4fb6a6adc9
An implementation of draft-zhu-negoex-04 for MIT Kerberos was developed in 2011. This has been recently integrated, with many fixes from Greg Hudson. This commit ports it to Heimdal. The implementation has been interoperability tested with MIT Kerberos and Windows, using the GSS EAP mechanism developed as part of the Moonshot project. The SPNEGO code was also updated to import the state machine from Apple which improves mechListMIC processing and avoids discarding initial context tokens generated during mechanism probing, that can be used for optimistic tokens. Finally, to aid in testing, the GSS-API mechanism glue configuration file can be changed using the environment variable GSS_MECH_CONFIG. This environment variable name, along with the format of the configuration file, is compatible with MIT (although it would be difficult for a single mechanism binary to support both implementations).
712 lines
25 KiB
C
712 lines
25 KiB
C
/*-
|
|
* Copyright (c) 2005 Doug Rabson
|
|
* Copyright (c) 2018 Kungliga Tekniska Högskolan
|
|
* (Royal Institute of Technology, Stockholm, Sweden).
|
|
* All rights reserved.
|
|
*
|
|
* Portions Copyright (c) 2009 Apple Inc. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*
|
|
* $FreeBSD: src/lib/libgssapi/mech_switch.h,v 1.1 2005/12/29 14:40:20 dfr Exp $
|
|
*/
|
|
|
|
#ifndef GSSAPI_MECH_H
|
|
#define GSSAPI_MECH_H 1
|
|
|
|
#include <gssapi.h>
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_acquire_cred_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_name_t, /* desired_name */
|
|
OM_uint32, /* time_req */
|
|
const gss_OID_set, /* desired_mechs */
|
|
gss_cred_usage_t, /* cred_usage */
|
|
gss_cred_id_t *, /* output_cred_handle */
|
|
gss_OID_set *, /* actual_mechs */
|
|
OM_uint32 * /* time_rec */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_release_cred_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_cred_id_t * /* cred_handle */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_init_sec_context_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_cred_id_t, /* initiator_cred_handle */
|
|
gss_ctx_id_t *, /* context_handle */
|
|
gss_const_name_t, /* target_name */
|
|
const gss_OID, /* mech_type */
|
|
OM_uint32, /* req_flags */
|
|
OM_uint32, /* time_req */
|
|
const gss_channel_bindings_t,
|
|
/* input_chan_bindings */
|
|
const gss_buffer_t, /* input_token */
|
|
gss_OID *, /* actual_mech_type */
|
|
gss_buffer_t, /* output_token */
|
|
OM_uint32 *, /* ret_flags */
|
|
OM_uint32 * /* time_rec */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_accept_sec_context_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_ctx_id_t *, /* context_handle */
|
|
gss_const_cred_id_t, /* acceptor_cred_handle */
|
|
const gss_buffer_t, /* input_token_buffer */
|
|
const gss_channel_bindings_t,
|
|
/* input_chan_bindings */
|
|
gss_name_t *, /* src_name */
|
|
gss_OID *, /* mech_type */
|
|
gss_buffer_t, /* output_token */
|
|
OM_uint32 *, /* ret_flags */
|
|
OM_uint32 *, /* time_rec */
|
|
gss_cred_id_t * /* delegated_cred_handle */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_process_context_token_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_ctx_id_t, /* context_handle */
|
|
const gss_buffer_t /* token_buffer */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_delete_sec_context_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_ctx_id_t *, /* context_handle */
|
|
gss_buffer_t /* output_token */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_context_time_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_ctx_id_t, /* context_handle */
|
|
OM_uint32 * /* time_rec */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_get_mic_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_ctx_id_t, /* context_handle */
|
|
gss_qop_t, /* qop_req */
|
|
const gss_buffer_t, /* message_buffer */
