1/*
2 * Copyright (c) 1997-2006 Kungliga Tekniska H�gskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 *
10 * 1. Redistributions of source code must retain the above copyright
11 *    notice, this list of conditions and the following disclaimer.
12 *
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 *
17 * 3. Neither the name of the Institute nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34/* $Id: krb5_locl.h 22226 2007-12-08 21:31:53Z lha $ */
35/* $FreeBSD$ */
36
37#ifndef __KRB5_LOCL_H__
38#define __KRB5_LOCL_H__
39
40#ifdef HAVE_CONFIG_H
41#include <config.h>
42#endif
43
44#include <errno.h>
45#include <ctype.h>
46#include <string.h>
47#include <stdio.h>
48#include <stdlib.h>
49#include <limits.h>
50
51#ifdef HAVE_SYS_TYPES_H
52#include <sys/types.h>
53#endif
54#ifdef HAVE_SYS_MMAN_H
55#include <sys/mman.h>
56#endif
57#ifdef HAVE_UNISTD_H
58#include <unistd.h>
59#endif
60#ifdef HAVE_FCNTL_H
61#include <fcntl.h>
62#endif
63
64#if defined(HAVE_SYS_IOCTL_H) && SunOS != 40
65#include <sys/ioctl.h>
66#endif
67#ifdef HAVE_PWD_H
68#undef _POSIX_PTHREAD_SEMANTICS
69/* This gets us the 5-arg getpwnam_r on Solaris 9.  */
70#define _POSIX_PTHREAD_SEMANTICS
71#include <pwd.h>
72#endif
73
74#ifdef HAVE_SYS_PARAM_H
75#include <sys/param.h>
76#endif
77#include <time.h>
78#ifdef HAVE_SYS_TIME_H
79#include <sys/time.h>
80#endif
81#ifdef HAVE_SYS_SELECT_H
82#include <sys/select.h>
83#endif
84#ifdef HAVE_SYS_SOCKET_H
85#include <sys/socket.h>
86#endif
87#ifdef HAVE_NETINET_IN_H
88#include <netinet/in.h>
89#endif
90#ifdef HAVE_NETINET_IN6_H
91#include <netinet/in6.h>
92#endif
93#ifdef HAVE_NETINET6_IN6_H
94#include <netinet6/in6.h>
95#endif
96#ifdef HAVE_NETDB_H
97#include <netdb.h>
98#endif
99#ifdef _AIX
100struct ether_addr;
101struct mbuf;
102struct sockaddr_dl;
103#endif
104#ifdef HAVE_ARPA_INET_H
105#include <arpa/inet.h>
106#endif
107#ifdef HAVE_ARPA_NAMESER_H
108#include <arpa/nameser.h>
109#endif
110#ifdef HAVE_SYS_UIO_H
111#include <sys/uio.h>
112#endif
113#ifdef HAVE_SYS_FILIO_H
114#include <sys/filio.h>
115#endif
116#ifdef HAVE_SYS_FILE_H
117#include <sys/file.h>
118#endif
119
120#ifdef HAVE_CRYPT_H
121#undef des_encrypt
122#define des_encrypt wingless_pigs_mostly_fail_to_fly
123#include <crypt.h>
124#undef des_encrypt
125#endif
126
127#ifdef HAVE_DOOR_CREATE
128#include <door.h>
129#endif
130
131#include <roken.h>
132#include <parse_time.h>
133#include <base64.h>
134
135#include "crypto-headers.h"
136
137
138#include <krb5_asn1.h>
139
140struct send_to_kdc;
141
142/* XXX glue for pkinit */
143struct krb5_pk_identity;
144struct krb5_pk_cert;
145struct ContentInfo;
146typedef struct krb5_pk_init_ctx_data *krb5_pk_init_ctx;
147struct krb5_dh_moduli;
148
149/* v4 glue */
150struct _krb5_krb_auth_data;
151
152#include <der.h>
153
154#include <krb5.h>
155#include <krb5_err.h>
156#include <asn1_err.h>
157#ifdef PKINIT
158#include <hx509_err.h>
159#endif
160#include <krb5-private.h>
161
162#include "heim_threads.h"
163
164#define ALLOC(X, N) (X) = calloc((N), sizeof(*(X)))
165#define ALLOC_SEQ(X, N) do { (X)->len = (N); ALLOC((X)->val, (N)); } while(0)
166
167/* should this be public? */
