1 /*	$NetBSD: auth.h,v 1.15 2000/06/02 22:57:55 fvdl Exp $	*/
3 /*-
4  * SPDX-License-Identifier: BSD-3-Clause
11  * - Redistributions of source code must retain the above copyright notice, 
13  * - Redistributions in binary form must reproduce the above copyright notice, 
16  * - Neither the name of Sun Microsystems, Inc. nor the names of its 
34  * auth.h, Authentication interface.
39  * is required to pass an AUTH * to routines that create rpc
98  * in sec_data->data opaque field.
167 	enum_t	oa_flavor;		/* flavor of auth */
168 	caddr_t	oa_base;		/* address of more auth stuff */
174  * Auth handle, interface to client side authenticators.
195 } AUTH;  typedef
200  * The ops and the auth handle provide the interface to the authenticators.
202  * AUTH	*auth;
206 #define AUTH_NEXTVERF(auth)		\  argument
207 		((*((auth)->ah_ops->ah_nextverf))(auth))
209 #define AUTH_MARSHALL(auth, xid, xdrs, args)	\  argument
210 		((*((auth)->ah_ops->ah_marshal))(auth, xid, xdrs, args))
212 #define AUTH_VALIDATE(auth, xid, verfp, resultsp) \  argument
213 		((*((auth)->ah_ops->ah_validate))((auth), xid, verfp, resultsp))
215 #define AUTH_REFRESH(auth, msg)		\  argument
216 		((*((auth)->ah_ops->ah_refresh))(auth, msg))
218 #define AUTH_DESTROY(auth)		\  argument
219 		((*((auth)->ah_ops->ah_destroy))(auth))
230  * System style authentication
231  * AUTH *authunix_create(machname, uid, gid, len, aup_gids)
241 extern AUTH *authunix_create(struct ucred *);
243 extern AUTH *authunix_create(char *, u_int, u_int, int, u_int *);
244 extern AUTH *authunix_create_default(void);	/* takes no parameters */
246 extern AUTH *authnone_create(void);		/* takes no parameters */
247 extern AUTH *authtls_create(void);		/* takes no parameters */
251  * AUTH *authsecdes_create(servername, window, timehost, ckey)
252  * 	char *servername;		- network name of server
253  *	u_int window;			- time to live
254  * 	const char *timehost;			- optional hostname to sync with
255  * 	des_block *ckey;		- optional conversation key to use
258 extern AUTH *authdes_create (char *, u_int, struct sockaddr *, des_block *);
259 extern AUTH *authdes_seccreate (const char *, const u_int, const  char *,
307  * AUTH *authkerb_seccreate(service, srv_inst, realm, window, timehost, status)
308  *	const char *service;			- service name
309  *	const char *srv_inst;			- server instance
310  *	const char *realm;			- server realm
311  *	const u_int window;			- time to live
312  *	const char *timehost;			- optional hostname to sync with
313  *	int *status;				- kerberos status returned
316 extern AUTH	*authkerb_seccreate(const char *, const char *, const  char *,
324  *	const struct svc_req *rqst;		- request pointer
351 #define AUTH_DH		3		/* for Diffie-Hellman mechanism */
355 #define	AUTH_TLS	7		/* Initiate RPC-over-TLS */
357 /* RFC 5531's prescribed limits for variable-lenth arrays. */
362  * Pseudo auth flavors for RPCSEC_GSS.