| blob | 456f2aa87f6dea47bc71f25f066157d29ba4ba6b |
1 # /*
2 # * Contact Love Hörnquist Åstrand <lha at h5l.org> for new oid arcs */
3 # */
4 # /*
5 # * 1.2.752.43 is SU's arc. SU's registry has arcs 13, 14, and 16
6 # * below that registered for Heimdal to use. The Heimdal source tree
7 # * is the authoritative registry for Heimdal's three arcs off of SU's arc.
8 # * This file is the authoritative registry for 1.2.752.43.13 and 1.2.752.14.
9 # * ASN.1 modules in lib/asn1/ are authoritative for 1.2.752.43.16.
10 # *
11 # * Confirmed by SU's erstwhile registrar, Leif Johansson <leifj at sunet.se>,
12 # * as well as by SU's current registrar (through Leif), as:
13 # *
14 # * 1.2.752.43.13 Namn Heimdal GSS-API extensions
15 # * Beskrivning OIDar för användning av Heimdal projektet
16 # * 1.2.752.43.14 Namn Heimdal GSS-API mechs
17 # * Beskrivning OIDar för användning av Heimdal projektet
18 # * 1.2.752.43.16 Namn Heimdal Internal crypto ops
19 # * Beskrivning OIDar för användning av Heimdal projektet
20 # *
21 # * 1.2.752.43.16 is now also used in Heimdal for PKIX-related things.
22 # * See lib/asn1/ and lib/hx509/.
23 # *
24 # * Contact the SU registrar for new oid arcs if any are needed, or carve
25 # * out an arc of one of the above, preferably off 1.2.752.43.16.
26 # */
28 # /*
29 # * 1.2.752.43.13 Heimdal GSS-API Extensions
30 # */
32 oid base GSS_KRB5_COPY_CCACHE_X 1.2.752.43.13.1
33 oid base GSS_KRB5_GET_TKT_FLAGS_X 1.2.752.43.13.2
34 oid base GSS_KRB5_EXTRACT_AUTHZ_DATA_FROM_SEC_CONTEXT_X 1.2.752.43.13.3
35 oid base GSS_KRB5_COMPAT_DES3_MIC_X 1.2.752.43.13.4
36 oid base GSS_KRB5_REGISTER_ACCEPTOR_IDENTITY_X 1.2.752.43.13.5
37 oid base GSS_KRB5_EXPORT_LUCID_CONTEXT_X 1.2.752.43.13.6
38 oid base GSS_KRB5_EXPORT_LUCID_CONTEXT_V1_X 1.2.752.43.13.6.1
39 oid base GSS_KRB5_SET_DNS_CANONICALIZE_X 1.2.752.43.13.7
40 oid base GSS_KRB5_GET_SUBKEY_X 1.2.752.43.13.8
41 oid base GSS_KRB5_GET_INITIATOR_SUBKEY_X 1.2.752.43.13.9
42 oid base GSS_KRB5_GET_ACCEPTOR_SUBKEY_X 1.2.752.43.13.10
43 oid base GSS_KRB5_SEND_TO_KDC_X 1.2.752.43.13.11
44 oid base GSS_KRB5_GET_AUTHTIME_X 1.2.752.43.13.12
45 oid base GSS_KRB5_GET_SERVICE_KEYBLOCK_X 1.2.752.43.13.13
46 oid base GSS_KRB5_SET_ALLOWABLE_ENCTYPES_X 1.2.752.43.13.14
47 oid base GSS_KRB5_SET_DEFAULT_REALM_X 1.2.752.43.13.15
48 oid base GSS_KRB5_CCACHE_NAME_X 1.2.752.43.13.16
49 oid base GSS_KRB5_SET_TIME_OFFSET_X 1.2.752.43.13.17
50 oid base GSS_KRB5_GET_TIME_OFFSET_X 1.2.752.43.13.18
51 oid base GSS_KRB5_PLUGIN_REGISTER_X 1.2.752.43.13.19
52 oid base GSS_NTLM_GET_SESSION_KEY_X 1.2.752.43.13.20
53 oid base GSS_C_NT_NTLM 1.2.752.43.13.21
54 oid base GSS_C_NT_DN 1.2.752.43.13.22
55 oid base GSS_KRB5_NT_PRINCIPAL_NAME_REFERRAL 1.2.752.43.13.23
56 oid base GSS_C_NTLM_AVGUEST 1.2.752.43.13.24
