1 /* $NetBSD: krb5-v4compat.h,v 1.2 2017/01/28 21:31:49 christos Exp $ */ 2 3 /* 4 * Copyright (c) 1997 - 2003 Kungliga Tekniska Högskolan 5 * (Royal Institute of Technology, Stockholm, Sweden). 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * 3. Neither the name of the Institute nor the names of its contributors 20 * may be used to endorse or promote products derived from this software 21 * without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33 * SUCH DAMAGE. 34 */ 35 36 /* Id */ 37 38 #ifndef __KRB5_V4COMPAT_H__ 39 #define __KRB5_V4COMPAT_H__ 40 41 #include <krb5/krb_err.h> 42 43 /* 44 * This file must only be included with v4 compat glue stuff in 45 * heimdal sources. 46 * 47 * It MUST NOT be installed. 48 */ 49 50 #define KRB_PROT_VERSION 4 51 52 #define AUTH_MSG_KDC_REQUEST (1<<1) 53 #define AUTH_MSG_KDC_REPLY (2<<1) 54 #define AUTH_MSG_APPL_REQUEST (3<<1) 55 #define AUTH_MSG_APPL_REQUEST_MUTUAL (4<<1) 56 #define AUTH_MSG_ERR_REPLY (5<<1) 57 #define AUTH_MSG_PRIVATE (6<<1) 58 #define AUTH_MSG_SAFE (7<<1) 59 #define AUTH_MSG_APPL_ERR (8<<1) 60 #define AUTH_MSG_KDC_FORWARD (9<<1) 61 #define AUTH_MSG_KDC_RENEW (10<<1) 62 #define AUTH_MSG_DIE (63<<1) 63 64 /* General definitions */ 65 #define KSUCCESS 0 66 #define KFAILURE 255 67 68 /* */ 69 70 #define MAX_KTXT_LEN 1250 71 72 #define ANAME_SZ 40 73 #define REALM_SZ 40 74 #define SNAME_SZ 40 75 #define INST_SZ 40 76 77 struct ktext { 78 unsigned int length; /* Length of the text */ 79 unsigned char dat[MAX_KTXT_LEN]; /* The data itself */ 80 uint32_t mbz; /* zero to catch runaway strings */ 81 }; 82 83 struct credentials { 84 char service[ANAME_SZ]; /* Service name */ 85 char instance[INST_SZ]; /* Instance */ 86 char realm[REALM_SZ]; /* Auth domain */ 87 char session[8]; /* Session key */ 88 int lifetime; /* Lifetime */ 89 int kvno; /* Key version number */ 90 struct ktext ticket_st; /* The ticket itself */ 91 int32_t issue_date; /* The issue time */ 92 char pname[ANAME_SZ]; /* Principal's name */ 93 char pinst[INST_SZ]; /* Principal's instance */ 94 }; 95 96 #define TKTLIFENUMFIXED 64 97 #define TKTLIFEMINFIXED 0x80 98 #define TKTLIFEMAXFIXED 0xBF 99 #define TKTLIFENOEXPIRE 0xFF 100 #define MAXTKTLIFETIME (30*24*3600) /* 30 days */ 101 #ifndef NEVERDATE 102 #define NEVERDATE ((time_t)0x7fffffffL) 103 #endif 104 105 #define KERB_ERR_NULL_KEY 10 106 107 #define CLOCK_SKEW 5*60 108 109 #ifndef TKT_ROOT 110 #ifdef KRB5_USE_PATH_TOKENS 111 #define TKT_ROOT "%{TEMP}/tkt" 112 #else 113 #define TKT_ROOT "/tmp/tkt" 114 #endif 115 #endif 116 117 struct _krb5_krb_auth_data { 118 int8_t k_flags; /* Flags from ticket */ 119 char *pname; /* Principal's name */ 120 char *pinst; /* His Instance */ 121 char *prealm; /* His Realm */ 122 uint32_t checksum; /* Data checksum (opt) */ 123 krb5_keyblock session; /* Session Key */ 124 unsigned char life; /* Life of ticket */ 125 uint32_t time_sec; /* Time ticket issued */ 126 uint32_t address; /* Address in ticket */ 127 }; 128 129 KRB5_LIB_FUNCTION time_t KRB5_LIB_CALL 130 _krb5_krb_life_to_time (int, int); 131 132 KRB5_LIB_FUNCTION int KRB5_LIB_CALL 133 _krb5_krb_time_to_life (time_t, time_t); 134 135 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 136 _krb5_krb_tf_setup (krb5_context, struct credentials *, 137 const char *, int); 138 139 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 140 _krb5_krb_dest_tkt(krb5_context, const char *); 141 142 #define krb_time_to_life _krb5_krb_time_to_life 143 #define krb_life_to_time _krb5_krb_life_to_time 144 145 #endif /* __KRB5_V4COMPAT_H__ */ 146