1/* $NetBSD$ */ 2 3/* Id: gssapi.h,v 1.5 2005/02/11 06:59:01 manubsd Exp */ 4 5/* 6 * Copyright 2000 Wasabi Systems, Inc. 7 * All rights reserved. 8 * 9 * This software was written by Frank van der Linden of Wasabi Systems 10 * for Zembu Labs, Inc. http://www.zembu.com/ 11 * 12 * Redistribution and use in source and binary forms, with or without 13 * modification, are permitted provided that the following conditions 14 * are met: 15 * 1. Redistributions of source code must retain the above copyright 16 * notice, this list of conditions and the following disclaimer. 17 * 2. Redistributions in binary form must reproduce the above copyright 18 * notice, this list of conditions and the following disclaimer in the 19 * documentation and/or other materials provided with the distribution. 20 * 3. The name of Wasabi Systems, Inc. may not be used to endorse 21 * or promote products derived from this software without specific prior 22 * written permission. 23 * 24 * THIS SOFTWARE IS PROVIDED BY WASABI SYSTEMS, INC. ``AS IS'' AND 25 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 26 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 27 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL WASABI SYSTEMS, INC 28 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 29 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 30 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 31 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 32 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 33 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 34 * POSSIBILITY OF SUCH DAMAGE. 35 */ 36 37#ifdef __FreeBSD__ 38#include "/usr/include/gssapi.h" 39#else 40#include <gssapi/gssapi.h> 41#endif 42 43#define GSSAPI_DEF_NAME "host" 44 45struct ph1handle; 46struct isakmpsa; 47 48struct gssapi_ph1_state { 49 int gsscnt; /* # of token we're working on */ 50 int gsscnt_p; /* # of token we're working on */ 51 52 gss_buffer_desc gss[3]; /* gss-api tokens. */ 53 /* NOTE: XXX this restricts the max # */ 54 /* to 3. More should never happen */ 55 56 gss_buffer_desc gss_p[3]; 57 58 gss_ctx_id_t gss_context; /* context for gss_init_sec_context */ 59 60 OM_uint32 gss_status; /* retval from gss_init_sec_context */ 61 gss_cred_id_t gss_cred; /* acquired credentials */ 62 63 int gss_flags; 64#define GSSFLAG_ID_SENT 0x0001 65#define GSSFLAG_ID_RCVD 0x0001 66}; 67 68#define gssapi_get_state(ph) \ 69 ((struct gssapi_ph1_state *)((ph)->gssapi_state)) 70 71#define gssapi_set_state(ph, st) \ 72 (ph)->gssapi_state = (st) 73 74#define gssapi_more_tokens(ph) \ 75 ((gssapi_get_state(ph)->gss_status & GSS_S_CONTINUE_NEEDED) != 0) 76 77int gssapi_get_itoken __P((struct ph1handle *, int *)); 78int gssapi_get_rtoken __P((struct ph1handle *, int *)); 79int gssapi_save_received_token __P((struct ph1handle *, vchar_t *)); 80int gssapi_get_token_to_send __P((struct ph1handle *, vchar_t **)); 81int gssapi_get_itokens __P((struct ph1handle *, vchar_t **)); 82int gssapi_get_rtokens __P((struct ph1handle *, vchar_t **)); 83vchar_t *gssapi_wraphash __P((struct ph1handle *)); 84vchar_t *gssapi_unwraphash __P((struct ph1handle *)); 85void gssapi_set_id_sent __P((struct ph1handle *)); 86int gssapi_id_sent __P((struct ph1handle *)); 87void gssapi_set_id_rcvd __P((struct ph1handle *)); 88int gssapi_id_rcvd __P((struct ph1handle *)); 89void gssapi_free_state __P((struct ph1handle *)); 90vchar_t *gssapi_get_id __P((struct ph1handle *)); 91vchar_t *gssapi_get_default_gss_id __P((void)); 92