1178825Sdfr/* 2233294Sstas * Copyright (c) 2006 Kungliga Tekniska H��gskolan 3233294Sstas * (Royal Institute of Technology, Stockholm, Sweden). 4233294Sstas * All rights reserved. 5178825Sdfr * 6233294Sstas * Redistribution and use in source and binary forms, with or without 7233294Sstas * modification, are permitted provided that the following conditions 8233294Sstas * are met: 9178825Sdfr * 10233294Sstas * 1. Redistributions of source code must retain the above copyright 11233294Sstas * notice, this list of conditions and the following disclaimer. 12178825Sdfr * 13233294Sstas * 2. Redistributions in binary form must reproduce the above copyright 14233294Sstas * notice, this list of conditions and the following disclaimer in the 15233294Sstas * documentation and/or other materials provided with the distribution. 16178825Sdfr * 17233294Sstas * 3. Neither the name of the Institute nor the names of its contributors 18233294Sstas * may be used to endorse or promote products derived from this software 19233294Sstas * without specific prior written permission. 20178825Sdfr * 21233294Sstas * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22233294Sstas * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23233294Sstas * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24233294Sstas * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25233294Sstas * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26233294Sstas * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27233294Sstas * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28233294Sstas * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29233294Sstas * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30233294Sstas * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31233294Sstas * SUCH DAMAGE. 32178825Sdfr */ 33178825Sdfr 34233294Sstas/* $Id$ */ 35178825Sdfr 36178825Sdfr#ifndef HEIMDAL_KRB5_PAC_PLUGIN_H 37178825Sdfr#define HEIMDAL_KRB5_PAC_PLUGIN_H 1 38178825Sdfr 39178825Sdfr#include <krb5.h> 40178825Sdfr 41178825Sdfr/* 42178825Sdfr * The PAC generate function should allocate a krb5_pac using 43178825Sdfr * krb5_pac_init and fill in the PAC structure for the principal using 44178825Sdfr * krb5_pac_add_buffer. 45178825Sdfr * 46178825Sdfr * The PAC verify function should verify all components in the PAC 47178825Sdfr * using krb5_pac_get_types and krb5_pac_get_buffer for all types. 48178825Sdfr * 49178825Sdfr * Check client access function check if the client is authorized. 50178825Sdfr */ 51178825Sdfr 52178825Sdfrstruct hdb_entry_ex; 53178825Sdfr 54233294Sstastypedef krb5_error_code 55178825Sdfr(*krb5plugin_windc_pac_generate)(void *, krb5_context, 56178825Sdfr struct hdb_entry_ex *, krb5_pac *); 57178825Sdfr 58233294Sstastypedef krb5_error_code 59178825Sdfr(*krb5plugin_windc_pac_verify)(void *, krb5_context, 60233294Sstas const krb5_principal, /* new ticket client */ 61233294Sstas const krb5_principal, /* delegation proxy */ 62233294Sstas struct hdb_entry_ex *,/* client */ 63233294Sstas struct hdb_entry_ex *,/* server */ 64233294Sstas struct hdb_entry_ex *,/* krbtgt */ 65178825Sdfr krb5_pac *); 66178825Sdfr 67233294Sstastypedef krb5_error_code 68178825Sdfr(*krb5plugin_windc_client_access)( 69233294Sstas void *, krb5_context, 70233294Sstas krb5_kdc_configuration *config, 71233294Sstas hdb_entry_ex *, const char *, 72233294Sstas hdb_entry_ex *, const char *, 73233294Sstas KDC_REQ *, krb5_data *); 74178825Sdfr 75178825Sdfr 76233294Sstas#define KRB5_WINDC_PLUGIN_MINOR 6 77233294Sstas#define KRB5_WINDC_PLUGING_MINOR KRB5_WINDC_PLUGIN_MINOR 78178825Sdfr 79178825Sdfrtypedef struct krb5plugin_windc_ftable { 80178825Sdfr int minor_version; 81178825Sdfr krb5_error_code (*init)(krb5_context, void **); 82178825Sdfr void (*fini)(void *); 83178825Sdfr krb5plugin_windc_pac_generate pac_generate; 84178825Sdfr krb5plugin_windc_pac_verify pac_verify; 85178825Sdfr krb5plugin_windc_client_access client_access; 86178825Sdfr} krb5plugin_windc_ftable; 87178825Sdfr 88178825Sdfr#endif /* HEIMDAL_KRB5_PAC_PLUGIN_H */ 89178825Sdfr 90