1 /* 2 * Copyright (c) 1997-2006 Kungliga Tekniska H�gskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34 /* $Id: krb5_locl.h 22226 2007-12-08 21:31:53Z lha $ */ 35 /* $FreeBSD$ */ 36 37 #ifndef __KRB5_LOCL_H__ 38 #define __KRB5_LOCL_H__ 39 40 #ifdef HAVE_CONFIG_H 41 #include <config.h> 42 #endif 43 44 #include <errno.h> 45 #include <ctype.h> 46 #include <string.h> 47 #include <stdio.h> 48 #include <stdlib.h> 49 #include <limits.h> 50 51 #ifdef HAVE_SYS_TYPES_H 52 #include <sys/types.h> 53 #endif 54 #ifdef HAVE_SYS_MMAN_H 55 #include <sys/mman.h> 56 #endif 57 #ifdef HAVE_UNISTD_H 58 #include <unistd.h> 59 #endif 60 #ifdef HAVE_FCNTL_H 61 #include <fcntl.h> 62 #endif 63 64 #if defined(HAVE_SYS_IOCTL_H) && SunOS != 40 65 #include <sys/ioctl.h> 66 #endif 67 #ifdef HAVE_PWD_H 68 #undef _POSIX_PTHREAD_SEMANTICS 69 /* This gets us the 5-arg getpwnam_r on Solaris 9. */ 70 #define _POSIX_PTHREAD_SEMANTICS 71 #include <pwd.h> 72 #endif 73 74 #ifdef HAVE_SYS_PARAM_H 75 #include <sys/param.h> 76 #endif 77 #include <time.h> 78 #ifdef HAVE_SYS_TIME_H 79 #include <sys/time.h> 80 #endif 81 #ifdef HAVE_SYS_SELECT_H 82 #include <sys/select.h> 83 #endif 84 #ifdef HAVE_SYS_SOCKET_H 85 #include <sys/socket.h> 86 #endif 87 #ifdef HAVE_NETINET_IN_H 88 #include <netinet/in.h> 89 #endif 90 #ifdef HAVE_NETINET_IN6_H 91 #include <netinet/in6.h> 92 #endif 93 #ifdef HAVE_NETINET6_IN6_H 94 #include <netinet6/in6.h> 95 #endif 96 #ifdef HAVE_NETDB_H 97 #include <netdb.h> 98 #endif 99 #ifdef _AIX 100 struct ether_addr; 101 struct mbuf; 102 struct sockaddr_dl; 103 #endif 104 #ifdef HAVE_ARPA_INET_H 105 #include <arpa/inet.h> 106 #endif 107 #ifdef HAVE_ARPA_NAMESER_H 108 #include <arpa/nameser.h> 109 #endif 110 #ifdef HAVE_SYS_UIO_H 111 #include <sys/uio.h> 112 #endif 113 #ifdef HAVE_SYS_FILIO_H 114 #include <sys/filio.h> 115 #endif 116 #ifdef HAVE_SYS_FILE_H 117 #include <sys/file.h> 118 #endif 119 120 #ifdef HAVE_CRYPT_H 121 #undef des_encrypt 122 #define des_encrypt wingless_pigs_mostly_fail_to_fly 123 #include <crypt.h> 124 #undef des_encrypt 125 #endif 126 127 #ifdef HAVE_DOOR_CREATE 128 #include <door.h> 129 #endif 130 131 #include <roken.h> 132 #include <parse_time.h> 133 #include <base64.h> 134 135 #include "crypto-headers.h" 136 137 138 #include <krb5_asn1.h> 139 140 struct send_to_kdc; 141 142 /* XXX glue for pkinit */ 143 struct krb5_pk_identity; 144 struct krb5_pk_cert; 145 struct ContentInfo; 146 typedef struct krb5_pk_init_ctx_data *krb5_pk_init_ctx; 147 struct krb5_dh_moduli; 148 149 /* v4 glue */ 150 struct _krb5_krb_auth_data; 151 152 #include <der.h> 153 154 #include <krb5.h> 155 #include <krb5_err.h> 156 #include <asn1_err.h> 157 #ifdef PKINIT 158 #include <hx509_err.h> 159 #endif 160 #include <krb5-private.h> 161 162 #include "heim_threads.h" 163 164 #define ALLOC(X, N) (X) = calloc((N), sizeof(*(X))) 165 #define ALLOC_SEQ(X, N) do { (X)->len = (N); ALLOC((X)->val, (N)); } while(0) 166 167 /* should this be public? */ 168 #define KEYTAB_DEFAULT "ANY:FILE:" SYSCONFDIR "/krb5.keytab,krb4:" SYSCONFDIR "/srvtab" 169 #define KEYTAB_DEFAULT_MODIFY "FILE:" SYSCONFDIR "/krb5.keytab" 170 171 #define MODULI_FILE SYSCONFDIR "/krb5.moduli" 172 173 #ifndef O_BINARY 174 #define O_BINARY 0 175 #endif 176 177 #define KRB5_BUFSIZ 1024 178 179 typedef enum { 180 KRB5_INIT_CREDS_TRISTATE_UNSET = 0, 181 KRB5_INIT_CREDS_TRISTATE_TRUE, 182 KRB5_INIT_CREDS_TRISTATE_FALSE 183 } krb5_get_init_creds_tristate; 184 185 struct _krb5_get_init_creds_opt_private { 186 int refcount; 187 /* ENC_TIMESTAMP */ 188 const char *password; 189 krb5_s2k_proc key_proc; 190 /* PA_PAC_REQUEST */ 191 krb5_get_init_creds_tristate req_pac; 192 /* PKINIT */ 193 krb5_pk_init_ctx pk_init_ctx; 194 KRB_ERROR *error; 195 krb5_get_init_creds_tristate addressless; 196 int flags; 197 #define KRB5_INIT_CREDS_CANONICALIZE 1 198 #define KRB5_INIT_CREDS_NO_C_CANON_CHECK 2 199 }; 200 201 typedef struct krb5_context_data { 202 krb5_enctype *etypes; 203 krb5_enctype *etypes_des; 204 char **default_realms; 205 time_t max_skew; 206 time_t kdc_timeout; 207 unsigned max_retries; 208 int32_t kdc_sec_offset; 209 int32_t kdc_usec_offset; 210 krb5_config_section *cf; 211 struct et_list *et_list; 212 struct krb5_log_facility *warn_dest; 213 krb5_cc_ops *cc_ops; 214 int num_cc_ops; 215 const char *http_proxy; 216 const char *time_fmt; 217 krb5_boolean log_utc; 218 const char *default_keytab; 219 const char *default_keytab_modify; 220 krb5_boolean use_admin_kdc; 221 krb5_addresses *extra_addresses; 222 krb5_boolean scan_interfaces; /* `ifconfig -a' */ 223 krb5_boolean srv_lookup; /* do SRV lookups */ 224 krb5_boolean srv_try_txt; /* try TXT records also */ 225 int32_t fcache_vno; /* create cache files w/ this 226 version */ 227 int num_kt_types; /* # of registered keytab types */ 228 struct krb5_keytab_data *kt_types; /* registered keytab types */ 229 const char *date_fmt; 230 char *error_string; 231 char error_buf[256]; 232 krb5_addresses *ignore_addresses; 233 char *default_cc_name; 234 char *default_cc_name_env; 235 int default_cc_name_set; 236 void *mutex; /* protects error_string/error_buf */ 237 int large_msg_size; 238 int flags; 239 #define KRB5_CTX_F_DNS_CANONICALIZE_HOSTNAME 1 240 #define KRB5_CTX_F_CHECK_PAC 2 241 struct send_to_kdc *send_to_kdc; 242 } krb5_context_data; 243 244 #define KRB5_DEFAULT_CCNAME_FILE "FILE:/tmp/krb5cc_%{uid}" 245 #define KRB5_DEFAULT_CCNAME_API "API:" 246 #define KRB5_DEFAULT_CCNAME_KCM "KCM:%{uid}" 247 248 #define EXTRACT_TICKET_ALLOW_CNAME_MISMATCH 1 249 #define EXTRACT_TICKET_ALLOW_SERVER_MISMATCH 2 250 #define EXTRACT_TICKET_MATCH_REALM 4 251 252 /* 253 * Configurable options 254 */ 255 256 #ifndef KRB5_DEFAULT_CCTYPE 257 #ifdef __APPLE__ 258 #define KRB5_DEFAULT_CCTYPE (&krb5_acc_ops) 259 #else 260 #define KRB5_DEFAULT_CCTYPE (&krb5_fcc_ops) 261 #endif 262 #endif 263 264 #ifndef KRB5_ADDRESSLESS_DEFAULT 265 #define KRB5_ADDRESSLESS_DEFAULT TRUE 266 #endif 267 268 #endif /* __KRB5_LOCL_H__ */ 269