
298 /* Major status codes */
300 #define GSS_S_COMPLETE 0
303 * Some "helper" definitions to make the status code macros obvious.
305 #define GSS_C_CALLING_ERROR_OFFSET 24
306 #define GSS_C_ROUTINE_ERROR_OFFSET 16
307 #define GSS_C_SUPPLEMENTARY_OFFSET 0
308 #define GSS_C_CALLING_ERROR_MASK 0377ul
309 #define GSS_C_ROUTINE_ERROR_MASK 0377ul
310 #define GSS_C_SUPPLEMENTARY_MASK 0177777ul
313 * The macros that test status codes for error conditions.
314 * Note that the GSS_ERROR() macro has changed slightly from
315 * the V1 GSSAPI so that it now evaluates its argument
318 #define GSS_CALLING_ERROR(x) \
319 (x & (GSS_C_CALLING_ERROR_MASK << GSS_C_CALLING_ERROR_OFFSET))
320 #define GSS_ROUTINE_ERROR(x) \
321 (x & (GSS_C_ROUTINE_ERROR_MASK << GSS_C_ROUTINE_ERROR_OFFSET))
322 #define GSS_SUPPLEMENTARY_INFO(x) \
323 (x & (GSS_C_SUPPLEMENTARY_MASK << GSS_C_SUPPLEMENTARY_OFFSET))
324 #define GSS_ERROR(x) \
325 (x & ((GSS_C_CALLING_ERROR_MASK << GSS_C_CALLING_ERROR_OFFSET) | \
326 (GSS_C_ROUTINE_ERROR_MASK << GSS_C_ROUTINE_ERROR_OFFSET)))
329 * Now the actual status code definitions
335 #define GSS_S_CALL_INACCESSIBLE_READ \
336 (1ul << GSS_C_CALLING_ERROR_OFFSET)
337 #define GSS_S_CALL_INACCESSIBLE_WRITE \
338 (2ul << GSS_C_CALLING_ERROR_OFFSET)
339 #define GSS_S_CALL_BAD_STRUCTURE \
340 (3ul << GSS_C_CALLING_ERROR_OFFSET)
345 #define GSS_S_BAD_MECH (1ul << GSS_C_ROUTINE_ERROR_OFFSET)
346 #define GSS_S_BAD_NAME (2ul << GSS_C_ROUTINE_ERROR_OFFSET)
347 #define GSS_S_BAD_NAMETYPE (3ul << GSS_C_ROUTINE_ERROR_OFFSET)
349 #define GSS_S_BAD_BINDINGS (4ul << GSS_C_ROUTINE_ERROR_OFFSET)
350 #define GSS_S_BAD_STATUS (5ul << GSS_C_ROUTINE_ERROR_OFFSET)
351 #define GSS_S_BAD_SIG (6ul << GSS_C_ROUTINE_ERROR_OFFSET)
352 #define GSS_S_BAD_MIC GSS_S_BAD_SIG
353 #define GSS_S_NO_CRED (7ul << GSS_C_ROUTINE_ERROR_OFFSET)
354 #define GSS_S_NO_CONTEXT (8ul << GSS_C_ROUTINE_ERROR_OFFSET)
355 #define GSS_S_DEFECTIVE_TOKEN (9ul << GSS_C_ROUTINE_ERROR_OFFSET)
356 #define GSS_S_DEFECTIVE_CREDENTIAL (10ul << GSS_C_ROUTINE_ERROR_OFFSET)
357 #define GSS_S_CREDENTIALS_EXPIRED (11ul << GSS_C_ROUTINE_ERROR_OFFSET)
358 #define GSS_S_CONTEXT_EXPIRED (12ul << GSS_C_ROUTINE_ERROR_OFFSET)
359 #define GSS_S_FAILURE (13ul << GSS_C_ROUTINE_ERROR_OFFSET)
360 #define GSS_S_BAD_QOP (14ul << GSS_C_ROUTINE_ERROR_OFFSET)
