2 * Copyright (c) 1997-2005 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
38 #ifndef __KDC_LOCL_H__
39 #define __KDC_LOCL_H__
43 typedef struct pk_client_params pk_client_params
;
44 typedef struct gss_client_params gss_client_params
;
46 #include <kdc-private.h>
48 #define FAST_EXPIRATION_TIME (3 * 60)
50 /* KFE == KDC_FIND_ETYPE */
51 #define KFE_IS_TGS 0x1
52 #define KFE_IS_PREAUTH 0x2
53 #define KFE_USE_CLIENT 0x4
55 #define heim_pcontext krb5_context
56 #define heim_pconfig krb5_kdc_configuration *
57 #include <heimbase-svc.h>
59 #define KDC_AUDIT_EATWHITE HEIM_SVC_AUDIT_EATWHITE
60 #define KDC_AUDIT_VIS HEIM_SVC_AUDIT_VIS
61 #define KDC_AUDIT_VISLAST HEIM_SVC_AUDIT_VISLAST
63 struct kdc_request_desc
{
64 HEIM_SVC_REQUEST_DESC_COMMON_ELEMENTS
;
69 struct astgs_request_desc
{
70 ASTGS_REQUEST_DESC_COMMON_ELEMENTS
;
73 const struct kdc_patypes
*pa_used
;
75 /* PA methods can affect both the reply key and the session key (pkinit) */
76 krb5_enctype sessionetype
;
77 krb5_keyblock session_key
;
79 krb5_timestamp pa_endtime
;
80 krb5_timestamp pa_max_life
;
82 krb5_keyblock strengthen_key
;
83 const Key
*ticket_key
;
85 /* only valid for tgs-req */
86 unsigned int rk_is_subkey
: 1;
87 unsigned int fast_asserted
: 1;
89 krb5_crypto armor_crypto
;
90 hdb_entry_ex
*armor_server
;
91 krb5_ticket
*armor_ticket
;
97 typedef struct kx509_req_context_desc
{
98 HEIM_SVC_REQUEST_DESC_COMMON_ELEMENTS
;
100 struct Kx509Request req
;
101 Kx509CSRPlus csr_plus
;
102 krb5_auth_context ac
;
103 const char *realm
; /* XXX Confusion: is this crealm or srealm? */
106 krb5_times ticket_times
;
107 unsigned int send_chain
:1; /* Client expects a full chain */
108 unsigned int have_csr
:1; /* Client sent a CSR */
109 } *kx509_req_context
;
114 extern sig_atomic_t exit_flag
;
115 extern size_t max_request_udp
;
116 extern size_t max_request_tcp
;
117 extern const char *request_log
;
118 extern const char *port_str
;
119 extern krb5_addresses explicit_addresses
;
121 extern int enable_http
;
123 extern int detach_from_console
;
124 extern int daemon_child
;
125 extern int do_bonjour
;
127 extern int testing_flag
;
129 extern const struct units _kdc_digestunits
[];
131 #define KDC_LOG_FILE "kdc.log"
133 extern struct timeval _kdc_now
;
134 #define kdc_time (_kdc_now.tv_sec)
136 extern char *runas_string
;
137 extern char *chroot_string
;
140 start_kdc(krb5_context context
, krb5_kdc_configuration
*config
, const char *argv0
);
142 krb5_kdc_configuration
*
143 configure(krb5_context context
, int argc
, char **argv
, int *optidx
);
146 void bonjour_announce(krb5_context
, krb5_kdc_configuration
*);
149 #endif /* __KDC_LOCL_H__ */