|
|
gss_buffer_t /* message_token */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_verify_mic_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_ctx_id_t, /* context_handle */
|
|
const gss_buffer_t, /* message_buffer */
|
|
const gss_buffer_t, /* token_buffer */
|
|
gss_qop_t * /* qop_state */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_wrap_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_ctx_id_t, /* context_handle */
|
|
int, /* conf_req_flag */
|
|
gss_qop_t, /* qop_req */
|
|
const gss_buffer_t, /* input_message_buffer */
|
|
int *, /* conf_state */
|
|
gss_buffer_t /* output_message_buffer */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_unwrap_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_ctx_id_t, /* context_handle */
|
|
const gss_buffer_t, /* input_message_buffer */
|
|
gss_buffer_t, /* output_message_buffer */
|
|
int *, /* conf_state */
|
|
gss_qop_t * /* qop_state */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_display_status_t
|
|
(OM_uint32 *, /* minor_status */
|
|
OM_uint32, /* status_value */
|
|
int, /* status_type */
|
|
const gss_OID, /* mech_type */
|
|
OM_uint32 *, /* message_context */
|
|
gss_buffer_t /* status_string */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_indicate_mechs_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_OID_set * /* mech_set */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_compare_name_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_name_t, /* name1 */
|
|
gss_const_name_t, /* name2 */
|
|
int * /* name_equal */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_display_name_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_name_t, /* input_name */
|
|
gss_buffer_t, /* output_name_buffer */
|
|
gss_OID * /* output_name_type */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_import_name_t
|
|
(OM_uint32 *, /* minor_status */
|
|
const gss_buffer_t, /* input_name_buffer */
|
|
const gss_OID, /* input_name_type */
|
|
gss_name_t * /* output_name */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_export_name_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_name_t, /* input_name */
|
|
gss_buffer_t /* exported_name */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_release_name_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_name_t * /* input_name */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_inquire_cred_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_cred_id_t, /* cred_handle */
|
|
gss_name_t *, /* name */
|
|
OM_uint32 *, /* lifetime */
|
|
gss_cred_usage_t *, /* cred_usage */
|
|
gss_OID_set * /* mechanisms */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_inquire_context_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_ctx_id_t, /* context_handle */
|
|
gss_name_t *, /* src_name */
|
|
gss_name_t *, /* targ_name */
|
|
OM_uint32 *, /* lifetime_rec */
|
|
gss_OID *, /* mech_type */
|
|
OM_uint32 *, /* ctx_flags */
|
|
int *, /* locally_initiated */
|
|
int * /* open */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_wrap_size_limit_t
|
|
(OM_uint32 *, /* minor_status */
|
|
gss_const_ctx_id_t, /* context_handle */
|
|
int, /* conf_req_flag */
|
|
gss_qop_t, /* qop_req */
|
|
OM_uint32, /* req_output_size */
|
|
OM_uint32 * /* max_input_size */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_add_cred_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_const_cred_id_t, /* input_cred_handle */
|
|
gss_const_name_t, /* desired_name */
|
|
const gss_OID, /* desired_mech */
|
|
gss_cred_usage_t, /* cred_usage */
|
|
OM_uint32, /* initiator_time_req */
|
|
OM_uint32, /* acceptor_time_req */
|
|
gss_cred_id_t *, /* output_cred_handle */
|
|
gss_OID_set *, /* actual_mechs */
|
|
OM_uint32 *, /* initiator_time_rec */
|
|