57 oid base GSS_C_NTLM_V1 1.2.752.43.13.25
58 oid base GSS_C_NTLM_V2 1.2.752.43.13.26
59 oid base GSS_C_NTLM_SESSION_KEY 1.2.752.43.13.27
60 oid base GSS_C_NTLM_FORCE_V1 1.2.752.43.13.28
61 oid base GSS_KRB5_CRED_NO_CI_FLAGS_X 1.2.752.43.13.29
62 oid base GSS_KRB5_IMPORT_CRED_X 1.2.752.43.13.30
63 oid base GSS_KRB5_IMPORT_RFC4121_CONTEXT_X 1.2.752.43.13.31
65 # /* glue for gss_inquire_saslname_for_mech */
66 oid base GSS_C_MA_SASL_MECH_NAME 1.2.752.43.13.100
67 oid base GSS_C_MA_MECH_NAME 1.2.752.43.13.101
68 oid base GSS_C_MA_MECH_DESCRIPTION 1.2.752.43.13.102
70 #/* Heimdal mechanisms - 1.2.752.43.14 */
72 oid base GSS_SASL_DIGEST_MD5_MECHANISM 1.2.752.43.14.1
73 oid base GSS_NETLOGON_MECHANISM 1.2.752.43.14.2
74 oid base GSS_NETLOGON_SET_SESSION_KEY_X 1.2.752.43.14.3
75 oid base GSS_NETLOGON_SET_SIGN_ALGORITHM_X 1.2.752.43.14.4
76 oid base GSS_NETLOGON_NT_NETBIOS_DNS_NAME 1.2.752.43.14.5
78 #/* GSS_KRB5_EXTRACT_AUTHZ_DATA_FROM_SEC_CONTEXT_X.128 */
79 oid base GSS_C_INQ_WIN2K_PAC_X 1.2.752.43.13.3.128
80 oid base GSS_C_INQ_SSPI_SESSION_KEY 1.2.840.113554.1.2.2.5.5
81 oid base GSS_C_INQ_NEGOEX_KEY 1.2.840.113554.1.2.2.5.16
82 oid base GSS_C_INQ_NEGOEX_VERIFY_KEY 1.2.840.113554.1.2.2.5.17
83 oid base GSS_C_INQ_REQUIRE_MECHLIST_MIC 1.3.6.1.4.1.7165.655.1.2
85 #/*
86 # * "Standard" mechs
87 # */
89 oid base GSS_KRB5_MECHANISM 1.2.840.113554.1.2.2
90 oid base GSS_NTLM_MECHANISM 1.3.6.1.4.1.311.2.2.10
91 oid base GSS_SPNEGO_MECHANISM 1.3.6.1.5.5.2
93 # /* From Luke Howard */
95 oid base GSS_C_INQ_PEER_HAS_BUGGY_SPNEGO 1.3.6.1.4.1.5322.19.6
96 oid base GSS_C_NTLM_RESET_CRYPTO 1.3.6.1.4.1.7165.655.1.3
97 oid base GSS_NEGOEX_MECHANISM 1.3.6.1.4.1.311.2.2.30
98 oid base GSS_SANON_X25519_MECHANISM 1.3.6.1.4.1.5322.26.1.110
100 #/*
101 # * OID mappings with name and short description and and slightly longer description
102 # */
104 desc mech GSS_KRB5_MECHANISM "Kerberos 5" "Heimdal Kerberos 5 mechanism"
105 desc mech GSS_NTLM_MECHANISM "NTLM" "Heimdal NTLM mechanism"
106 desc mech GSS_SPNEGO_MECHANISM "SPNEGO" "Heimdal SPNEGO mechanism"
107 desc mech GSS_SANON_X25519_MECHANISM "SAnon-X25519" "Heimdal Simple Anonymous (X25519) mechanism"
109 desc ma GSS_C_MA_MECH_NAME "GSS mech name" "The name of the GSS-API mechanism"
110 desc ma GSS_C_MA_SASL_MECH_NAME "SASL mechanism name" "The name of the SASL mechanism"
111 desc ma GSS_C_MA_MECH_DESCRIPTION "Mech description" "The long description of the mechanism"
113 #/*
114 # * RFC5587
115 # */
117 oid base GSS_C_MA_MECH_CONCRETE 1.3.6.1.5.5.13.1
118 oid base GSS_C_MA_MECH_PSEUDO 1.3.6.1.5.5.13.2
119 oid base GSS_C_MA_MECH_COMPOSITE 1.3.6.1.5.5.13.3
120 oid base GSS_C_MA_MECH_NEGO 1.3.6.1.5.5.13.4
121 oid base GSS_C_MA_MECH_GLUE 1.3.6.1.5.5.13.5
