1/*
2 * Copyright (c) 2011 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Portions Copyright (c) 2011 Apple Inc. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 *    notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 *    notice, this list of conditions and the following disclaimer in the
17 *    documentation and/or other materials provided with the distribution.
18 *
19 * 3. Neither the name of the Institute nor the names of its contributors
20 *    may be used to endorse or promote products derived from this software
21 *    without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * SUCH DAMAGE.
34 */
35
36#ifndef __GSSAPI_PLUGIN_H
37#define __GSSAPI_PLUGIN_H 1
38
39#define GSSAPI_PLUGIN "gssapi_plugin"
40
41typedef gss_cred_id_t
42(*gssapi_plugin_isc_replace_cred)(gss_name_t target, gss_OID mech, gss_cred_id_t original_cred, OM_uint32 flags);
43
44/*
45 * Flags passed in the flags argument to ->isc_replace_cred()
46 */
47#define GPT_IRC_F_SYSTEM_ONLY	1 /* system resource only, home directory access is no allowed */
48
49/*
50 * Flags defined by the plugin in gssapi_plugin_ftable
51 */
52#define GPT_SYSTEM_ONLY		1	/* plugin support GPT_IRC_F_SYSTEM_ONLY and friends */
53
54/*
55 * Plugin for GSSAPI
56 */
57
58typedef struct gssapi_plugin_ftable {
59    int			minor_version; /* support protocol: GSSAPI_PLUGIN_VERSION_N */
60    krb5_error_code	(*init)(krb5_context, void **);
61    void		(*fini)(void *);
62    const char		*name;
63    unsigned long	flags;
64    gssapi_plugin_isc_replace_cred isc_replace_cred;
65} gssapi_plugin_ftable;
66
67#define GSSAPI_PLUGIN_VERSION_1 1
68
69/* history of version changes:
70 * version 0 (no supported) was missing flags argument to ->isc_replace_cred()
71 */
72
73#endif
74
75