OM_uint32 * /* acceptor_time_rec */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_duplicate_cred_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_const_cred_id_t, /* input_cred_handle */
|
|
gss_cred_id_t * /* output_cred_handle */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_inquire_cred_by_mech_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_const_cred_id_t, /* cred_handle */
|
|
const gss_OID, /* mech_type */
|
|
gss_name_t *, /* name */
|
|
OM_uint32 *, /* initiator_lifetime */
|
|
OM_uint32 *, /* acceptor_lifetime */
|
|
gss_cred_usage_t * /* cred_usage */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_export_sec_context_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_ctx_id_t *, /* context_handle */
|
|
gss_buffer_t /* interprocess_token */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_import_sec_context_t (
|
|
OM_uint32 *, /* minor_status */
|
|
const gss_buffer_t, /* interprocess_token */
|
|
gss_ctx_id_t * /* context_handle */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_inquire_names_for_mech_t (
|
|
OM_uint32 *, /* minor_status */
|
|
const gss_OID, /* mechanism */
|
|
gss_OID_set * /* name_types */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_inquire_mechs_for_name_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_const_name_t, /* input_name */
|
|
gss_OID_set * /* mech_types */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_canonicalize_name_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_const_name_t, /* input_name */
|
|
const gss_OID, /* mech_type */
|
|
gss_name_t * /* output_name */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_duplicate_name_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_const_name_t, /* src_name */
|
|
gss_name_t * /* dest_name */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_inquire_sec_context_by_oid_t (
|
|
OM_uint32 *minor_status,
|
|
gss_const_ctx_id_t context_handle,
|
|
const gss_OID desired_object,
|
|
gss_buffer_set_t *data_set
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_inquire_cred_by_oid_t (
|
|
OM_uint32 *minor_status,
|
|
gss_const_cred_id_t cred,
|
|
const gss_OID desired_object,
|
|
gss_buffer_set_t *data_set
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_set_sec_context_option_t (
|
|
OM_uint32 *minor_status,
|
|
gss_ctx_id_t *cred_handle,
|
|
const gss_OID desired_object,
|
|
const gss_buffer_t value
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_set_cred_option_t (
|
|
OM_uint32 *minor_status,
|
|
gss_cred_id_t *cred_handle,
|
|
const gss_OID desired_object,
|
|
const gss_buffer_t value
|
|
);
|
|
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_pseudo_random_t (
|
|
OM_uint32 *minor_status,
|
|
gss_ctx_id_t context,
|
|
int prf_key,
|
|
const gss_buffer_t prf_in,
|
|
ssize_t desired_output_len,
|
|
gss_buffer_t prf_out
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_wrap_iov_t(OM_uint32 *minor_status,
|
|
gss_ctx_id_t context_handle,
|
|
int conf_req_flag,
|
|
gss_qop_t qop_req,
|
|
int * conf_state,
|
|
gss_iov_buffer_desc *iov,
|
|
int iov_count);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_unwrap_iov_t(OM_uint32 *minor_status,
|
|
gss_ctx_id_t context_handle,
|
|
int *conf_state,
|
|
gss_qop_t *qop_state,
|
|
gss_iov_buffer_desc *iov,
|
|
int iov_count);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_wrap_iov_length_t(OM_uint32 * minor_status,
|
|
gss_ctx_id_t context_handle,
|
|
int conf_req_flag,
|
|
gss_qop_t qop_req,
|
|
int *conf_state,
|
|
gss_iov_buffer_desc *iov,
|
|
int iov_count);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_store_cred_t(OM_uint32 *minor_status,
|
|
gss_cred_id_t input_cred_handle,
|
|
gss_cred_usage_t cred_usage,
|
|
const gss_OID desired_mech,
|
|
OM_uint32 overwrite_cred,
|
|
OM_uint32 default_cred,
|
|
gss_OID_set *elements_stored,
|
|