168#define KEYTAB_DEFAULT "ANY:FILE:" SYSCONFDIR "/krb5.keytab,krb4:" SYSCONFDIR "/srvtab"
169#define KEYTAB_DEFAULT_MODIFY "FILE:" SYSCONFDIR "/krb5.keytab"
170
171#define MODULI_FILE SYSCONFDIR "/krb5.moduli"
172
173#ifndef O_BINARY
174#define O_BINARY 0
175#endif
176
177#define KRB5_BUFSIZ 1024
178
179typedef enum {
180    KRB5_INIT_CREDS_TRISTATE_UNSET = 0,
181    KRB5_INIT_CREDS_TRISTATE_TRUE,
182    KRB5_INIT_CREDS_TRISTATE_FALSE
183} krb5_get_init_creds_tristate;
184
185struct _krb5_get_init_creds_opt_private {
186    int refcount;
187    /* ENC_TIMESTAMP */
188    const char *password;
189    krb5_s2k_proc key_proc;
190    /* PA_PAC_REQUEST */
191    krb5_get_init_creds_tristate req_pac;
192    /* PKINIT */
193    krb5_pk_init_ctx pk_init_ctx;
194    KRB_ERROR *error;
195    krb5_get_init_creds_tristate addressless;
196    int flags;
197#define KRB5_INIT_CREDS_CANONICALIZE		1
198#define KRB5_INIT_CREDS_NO_C_CANON_CHECK	2
199};
200
201typedef struct krb5_context_data {
202    krb5_enctype *etypes;
203    krb5_enctype *etypes_des;
204    char **default_realms;
205    time_t max_skew;
206    time_t kdc_timeout;
207    unsigned max_retries;
208    int32_t kdc_sec_offset;
209    int32_t kdc_usec_offset;
210    krb5_config_section *cf;
211    struct et_list *et_list;
212    struct krb5_log_facility *warn_dest;
213    krb5_cc_ops *cc_ops;
214    int num_cc_ops;
215    const char *http_proxy;
216    const char *time_fmt;
217    krb5_boolean log_utc;
218    const char *default_keytab;
219    const char *default_keytab_modify;
220    krb5_boolean use_admin_kdc;
221    krb5_addresses *extra_addresses;
222    krb5_boolean scan_interfaces;	/* `ifconfig -a' */
223    krb5_boolean srv_lookup;		/* do SRV lookups */
224    krb5_boolean srv_try_txt;		/* try TXT records also */
225    int32_t fcache_vno;			/* create cache files w/ this
226                                           version */
227    int num_kt_types;			/* # of registered keytab types */
228    struct krb5_keytab_data *kt_types;  /* registered keytab types */
229    const char *date_fmt;
230    char *error_string;
231    char error_buf[256];
232    krb5_addresses *ignore_addresses;
233    char *default_cc_name;
234    char *default_cc_name_env;
235    int default_cc_name_set;
236    void *mutex;			/* protects error_string/error_buf */
237    int large_msg_size;
238    int flags;
239#define KRB5_CTX_F_DNS_CANONICALIZE_HOSTNAME	1
240#define KRB5_CTX_F_CHECK_PAC			2
241    struct send_to_kdc *send_to_kdc;
242} krb5_context_data;
243
244#define KRB5_DEFAULT_CCNAME_FILE "FILE:/tmp/krb5cc_%{uid}"
245#define KRB5_DEFAULT_CCNAME_API "API:"
246#define KRB5_DEFAULT_CCNAME_KCM "KCM:%{uid}"
247
248#define EXTRACT_TICKET_ALLOW_CNAME_MISMATCH		1
249#define EXTRACT_TICKET_ALLOW_SERVER_MISMATCH		2
250#define EXTRACT_TICKET_MATCH_REALM			4
251
252/*
253 * Configurable options
254 */
255
256#ifndef KRB5_DEFAULT_CCTYPE
257#ifdef __APPLE__
258#define KRB5_DEFAULT_CCTYPE (&krb5_acc_ops)
259#else
260#define KRB5_DEFAULT_CCTYPE (&krb5_fcc_ops)
261#endif
262#endif
263
264#ifndef KRB5_ADDRESSLESS_DEFAULT
265#define KRB5_ADDRESSLESS_DEFAULT TRUE
266#endif
267
268#endif /* __KRB5_LOCL_H__ */
269