1 /* 2 * Copyright (c) 1997-2001 Kungliga Tekniska H�gskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34 /* 35 * $Id: kdc_locl.h,v 1.48 2001/01/30 01:44:07 assar Exp $ 36 */ 37 38 #ifndef __KDC_LOCL_H__ 39 #define __KDC_LOCL_H__ 40 41 #include "headers.h" 42 43 extern krb5_context context; 44 45 extern int require_preauth; 46 extern sig_atomic_t exit_flag; 47 extern size_t max_request; 48 extern time_t kdc_warn_pwexpire; 49 extern struct dbinfo { 50 char *realm; 51 char *dbname; 52 char *mkey_file; 53 struct dbinfo *next; 54 } *databases; 55 extern HDB **db; 56 extern int num_db; 57 extern char *port_str; 58 extern krb5_addresses explicit_addresses; 59 60 extern int enable_http; 61 extern krb5_boolean encode_as_rep_as_tgs_rep; 62 extern krb5_boolean check_ticket_addresses; 63 extern krb5_boolean allow_null_ticket_addresses; 64 extern krb5_boolean allow_anonymous; 65 66 #ifdef KRB4 67 extern char *v4_realm; 68 extern int enable_v4; 69 extern int enable_524; 70 #endif 71 #ifdef KASERVER 72 extern krb5_boolean enable_kaserver; 73 #endif 74 75 #define _PATH_KDC_CONF HDB_DB_DIR "/kdc.conf" 76 #define DEFAULT_LOG_DEST "0-1/FILE:" HDB_DB_DIR "/kdc.log" 77 78 extern struct timeval now; 79 #define kdc_time (now.tv_sec) 80 81 krb5_error_code as_rep (KDC_REQ*, krb5_data*, const char*, struct sockaddr*); 82 void configure (int, char**); 83 krb5_error_code db_fetch (krb5_principal, hdb_entry**); 84 void free_ent(hdb_entry *); 85 void kdc_log (int, const char*, ...) 86 __attribute__ ((format (printf, 2,3))); 87 88 char* kdc_log_msg (int, const char*, ...) 89 __attribute__ ((format (printf, 2,3))); 90 char* kdc_log_msg_va (int, const char*, va_list) 91 __attribute__ ((format (printf, 2,0))); 92 void kdc_openlog (krb5_config_section*); 93 void loop (void); 94 void set_master_key (EncryptionKey); 95 krb5_error_code tgs_rep (KDC_REQ*, krb5_data*, const char*, struct sockaddr *); 96 Key* unseal_key (Key*); 97 krb5_error_code check_flags(hdb_entry *client, const char *client_name, 98 hdb_entry *server, const char *server_name, 99 krb5_boolean is_as_req); 100 101 #ifdef KRB4 102 krb5_error_code db_fetch4 (const char*, const char*, const char*, hdb_entry**); 103 krb5_error_code do_524 (const Ticket*, krb5_data*, const char*, struct sockaddr*); 104 krb5_error_code do_version4 (unsigned char*, size_t, krb5_data*, const char*, 105 struct sockaddr_in*); 106 krb5_error_code encode_v4_ticket (void*, size_t, const EncTicketPart*, 107 const PrincipalName*, size_t*); 108 krb5_error_code encrypt_v4_ticket (void*, size_t, des_cblock*, EncryptedData*); 109 krb5_error_code get_des_key(hdb_entry*, krb5_boolean, Key**); 110 int maybe_version4 (unsigned char*, int); 111 #endif 112 113 #ifdef KASERVER 114 krb5_error_code do_kaserver (unsigned char*, size_t, krb5_data*, const char*, 115 struct sockaddr_in*); 116 #endif 117 118 #endif /* __KDC_LOCL_H__ */ 119