gss_cred_usage_t *cred_usage_stored);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_export_cred_t(OM_uint32 *minor_status,
|
|
gss_cred_id_t cred_handle,
|
|
gss_buffer_t cred_token);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_import_cred_t(OM_uint32 * minor_status,
|
|
gss_buffer_t cred_token,
|
|
gss_cred_id_t * cred_handle);
|
|
|
|
typedef void GSSAPI_CALLCONV
|
|
_gss_iter_creds_t(OM_uint32 /* flags */,
|
|
void * /* userctx */,
|
|
void (* /*cred_iter */ )(void *, gss_OID, gss_cred_id_t));
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_destroy_cred_t(OM_uint32 * /* minor_status */,
|
|
gss_cred_id_t * /* cred */);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_cred_hold_t(OM_uint32 * /* minor_status */,
|
|
gss_cred_id_t /* cred */);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_cred_unhold_t(OM_uint32 * /* minor_status */,
|
|
gss_cred_id_t /* cred */);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_cred_label_set_t(OM_uint32 * /* minor_status */,
|
|
gss_cred_id_t /* cred */,
|
|
const char * /* label */,
|
|
gss_buffer_t /* value */);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_cred_label_get_t(OM_uint32 * /* minor_status */,
|
|
gss_cred_id_t /* cred */,
|
|
const char * /* label */,
|
|
gss_buffer_t /* value */);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_display_name_ext_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_name_t, /* name */
|
|
gss_OID, /* display_as_name_type */
|
|
gss_buffer_t /* display_name */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_inquire_name_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_name_t, /* name */
|
|
int *, /* name_is_MN */
|
|
gss_OID *, /* MN_mech */
|
|
gss_buffer_set_t * /* attrs */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_get_name_attribute_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_name_t, /* name */
|
|
gss_buffer_t, /* attr */
|
|
int *, /* authenticated */
|
|
int *, /* complete */
|
|
gss_buffer_t, /* value */
|
|
gss_buffer_t, /* display_value */
|
|
int * /* more */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_set_name_attribute_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_name_t, /* name */
|
|
int, /* complete */
|
|
gss_buffer_t, /* attr */
|
|
gss_buffer_t /* value */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_delete_name_attribute_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_name_t, /* name */
|
|
gss_buffer_t /* attr */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_export_name_composite_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_name_t, /* name */
|
|
gss_buffer_t /* exp_composite_name */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_acquire_cred_from_t(OM_uint32 *minor_status,
|
|
gss_const_name_t desired_name,
|
|
OM_uint32 time_req,
|
|
gss_OID_set desired_mechs,
|
|
gss_cred_usage_t cred_usage,
|
|
gss_const_key_value_set_t cred_store,
|
|
gss_cred_id_t *output_cred_handle,
|
|
gss_OID_set *actual_mechs,
|
|
OM_uint32 *time_rec);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_add_cred_from_t(OM_uint32 *minor_status,
|
|
gss_cred_id_t input_cred_handle,
|
|
gss_const_name_t desired_name,
|
|
const gss_OID desired_mech,
|
|
gss_cred_usage_t cred_usage,
|
|
OM_uint32 initiator_time_req,
|
|
OM_uint32 acceptor_time_req,
|
|
gss_const_key_value_set_t cred_store,
|
|
gss_cred_id_t *output_cred_handle,
|
|
gss_OID_set *actual_mechs,
|
|
OM_uint32 *initiator_time_rec,
|
|
OM_uint32 *acceptor_time_rec);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_store_cred_into_t(OM_uint32 *minor_status,
|
|
gss_const_cred_id_t input_cred_handle,
|
|
gss_cred_usage_t input_usage,
|
|
gss_OID desired_mech,
|
|
OM_uint32 overwrite_cred,
|
|
OM_uint32 default_cred,
|
|
gss_const_key_value_set_t cred_store,
|
|
gss_OID_set *elements_stored,
|
|