122 oid base GSS_C_MA_NOT_MECH 1.3.6.1.5.5.13.6
123 oid base GSS_C_MA_DEPRECATED 1.3.6.1.5.5.13.7
124 oid base GSS_C_MA_NOT_DFLT_MECH 1.3.6.1.5.5.13.8
125 oid base GSS_C_MA_ITOK_FRAMED 1.3.6.1.5.5.13.9
126 oid base GSS_C_MA_AUTH_INIT 1.3.6.1.5.5.13.10
127 oid base GSS_C_MA_AUTH_TARG 1.3.6.1.5.5.13.11
128 oid base GSS_C_MA_AUTH_INIT_INIT 1.3.6.1.5.5.13.12
129 oid base GSS_C_MA_AUTH_TARG_INIT 1.3.6.1.5.5.13.13
130 oid base GSS_C_MA_AUTH_INIT_ANON 1.3.6.1.5.5.13.14
131 oid base GSS_C_MA_AUTH_TARG_ANON 1.3.6.1.5.5.13.15
132 oid base GSS_C_MA_DELEG_CRED 1.3.6.1.5.5.13.16
133 oid base GSS_C_MA_INTEG_PROT 1.3.6.1.5.5.13.17
134 oid base GSS_C_MA_CONF_PROT 1.3.6.1.5.5.13.18
135 oid base GSS_C_MA_MIC 1.3.6.1.5.5.13.19
136 oid base GSS_C_MA_WRAP 1.3.6.1.5.5.13.20
137 oid base GSS_C_MA_PROT_READY 1.3.6.1.5.5.13.21
138 oid base GSS_C_MA_REPLAY_DET 1.3.6.1.5.5.13.22
139 oid base GSS_C_MA_OOS_DET 1.3.6.1.5.5.13.23
140 oid base GSS_C_MA_CBINDINGS 1.3.6.1.5.5.13.24
141 oid base GSS_C_MA_PFS 1.3.6.1.5.5.13.25
142 oid base GSS_C_MA_COMPRESS 1.3.6.1.5.5.13.26
143 oid base GSS_C_MA_CTX_TRANS 1.3.6.1.5.5.13.27
144 oid base GSS_C_MA_NEGOEX_AND_SPNEGO 1.2.840.113554.1.2.2.5.18
146 desc ma GSS_C_MA_MECH_CONCRETE "concrete-mech" "Indicates that a mech is neither a pseudo-mechanism nor a composite mechanism"
147 desc ma GSS_C_MA_MECH_PSEUDO "pseudo-mech" ""
148 desc ma GSS_C_MA_MECH_COMPOSITE "composite-mech" ""
149 desc ma GSS_C_MA_MECH_NEGO "mech-negotiation-mech" ""
150 desc ma GSS_C_MA_MECH_GLUE "mech-glue" ""
151 desc ma GSS_C_MA_NOT_MECH "not-mech" ""
152 desc ma GSS_C_MA_DEPRECATED "mech-deprecated" ""
153 desc ma GSS_C_MA_NOT_DFLT_MECH "mech-not-default" ""
154 desc ma GSS_C_MA_ITOK_FRAMED "initial-is-framed" ""
155 desc ma GSS_C_MA_AUTH_INIT "auth-init-princ" ""
156 desc ma GSS_C_MA_AUTH_TARG "auth-targ-princ" ""
157 desc ma GSS_C_MA_AUTH_INIT_INIT "auth-init-princ-initial" ""
158 desc ma GSS_C_MA_AUTH_TARG_INIT "auth-targ-princ-initial" ""
159 desc ma GSS_C_MA_AUTH_INIT_ANON "auth-init-princ-anon" ""
160 desc ma GSS_C_MA_AUTH_TARG_ANON "auth-targ-princ-anon" ""
161 desc ma GSS_C_MA_DELEG_CRED "deleg-cred" ""
162 desc ma GSS_C_MA_INTEG_PROT "integ-prot" ""
163 desc ma GSS_C_MA_CONF_PROT "conf-prot" ""
164 desc ma GSS_C_MA_MIC "mic" ""
165 desc ma GSS_C_MA_WRAP "wrap" ""
166 desc ma GSS_C_MA_PROT_READY "prot-ready" ""
167 desc ma GSS_C_MA_REPLAY_DET "replay-detection" ""
168 desc ma GSS_C_MA_OOS_DET "oos-detection" ""
169 desc ma GSS_C_MA_CBINDINGS "channel-bindings" ""
170 desc ma GSS_C_MA_PFS "pfs" ""
171 desc ma GSS_C_MA_COMPRESS "compress" ""
172 desc ma GSS_C_MA_CTX_TRANS "context-transfer" ""
173 desc ma GSS_C_MA_NEGOEX_AND_SPNEGO "negoex-and-spnego" "Indicates that a mechanism supports both NegoEx and SPNEGO"