361 #define GSS_S_UNAUTHORIZED (15ul << GSS_C_ROUTINE_ERROR_OFFSET)
362 #define GSS_S_UNAVAILABLE (16ul << GSS_C_ROUTINE_ERROR_OFFSET)
363 #define GSS_S_DUPLICATE_ELEMENT (17ul << GSS_C_ROUTINE_ERROR_OFFSET)
364 #define GSS_S_NAME_NOT_MN (18ul << GSS_C_ROUTINE_ERROR_OFFSET)
367 * Supplementary info bits:
369 #define GSS_S_CONTINUE_NEEDED (1ul << (GSS_C_SUPPLEMENTARY_OFFSET + 0))
370 #define GSS_S_DUPLICATE_TOKEN (1ul << (GSS_C_SUPPLEMENTARY_OFFSET + 1))
371 #define GSS_S_OLD_TOKEN (1ul << (GSS_C_SUPPLEMENTARY_OFFSET + 2))
372 #define GSS_S_UNSEQ_TOKEN (1ul << (GSS_C_SUPPLEMENTARY_OFFSET + 3))
373 #define GSS_S_GAP_TOKEN (1ul << (GSS_C_SUPPLEMENTARY_OFFSET + 4))
378 * 4.1.1. Non-Kerberos-specific codes
381 #define GSS_KRB5_S_G_BAD_SERVICE_NAME 1
382 /* "No @ in SERVICE-NAME name string" */
383 #define GSS_KRB5_S_G_BAD_STRING_UID 2
384 /* "STRING-UID-NAME contains nondigits" */
385 #define GSS_KRB5_S_G_NOUSER 3
386 /* "UID does not resolve to username" */
387 #define GSS_KRB5_S_G_VALIDATE_FAILED 4
388 /* "Validation error" */
389 #define GSS_KRB5_S_G_BUFFER_ALLOC 5
390 /* "Couldn't allocate gss_buffer_t data" */
391 #define GSS_KRB5_S_G_BAD_MSG_CTX 6
392 /* "Message context invalid" */
393 #define GSS_KRB5_S_G_WRONG_SIZE 7
394 /* "Buffer is the wrong size" */
395 #define GSS_KRB5_S_G_BAD_USAGE 8
396 /* "Credential usage type is unknown" */
397 #define GSS_KRB5_S_G_UNKNOWN_QOP 9
398 /* "Unknown quality of protection specified" */
401 * 4.1.2. Kerberos-specific-codes
404 #define GSS_KRB5_S_KG_CCACHE_NOMATCH 10
405 /* "Principal in credential cache does not match desired name" */
406 #define GSS_KRB5_S_KG_KEYTAB_NOMATCH 11
407 /* "No principal in keytab matches desired name" */
408 #define GSS_KRB5_S_KG_TGT_MISSING 12
409 /* "Credential cache has no TGT" */
410 #define GSS_KRB5_S_KG_NO_SUBKEY 13
411 /* "Authenticator has no subkey" */
412 #define GSS_KRB5_S_KG_CONTEXT_ESTABLISHED 14
413 /* "Context is already fully established" */
414 #define GSS_KRB5_S_KG_BAD_SIGN_TYPE 15
415 /* "Unknown signature type in token" */
416 #define GSS_KRB5_S_KG_BAD_LENGTH 16
417 /* "Invalid field length in token" */
418 #define GSS_KRB5_S_KG_CTX_INCOMPLETE 17
419 /* "Attempt to use incomplete security context" */
422 * Finally, function prototypes for the GSS-API routines.