gss_cred_usage_t *cred_usage_stored);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_set_neg_mechs_t(OM_uint32 *minor_status,
|
|
gss_cred_id_t cred_handle,
|
|
const gss_OID_set mechs);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_get_neg_mechs_t(OM_uint32 *minor_status,
|
|
gss_const_cred_id_t cred_handle,
|
|
gss_OID_set *mechs);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_query_mechanism_info_t(OM_uint32 *minor_status,
|
|
gss_const_OID mech_oid,
|
|
unsigned char auth_scheme[16]);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_query_meta_data_t(OM_uint32 *minor_status,
|
|
gss_const_OID mech_oid,
|
|
gss_cred_id_t cred_handle,
|
|
gss_ctx_id_t *ctx_handle,
|
|
gss_const_name_t targ_name,
|
|
OM_uint32 req_flags,
|
|
gss_buffer_t meta_data);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_exchange_meta_data_t(OM_uint32 *minor_status,
|
|
gss_const_OID mech_oid,
|
|
gss_cred_id_t cred_handle,
|
|
gss_ctx_id_t *ctx_handle,
|
|
gss_const_name_t targ_name,
|
|
OM_uint32 req_flags,
|
|
gss_const_buffer_t meta_data);
|
|
|
|
/*
|
|
*
|
|
*/
|
|
|
|
typedef struct gss_mo_desc_struct gss_mo_desc;
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV
|
|
_gss_mo_init (OM_uint32 *, gss_OID, gss_mo_desc **, size_t *);
|
|
|
|
|
|
struct gss_mo_desc_struct {
|
|
gss_OID option;
|
|
OM_uint32 flags;
|
|
#define GSS_MO_MA 1
|
|
#define GSS_MO_MA_CRITICAL 2
|
|
const char *name;
|
|
void *ctx;
|
|
int (*get)(gss_const_OID, gss_mo_desc *, gss_buffer_t);
|
|
int (*set)(gss_const_OID, gss_mo_desc *, int, gss_buffer_t);
|
|
};
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_localname_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_const_name_t, /* name */
|
|
const gss_OID, /* mech_type */
|
|
gss_buffer_t /* localname */
|
|
);
|
|
|
|
typedef OM_uint32 GSSAPI_CALLCONV _gss_authorize_localname_t (
|
|
OM_uint32 *, /* minor_status */
|
|
gss_const_name_t, /* name */
|
|
gss_const_buffer_t, /* user */
|
|
gss_const_OID /* user_name_type */
|
|
);
|
|
|
|
struct _gss_name;
|
|
struct _gss_cred;
|
|
|
|
/* mechglue internal */
|
|
struct gss_mech_compat_desc_struct;
|
|
|
|
#define GMI_VERSION 6
|
|
|
|
/* gm_flags */
|
|
#define GM_USE_MG_CRED 1 /* uses mech glue credentials */
|
|
|
|
typedef struct gssapi_mech_interface_desc {
|
|
unsigned gm_version;
|
|
const char *gm_name;
|
|
gss_OID_desc gm_mech_oid;
|
|
unsigned gm_flags;
|
|
_gss_acquire_cred_t *gm_acquire_cred;
|
|
_gss_release_cred_t *gm_release_cred;
|
|
_gss_init_sec_context_t *gm_init_sec_context;
|
|
_gss_accept_sec_context_t *gm_accept_sec_context;
|
|
_gss_process_context_token_t *gm_process_context_token;
|
|
_gss_delete_sec_context_t *gm_delete_sec_context;
|
|
_gss_context_time_t *gm_context_time;
|
|
_gss_get_mic_t *gm_get_mic;
|
|
_gss_verify_mic_t *gm_verify_mic;
|
|
_gss_wrap_t *gm_wrap;
|
|
_gss_unwrap_t *gm_unwrap;
|
|
_gss_display_status_t *gm_display_status;
|
|
_gss_indicate_mechs_t *gm_indicate_mechs;
|
|
_gss_compare_name_t *gm_compare_name;
|
|
_gss_display_name_t *gm_display_name;
|
|
_gss_import_name_t *gm_import_name;
|
|
_gss_export_name_t *gm_export_name;
|
|
_gss_release_name_t *gm_release_name;
|
|
_gss_inquire_cred_t *gm_inquire_cred;
|
|
_gss_inquire_context_t *gm_inquire_context;
|
|
_gss_wrap_size_limit_t *gm_wrap_size_limit;
|
|
_gss_add_cred_t *gm_add_cred;
|
|
_gss_inquire_cred_by_mech_t *gm_inquire_cred_by_mech;
|
|
_gss_export_sec_context_t *gm_export_sec_context;
|
|
_gss_import_sec_context_t *gm_import_sec_context;
|
|
_gss_inquire_names_for_mech_t *gm_inquire_names_for_mech;
|
|
_gss_inquire_mechs_for_name_t *gm_inquire_mechs_for_name;
|
|
_gss_canonicalize_name_t *gm_canonicalize_name;
|
|
_gss_duplicate_name_t *gm_duplicate_name;
|
|
_gss_inquire_sec_context_by_oid_t *gm_inquire_sec_context_by_oid;
|
|
_gss_inquire_cred_by_oid_t *gm_inquire_cred_by_oid;
|
|
_gss_set_sec_context_option_t *gm_set_sec_context_option;
