1/*
2 * Copyright (c) 1997-2005 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 *
10 * 1. Redistributions of source code must retain the above copyright
11 *    notice, this list of conditions and the following disclaimer.
12 *
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 *
17 * 3. Neither the name of the Institute nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34/*
35 * $Id$
36 */
37
38#ifndef __KDC_LOCL_H__
39#define __KDC_LOCL_H__
40
41#include "headers.h"
42
43typedef struct pk_client_params pk_client_params;
44struct DigestREQ;
45struct Kx509Request;
46typedef struct kdc_request_desc *kdc_request_t;
47
48#include <kdc-private.h>
49
50#define FAST_EXPIRATION_TIME (3 * 60)
51
52struct kdc_request_desc {
53    krb5_context context;
54    krb5_kdc_configuration *config;
55
56    /* */
57
58    krb5_data request;
59    KDC_REQ req;
60    METHOD_DATA *padata;
61
62    /* out */
63
64    METHOD_DATA outpadata;
65
66    KDC_REP rep;
67    EncTicketPart et;
68    EncKDCRepPart ek;
69
70    /* PA methods can affect both the reply key and the session key (pkinit) */
71    krb5_enctype sessionetype;
72    krb5_keyblock reply_key;
73    krb5_keyblock session_key;
74
75    const char *e_text;
76
77    /* state */
78    krb5_principal client_princ;
79    char *client_name;
80    hdb_entry_ex *client;
81    HDB *clientdb;
82
83    /* server used for krbtgt in TGS-REQ */
84    krb5_principal server_princ;
85    char *server_name;
86    hdb_entry_ex *server;
87
88    krb5_keyblock strengthen_key;
89
90    /* only valid for tgs-req */
91    krb5_enctype server_enctype;
92    int rk_is_subkey;
93
94    krb5_crypto armor_crypto;
95
96    int use_fast_cookie;
97    KDCFastState fast;
98};
99
100
101extern sig_atomic_t exit_flag;
102extern size_t max_request_udp;
103extern size_t max_request_tcp;
104extern const char *request_log;
105extern const char *port_str;
106extern krb5_addresses explicit_addresses;
107
108extern int enable_http;
109
110#ifdef SUPPORT_DETACH
111
112#define DETACH_IS_DEFAULT FALSE
113
114extern int detach_from_console;
115#endif
116
117extern const struct units _kdc_digestunits[];
118
119#define KDC_LOG_FILE		"kdc.log"
120#ifdef __APPLE__
121#define KDC_LOG_DIR		LOCALSTATEDIR "/log/krb5kdc"
122#else
123#define KDC_LOG_DIR		LOCALSTATEDIR "/log"
124#endif
125
126extern struct timeval _kdc_now;
127#define kdc_time (_kdc_now.tv_sec)
128
129extern char *runas_string;
130extern char *chroot_string;
131extern int listen_on_ipc;
132extern int listen_on_network;
133
134void
135setup_listeners(krb5_context context, krb5_kdc_configuration *config, int, int);
136
137krb5_kdc_configuration *
138configure(krb5_context context, int argc, char **argv);
139
140#ifdef __APPLE__
141extern int sandbox_flag;
142void bonjour_announce(heim_array_t (*get_realms)(void));
143#endif
144
145#ifdef HEIMDAL_PRINTF_ATTRIBUTE
146#undef HEIMDAL_PRINTF_ATTRIBUTE
147#define HEIMDAL_PRINTF_ATTRIBUTE(x)
148#endif
149
150#endif /* __KDC_LOCL_H__ */
151