1/*	$NetBSD: windc_plugin.h,v 1.3 2023/06/19 21:41:42 christos Exp $	*/
2
3/*
4 * Copyright (c) 2006 Kungliga Tekniska H��gskolan
5 * (Royal Institute of Technology, Stockholm, Sweden).
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 *    notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 *    notice, this list of conditions and the following disclaimer in the
17 *    documentation and/or other materials provided with the distribution.
18 *
19 * 3. Neither the name of the Institute nor the names of its contributors
20 *    may be used to endorse or promote products derived from this software
21 *    without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * SUCH DAMAGE.
34 */
35
36/* Id */
37
38#ifndef HEIMDAL_KRB5_PAC_PLUGIN_H
39#define HEIMDAL_KRB5_PAC_PLUGIN_H 1
40
41#include <krb5/krb5.h>
42
43/*
44 * The PAC generate function should allocate a krb5_pac using
45 * krb5_pac_init and fill in the PAC structure for the principal using
46 * krb5_pac_add_buffer.
47 *
48 * The PAC verify function should verify all components in the PAC
49 * using krb5_pac_get_types and krb5_pac_get_buffer for all types.
50 *
51 * Check client access function check if the client is authorized.
52 */
53
54struct hdb_entry_ex;
55
56typedef krb5_error_code
57(KRB5_CALLCONV *krb5plugin_windc_pac_generate)(void *, krb5_context,
58				 struct hdb_entry_ex *, krb5_pac *);
59
60typedef krb5_error_code
61(KRB5_CALLCONV *krb5plugin_windc_pac_verify)(void *, krb5_context,
62			       const krb5_principal, /* new ticket client */
63			       const krb5_principal, /* delegation proxy */
64			       struct hdb_entry_ex *,/* client */
65			       struct hdb_entry_ex *,/* server */
66			       struct hdb_entry_ex *,/* krbtgt */
67			       krb5_pac *);
68
69typedef krb5_error_code
70(KRB5_CALLCONV *krb5plugin_windc_client_access)(
71	void *, krb5_context,
72	krb5_kdc_configuration *config,
73	hdb_entry_ex *, const char *,
74	hdb_entry_ex *, const char *,
75	KDC_REQ *, METHOD_DATA *);
76
77
78#define KRB5_WINDC_PLUGIN_MINOR			6
79#define KRB5_WINDC_PLUGING_MINOR KRB5_WINDC_PLUGIN_MINOR
80
81typedef struct krb5plugin_windc_ftable {
82    int			minor_version;
83    krb5_error_code	(KRB5_CALLCONV *init)(krb5_context, void **);
84    void		(KRB5_CALLCONV *fini)(void *);
85    krb5plugin_windc_pac_generate	pac_generate;
86    krb5plugin_windc_pac_verify		pac_verify;
87    krb5plugin_windc_client_access	client_access;
88} krb5plugin_windc_ftable;
89
90#endif /* HEIMDAL_KRB5_PAC_PLUGIN_H */
91
92