|
|
_gss_set_cred_option_t *gm_set_cred_option;
|
|
_gss_pseudo_random_t *gm_pseudo_random;
|
|
_gss_wrap_iov_t *gm_wrap_iov;
|
|
_gss_unwrap_iov_t *gm_unwrap_iov;
|
|
_gss_wrap_iov_length_t *gm_wrap_iov_length;
|
|
_gss_store_cred_t *gm_store_cred;
|
|
_gss_export_cred_t *gm_export_cred;
|
|
_gss_import_cred_t *gm_import_cred;
|
|
_gss_acquire_cred_from_t *gm_acquire_cred_from; /* was acquire_cred_ext */
|
|
_gss_iter_creds_t *gm_iter_creds;
|
|
_gss_destroy_cred_t *gm_destroy_cred;
|
|
_gss_cred_hold_t *gm_cred_hold;
|
|
_gss_cred_unhold_t *gm_cred_unhold;
|
|
_gss_cred_label_get_t *gm_cred_label_get;
|
|
_gss_cred_label_set_t *gm_cred_label_set;
|
|
gss_mo_desc *gm_mo;
|
|
size_t gm_mo_num;
|
|
_gss_localname_t *gm_localname;
|
|
_gss_authorize_localname_t *gm_authorize_localname;
|
|
_gss_display_name_ext_t *gm_display_name_ext;
|
|
_gss_inquire_name_t *gm_inquire_name;
|
|
_gss_get_name_attribute_t *gm_get_name_attribute;
|
|
_gss_set_name_attribute_t *gm_set_name_attribute;
|
|
_gss_delete_name_attribute_t *gm_delete_name_attribute;
|
|
_gss_export_name_composite_t *gm_export_name_composite;
|
|
_gss_duplicate_cred_t *gm_duplicate_cred;
|
|
_gss_add_cred_from_t *gm_add_cred_from;
|
|
_gss_store_cred_into_t *gm_store_cred_into;
|
|
_gss_set_neg_mechs_t *gm_set_neg_mechs;
|
|
_gss_get_neg_mechs_t *gm_get_neg_mechs;
|
|
_gss_query_mechanism_info_t *gm_query_mechanism_info;
|
|
_gss_query_meta_data_t *gm_query_meta_data;
|
|
_gss_exchange_meta_data_t *gm_exchange_meta_data;
|
|
struct gss_mech_compat_desc_struct *gm_compat;
|
|
} gssapi_mech_interface_desc, *gssapi_mech_interface;
|
|
|
|
gssapi_mech_interface
|
|
__gss_get_mechanism(gss_const_OID /* oid */);
|
|
|
|
gss_OID
|
|
_gss_mg_support_mechanism(gss_const_OID mech);
|
|
|
|
gssapi_mech_interface __gss_spnego_initialize(void);
|
|
gssapi_mech_interface __gss_krb5_initialize(void);
|
|
gssapi_mech_interface __gss_ntlm_initialize(void);
|
|
|
|
void gss_mg_collect_error(gss_OID, OM_uint32, OM_uint32);
|
|
|
|
int _gss_mo_get_option_1(gss_const_OID, gss_mo_desc *, gss_buffer_t);
|
|
int _gss_mo_get_option_0(gss_const_OID, gss_mo_desc *, gss_buffer_t);
|
|
int _gss_mo_get_ctx_as_string(gss_const_OID, gss_mo_desc *, gss_buffer_t);
|
|
|
|
struct _gss_name_type {
|
|
gss_OID gnt_name_type;
|
|
OM_uint32 (*gnt_parse)(OM_uint32 *, gss_const_OID, const gss_buffer_t,
|
|
gss_const_OID, gss_name_t *);
|
|
};
|
|
|
|
struct _gss_oid_name_table {
|
|
gss_OID oid;
|
|
const char *name;
|
|
const char *short_desc;
|
|
const char *long_desc;
|
|
};
|
|
|
|
extern struct _gss_oid_name_table _gss_ont_mech[];
|
|
extern struct _gss_oid_name_table _gss_ont_ma[];
|
|
|
|
int
|
|
_gss_mg_log_level(int level);
|
|
|
|
void
|
|
_gss_mg_log(int level, const char *fmt, ...)
|
|
HEIMDAL_PRINTF_ATTRIBUTE((printf, 2, 3));
|
|
|
|
void
|
|
_gss_mg_log_name(int level,
|
|
struct _gss_name *name,
|
|
gss_OID mech_type,
|
|
const char *fmt, ...);
|
|
|
|
void
|
|
_gss_mg_log_cred(int level,
|
|
struct _gss_cred *cred,
|
|
const char *fmt, ...);
|
|
|
|
|
|
void
|
|
_gss_load_plugins(void);
|
|
|
|
gss_iov_buffer_desc *
|
|
_gss_mg_find_buffer(gss_iov_buffer_desc *iov,
|
|
int iov_count,
|
|
OM_uint32 type);
|
|
|
|
OM_uint32
|
|
_gss_mg_allocate_buffer(OM_uint32 *minor_status,
|
|
gss_iov_buffer_desc *buffer,
|
|
size_t size);
|
|
|
|
OM_uint32
|
|
gss_mg_set_error_string(gss_OID mech,
|
|
OM_uint32 maj, OM_uint32 min,
|
|
const char *fmt, ...);
|
|
|
|
gss_cred_id_t
|
|
_gss_mg_find_mech_cred(gss_const_cred_id_t cred_handle,
|
|
gss_const_OID mech_type);
|
|
|
|
#include <krb5.h>
|
|
|
|
/*
|
|
* Mechglue krb5 context for use by NegoEx. This is not shared with the
|
|
* krb5 GSS mechanism so we don't clobber its error state.
|
|
*/
|
|
krb5_context
|
|
_gss_mg_krb5_context(void);
|
|
|
|
#endif /* GSSAPI_MECH_H */
|