425 OM_uint32 gss_acquire_cred
426 (OM_uint32
* minor_status
,
427 const gss_name_t desired_name
,
429 const gss_OID_set desired_mechs
,
430 gss_cred_usage_t cred_usage
,
431 gss_cred_id_t
* output_cred_handle
,
432 gss_OID_set
* actual_mechs
,
436 OM_uint32 gss_release_cred
437 (OM_uint32
* minor_status
,
438 gss_cred_id_t
* cred_handle
441 OM_uint32 gss_init_sec_context
442 (OM_uint32
* minor_status
,
443 const gss_cred_id_t initiator_cred_handle
,
444 gss_ctx_id_t
* context_handle
,
445 const gss_name_t target_name
,
446 const gss_OID mech_type
,
449 const gss_channel_bindings_t input_chan_bindings
,
450 const gss_buffer_t input_token
,
451 gss_OID
* actual_mech_type
,
452 gss_buffer_t output_token
,
453 OM_uint32
* ret_flags
,
457 OM_uint32 gss_accept_sec_context
458 (OM_uint32
* minor_status
,
459 gss_ctx_id_t
* context_handle
,
460 const gss_cred_id_t acceptor_cred_handle
,
461 const gss_buffer_t input_token_buffer
,
462 const gss_channel_bindings_t input_chan_bindings
,
463 gss_name_t
* src_name
,
465 gss_buffer_t output_token
,
466 OM_uint32
* ret_flags
,
467 OM_uint32
* time_rec
,
468 gss_cred_id_t
* delegated_cred_handle
471 OM_uint32 gss_process_context_token
472 (OM_uint32
* minor_status
,
473 const gss_ctx_id_t context_handle
,
474 const gss_buffer_t token_buffer
477 OM_uint32 gss_delete_sec_context
478 (OM_uint32
* minor_status
,
479 gss_ctx_id_t
* context_handle
,
480 gss_buffer_t output_token
483 OM_uint32 gss_context_time
484 (OM_uint32
* minor_status
,
485 const gss_ctx_id_t context_handle
,
489 OM_uint32 gss_get_mic
490 (OM_uint32
* minor_status
,
491 const gss_ctx_id_t context_handle
,
493 const gss_buffer_t message_buffer
,
494 gss_buffer_t message_token
497 OM_uint32 gss_verify_mic
498 (OM_uint32
* minor_status
,
499 const gss_ctx_id_t context_handle
,
500 const gss_buffer_t message_buffer
,
501 const gss_buffer_t token_buffer
,
502 gss_qop_t
* qop_state
506 (OM_uint32
* minor_status
,
507 const gss_ctx_id_t context_handle
,
510 const gss_buffer_t input_message_buffer
,
512 gss_buffer_t output_message_buffer
516 (OM_uint32
* minor_status
,
517 const gss_ctx_id_t context_handle
,
518 const gss_buffer_t input_message_buffer
,
519 gss_buffer_t output_message_buffer
,
521 gss_qop_t
* qop_state
524 OM_uint32 gss_display_status
525 (OM_uint32
* minor_status
,
526 OM_uint32 status_value
,
528 const gss_OID mech_type
,
529 OM_uint32
* message_context
,
530 gss_buffer_t status_string
533 OM_uint32 gss_indicate_mechs
534 (OM_uint32
* minor_status
,
535 gss_OID_set
* mech_set
538 OM_uint32 gss_compare_name
539 (OM_uint32
* minor_status
,
540 const gss_name_t name1
,
541 const gss_name_t name2
,
545 OM_uint32 gss_display_name
546 (OM_uint32
* minor_status
,
547 const gss_name_t input_name
,
548 gss_buffer_t output_name_buffer
,
549 gss_OID
* output_name_type
552 OM_uint32 gss_import_name
553 (OM_uint32
* minor_status
,
554 const gss_buffer_t input_name_buffer
,
555 const gss_OID input_name_type
,
556 gss_name_t
* output_name
559 OM_uint32 gss_export_name
560 (OM_uint32
* minor_status
,
561 const gss_name_t input_name
,
562 gss_buffer_t exported_name
565 OM_uint32 gss_release_name
566 (OM_uint32
* minor_status
,
567 gss_name_t
* input_name
570 OM_uint32 gss_release_buffer
571 (OM_uint32
* minor_status
,
575 OM_uint32 gss_release_oid_set
576 (OM_uint32
* minor_status
,
580 OM_uint32 gss_inquire_cred
581 (OM_uint32
* minor_status
,
582 const gss_cred_id_t cred_handle
,
584 OM_uint32
* lifetime
,
585 gss_cred_usage_t
* cred_usage
,
