1 /* 2 * Copyright (c) 1997-2003 Kungliga Tekniska H�gskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34 /* 35 * $Id: kdc_locl.h,v 1.58.2.2 2003/10/27 11:07:16 joda Exp $ 36 */ 37 38 #ifndef __KDC_LOCL_H__ 39 #define __KDC_LOCL_H__ 40 41 #include "headers.h" 42 43 extern krb5_context context; 44 45 extern int require_preauth; 46 extern sig_atomic_t exit_flag; 47 extern size_t max_request; 48 extern time_t kdc_warn_pwexpire; 49 extern struct dbinfo { 50 char *realm; 51 char *dbname; 52 char *mkey_file; 53 struct dbinfo *next; 54 } *databases; 55 extern HDB **db; 56 extern int num_db; 57 extern const char *port_str; 58 extern krb5_addresses explicit_addresses; 59 60 extern int enable_http; 61 extern krb5_boolean encode_as_rep_as_tgs_rep; 62 extern krb5_boolean check_ticket_addresses; 63 extern krb5_boolean allow_null_ticket_addresses; 64 extern krb5_boolean allow_anonymous; 65 enum { TRPOLICY_ALWAYS_CHECK, 66 TRPOLICY_ALLOW_PER_PRINCIPAL, 67 TRPOLICY_ALWAYS_HONOUR_REQUEST }; 68 extern int trpolicy; 69 extern int enable_524; 70 extern int enable_v4_cross_realm; 71 72 #ifdef KRB4 73 extern char *v4_realm; 74 extern int enable_v4; 75 extern krb5_boolean enable_kaserver; 76 #endif 77 78 #define _PATH_KDC_CONF HDB_DB_DIR "/kdc.conf" 79 #define DEFAULT_LOG_DEST "0-1/FILE:" HDB_DB_DIR "/kdc.log" 80 81 extern struct timeval now; 82 #define kdc_time (now.tv_sec) 83 84 krb5_error_code as_rep (KDC_REQ*, krb5_data*, const char*, struct sockaddr*); 85 void configure (int, char**); 86 krb5_error_code db_fetch (krb5_principal, hdb_entry**); 87 void free_ent(hdb_entry *); 88 void kdc_log (int, const char*, ...) 89 __attribute__ ((format (printf, 2,3))); 90 91 char* kdc_log_msg (int, const char*, ...) 92 __attribute__ ((format (printf, 2,3))); 93 char* kdc_log_msg_va (int, const char*, va_list) 94 __attribute__ ((format (printf, 2,0))); 95 void kdc_openlog (void); 96 void loop (void); 97 void set_master_key (EncryptionKey); 98 krb5_error_code tgs_rep (KDC_REQ*, krb5_data*, const char*, struct sockaddr *); 99 Key* unseal_key (Key*); 100 krb5_error_code check_flags(hdb_entry *client, const char *client_name, 101 hdb_entry *server, const char *server_name, 102 krb5_boolean is_as_req); 103 104 krb5_error_code get_des_key(hdb_entry*, krb5_boolean, krb5_boolean, Key**); 105 krb5_error_code encode_v4_ticket (void*, size_t, const EncTicketPart*, 106 const PrincipalName*, size_t*); 107 krb5_error_code do_524 (const Ticket*, krb5_data*, const char*, struct sockaddr*); 108 109 #ifdef KRB4 110 krb5_error_code db_fetch4 (const char*, const char*, const char*, hdb_entry**); 111 krb5_error_code do_version4 (unsigned char*, size_t, krb5_data*, const char*, 112 struct sockaddr_in*); 113 int maybe_version4 (unsigned char*, int); 114 #endif 115 116 #ifdef KRB4 117 krb5_error_code do_kaserver (unsigned char*, size_t, krb5_data*, const char*, 118 struct sockaddr_in*); 119 #endif 120 121 #ifdef HAVE_OPENSSL 122 #define des_new_random_key des_random_key 123 #endif 124 125 #endif /* __KDC_LOCL_H__ */ 126