2 * Copyright (c) 1997-2005 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
38 #ifndef __KDC_LOCL_H__
39 #define __KDC_LOCL_H__
43 typedef struct pk_client_params pk_client_params
;
45 #include <kdc-private.h>
47 #define FAST_EXPIRATION_TIME (3 * 60)
49 /* KFE == KDC_FIND_ETYPE */
50 #define KFE_IS_TGS 0x1
51 #define KFE_IS_PREAUTH 0x2
52 #define KFE_USE_CLIENT 0x4
54 #define heim_pcontext krb5_context
55 #define heim_pconfig krb5_kdc_configuration *
56 #include <heimbase-svc.h>
58 #define KDC_AUDIT_EATWHITE HEIM_SVC_AUDIT_EATWHITE
59 #define KDC_AUDIT_VIS HEIM_SVC_AUDIT_VIS
60 #define KDC_AUDIT_VISLAST HEIM_SVC_AUDIT_VISLAST
62 struct kdc_request_desc
{
63 HEIM_SVC_REQUEST_DESC_COMMON_ELEMENTS
;
66 struct astgs_request_desc
{
67 HEIM_SVC_REQUEST_DESC_COMMON_ELEMENTS
;
74 METHOD_DATA outpadata
;
80 /* PA methods can affect both the reply key and the session key (pkinit) */
81 krb5_enctype sessionetype
;
82 krb5_keyblock reply_key
;
83 krb5_keyblock session_key
;
86 krb5_principal client_princ
;
90 krb5_principal server_princ
;
92 krb5_timestamp pa_endtime
;
93 krb5_timestamp pa_max_life
;
95 krb5_crypto armor_crypto
;
100 typedef struct kx509_req_context_desc
{
101 HEIM_SVC_REQUEST_DESC_COMMON_ELEMENTS
;
103 struct Kx509Request req
;
104 Kx509CSRPlus csr_plus
;
105 krb5_auth_context ac
;
106 const char *realm
; /* XXX Confusion: is this crealm or srealm? */
109 krb5_times ticket_times
;
110 unsigned int send_chain
:1; /* Client expects a full chain */
111 unsigned int have_csr
:1; /* Client sent a CSR */
112 } *kx509_req_context
;
117 extern sig_atomic_t exit_flag
;
118 extern size_t max_request_udp
;
119 extern size_t max_request_tcp
;
120 extern const char *request_log
;
121 extern const char *port_str
;
122 extern krb5_addresses explicit_addresses
;
124 extern int enable_http
;
126 extern int detach_from_console
;
127 extern int daemon_child
;
128 extern int do_bonjour
;
130 extern int testing_flag
;
132 extern const struct units _kdc_digestunits
[];
134 #define KDC_LOG_FILE "kdc.log"
136 extern struct timeval _kdc_now
;
137 #define kdc_time (_kdc_now.tv_sec)
139 extern char *runas_string
;
140 extern char *chroot_string
;
143 start_kdc(krb5_context context
, krb5_kdc_configuration
*config
, const char *argv0
);
145 krb5_kdc_configuration
*
146 configure(krb5_context context
, int argc
, char **argv
, int *optidx
);
149 void bonjour_announce(krb5_context
, krb5_kdc_configuration
*);
152 #endif /* __KDC_LOCL_H__ */