586 gss_OID_set
* mechanisms
589 OM_uint32
gss_inquire_context (
590 OM_uint32
* minor_status
,
591 const gss_ctx_id_t context_handle
,
592 gss_name_t
* src_name
,
593 gss_name_t
* targ_name
,
594 OM_uint32
* lifetime_rec
,
596 OM_uint32
* ctx_flags
,
597 int * locally_initiated
,
601 OM_uint32
gss_wrap_size_limit (
602 OM_uint32
* minor_status
,
603 const gss_ctx_id_t context_handle
,
606 OM_uint32 req_output_size
,
607 OM_uint32
* max_input_size
610 OM_uint32
gss_add_cred (
611 OM_uint32
* minor_status
,
612 const gss_cred_id_t input_cred_handle
,
613 const gss_name_t desired_name
,
614 const gss_OID desired_mech
,
615 gss_cred_usage_t cred_usage
,
616 OM_uint32 initiator_time_req
,
617 OM_uint32 acceptor_time_req
,
618 gss_cred_id_t
* output_cred_handle
,
619 gss_OID_set
* actual_mechs
,
620 OM_uint32
* initiator_time_rec
,
621 OM_uint32
* acceptor_time_rec
624 OM_uint32
gss_inquire_cred_by_mech (
625 OM_uint32
* minor_status
,
626 const gss_cred_id_t cred_handle
,
627 const gss_OID mech_type
,
629 OM_uint32
* initiator_lifetime
,
630 OM_uint32
* acceptor_lifetime
,
631 gss_cred_usage_t
* cred_usage
634 OM_uint32
gss_export_sec_context (
635 OM_uint32
* minor_status
,
636 gss_ctx_id_t
* context_handle
,
637 gss_buffer_t interprocess_token
640 OM_uint32
gss_import_sec_context (
641 OM_uint32
* minor_status
,
642 const gss_buffer_t interprocess_token
,
643 gss_ctx_id_t
* context_handle
646 OM_uint32
gss_create_empty_oid_set (
647 OM_uint32
* minor_status
,
648 gss_OID_set
* oid_set
651 OM_uint32
gss_add_oid_set_member (
652 OM_uint32
* minor_status
,
653 const gss_OID member_oid
,
654 gss_OID_set
* oid_set
657 OM_uint32
gss_test_oid_set_member (
658 OM_uint32
* minor_status
,
659 const gss_OID member
,
660 const gss_OID_set set
,
664 OM_uint32
gss_inquire_names_for_mech (
665 OM_uint32
* minor_status
,
666 const gss_OID mechanism
,
667 gss_OID_set
* name_types
670 OM_uint32
gss_inquire_mechs_for_name (
671 OM_uint32
* minor_status
,
672 const gss_name_t input_name
,
673 gss_OID_set
* mech_types
676 OM_uint32
gss_canonicalize_name (
677 OM_uint32
* minor_status
,
678 const gss_name_t input_name
,
679 const gss_OID mech_type
,
680 gss_name_t
* output_name
683 OM_uint32
gss_duplicate_name (
684 OM_uint32
* minor_status
,
685 const gss_name_t src_name
,
686 gss_name_t
* dest_name
690 * The following routines are obsolete variants of gss_get_mic,
691 * gss_verify_mic, gss_wrap and gss_unwrap. They should be
692 * provided by GSSAPI V2 implementations for backwards
693 * compatibility with V1 applications. Distinct entrypoints
694 * (as opposed to #defines) should be provided, both to allow
695 * GSSAPI V1 applications to link against GSSAPI V2 implementations,
696 * and to retain the slight parameter type differences between the
697 * obsolete versions of these routines and their current forms.
701 (OM_uint32
* minor_status
,
702 gss_ctx_id_t context_handle
,
704 gss_buffer_t message_buffer
,
705 gss_buffer_t message_token
709 (OM_uint32
* minor_status
,
710 gss_ctx_id_t context_handle
,
711 gss_buffer_t message_buffer
,
712 gss_buffer_t token_buffer
,
717 (OM_uint32
* minor_status
,
718 gss_ctx_id_t context_handle
,
721 gss_buffer_t input_message_buffer
,
723 gss_buffer_t output_message_buffer
727 (OM_uint32
* minor_status
,
728 gss_ctx_id_t context_handle
,
729 gss_buffer_t input_message_buffer
,
730 gss_buffer_t output_message_buffer
,
736 * kerberos mechanism specific functions
739 OM_uint32 gsskrb5_register_acceptor_identity
742 #endif /* GSSAPI_H_ */