1/* 2 * Copyright (c) 1997 - 2003 Kungliga Tekniska H��gskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34/* $Id$ */ 35 36#ifndef __KRB5_V4COMPAT_H__ 37#define __KRB5_V4COMPAT_H__ 38 39#include "krb_err.h" 40 41/* 42 * This file must only be included with v4 compat glue stuff in 43 * heimdal sources. 44 * 45 * It MUST NOT be installed. 46 */ 47 48#define KRB_PROT_VERSION 4 49 50#define AUTH_MSG_KDC_REQUEST (1<<1) 51#define AUTH_MSG_KDC_REPLY (2<<1) 52#define AUTH_MSG_APPL_REQUEST (3<<1) 53#define AUTH_MSG_APPL_REQUEST_MUTUAL (4<<1) 54#define AUTH_MSG_ERR_REPLY (5<<1) 55#define AUTH_MSG_PRIVATE (6<<1) 56#define AUTH_MSG_SAFE (7<<1) 57#define AUTH_MSG_APPL_ERR (8<<1) 58#define AUTH_MSG_KDC_FORWARD (9<<1) 59#define AUTH_MSG_KDC_RENEW (10<<1) 60#define AUTH_MSG_DIE (63<<1) 61 62/* General definitions */ 63#define KSUCCESS 0 64#define KFAILURE 255 65 66/* */ 67 68#define MAX_KTXT_LEN 1250 69 70#define ANAME_SZ 40 71#define REALM_SZ 40 72#define SNAME_SZ 40 73#define INST_SZ 40 74 75struct ktext { 76 unsigned int length; /* Length of the text */ 77 unsigned char dat[MAX_KTXT_LEN]; /* The data itself */ 78 uint32_t mbz; /* zero to catch runaway strings */ 79}; 80 81struct credentials { 82 char service[ANAME_SZ]; /* Service name */ 83 char instance[INST_SZ]; /* Instance */ 84 char realm[REALM_SZ]; /* Auth domain */ 85 char session[8]; /* Session key */ 86 int lifetime; /* Lifetime */ 87 int kvno; /* Key version number */ 88 struct ktext ticket_st; /* The ticket itself */ 89 int32_t issue_date; /* The issue time */ 90 char pname[ANAME_SZ]; /* Principal's name */ 91 char pinst[INST_SZ]; /* Principal's instance */ 92}; 93 94#define TKTLIFENUMFIXED 64 95#define TKTLIFEMINFIXED 0x80 96#define TKTLIFEMAXFIXED 0xBF 97#define TKTLIFENOEXPIRE 0xFF 98#define MAXTKTLIFETIME (30*24*3600) /* 30 days */ 99#ifndef NEVERDATE 100#define NEVERDATE ((time_t)0x7fffffffL) 101#endif 102 103#define KERB_ERR_NULL_KEY 10 104 105#define CLOCK_SKEW 5*60 106 107#ifndef TKT_ROOT 108#ifdef KRB5_USE_PATH_TOKENS 109#define TKT_ROOT "%{TEMP}/tkt" 110#else 111#define TKT_ROOT "/tmp/tkt" 112#endif 113#endif 114 115struct _krb5_krb_auth_data { 116 int8_t k_flags; /* Flags from ticket */ 117 char *pname; /* Principal's name */ 118 char *pinst; /* His Instance */ 119 char *prealm; /* His Realm */ 120 uint32_t checksum; /* Data checksum (opt) */ 121 krb5_keyblock session; /* Session Key */ 122 unsigned char life; /* Life of ticket */ 123 uint32_t time_sec; /* Time ticket issued */ 124 uint32_t address; /* Address in ticket */ 125}; 126 127KRB5_LIB_FUNCTION time_t KRB5_LIB_CALL 128_krb5_krb_life_to_time (int, int); 129 130KRB5_LIB_FUNCTION int KRB5_LIB_CALL 131_krb5_krb_time_to_life (time_t, time_t); 132 133KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 134_krb5_krb_tf_setup (krb5_context, struct credentials *, 135 const char *, int); 136 137KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 138_krb5_krb_dest_tkt(krb5_context, const char *); 139 140#define krb_time_to_life _krb5_krb_time_to_life 141#define krb_life_to_time _krb5_krb_life_to_time 142 143#endif /* __KRB5_V4COMPAT_H__ */ 144