1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 22 /* 23 * Copyright 2014 Nexenta Systems, Inc. All rights reserved. 24 * Copyright 2017 Joyent Inc 25 */ 26 27 /* 28 * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 29 * Use is subject to license terms. 30 */ 31 /* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */ 32 /* All Rights Reserved */ 33 /* 34 * Portions of this source code were derived from Berkeley 35 * 4.3 BSD under license from the Regents of the University of 36 * California. 37 */ 38 39 /* 40 * auth_sys.h, Protocol for UNIX style authentication parameters for RPC 41 */ 42 43 #ifndef _RPC_AUTH_SYS_H 44 #define _RPC_AUTH_SYS_H 45 46 /* 47 * The system is very weak. The client uses no encryption for it 48 * credentials and only sends null verifiers. The server sends backs 49 * null verifiers or optionally a verifier that suggests a new short hand 50 * for the credentials. 51 */ 52 53 #include <sys/types.h> 54 #include <sys/param.h> 55 #include <rpc/types.h> 56 #include <rpc/xdr.h> 57 #include <rpc/auth.h> 58 59 #ifdef __cplusplus 60 extern "C" { 61 #endif 62 63 /* The machine name is part of a credential; it may not exceed 255 bytes */ 64 #define MAX_MACHINE_NAME 255 65 66 /* gids compose part of a credential; there may not be more than 16 of them */ 67 #define NGRPS 16 68 69 /* 70 * "sys" (Old UNIX) style credentials. 71 */ 72 struct authsys_parms { 73 uint_t aup_time; 74 char *aup_machname; 75 uid_t aup_uid; 76 gid_t aup_gid; 77 uint_t aup_len; 78 gid_t *aup_gids; 79 }; 80 /* For backward compatibility */ 81 #define authunix_parms authsys_parms 82 83 /* 84 * Ideally, we would like this to be NGROUPS_UMAX, but the RFC mandates that 85 * auth sections must not exceed 400 bytes. For AUTH_LOOPBACK, that means the 86 * largest number of groups we can have without breaking RFC compat is 92 87 * groups. 88 * 89 * NOTE: changing this value changes the size of authlpbk_area in 90 * svc_auth_loopb.c, which means RQCRED_SIZE *must* be updated! 91 */ 92 #define NGRPS_LOOPBACK 92 93 94 #ifdef __STDC__ 95 extern bool_t xdr_authsys_parms(XDR *, struct authsys_parms *); 96 #else 97 extern bool_t xdr_authsys_parms(); 98 #endif 99 100 101 /* For backward compatibility */ 102 #define xdr_authunix_parms(xdrs, p) xdr_authsys_parms(xdrs, p) 103 104 /* 105 * If a response verifier has flavor AUTH_SHORT, then the body of 106 * the response verifier encapsulates the following structure; 107 * again it is serialized in the obvious fashion. 108 */ 109 struct short_hand_verf { 110 struct opaque_auth new_cred; 111 }; 112 113 struct svc_req; 114 115 extern bool_t xdr_gid_t(XDR *, gid_t *); 116 extern bool_t xdr_uid_t(XDR *, uid_t *); 117 118 #ifdef _KERNEL 119 extern bool_t xdr_authkern(XDR *, cred_t *); 120 extern bool_t xdr_authloopback(XDR *, cred_t *); 121 extern enum auth_stat _svcauth_unix(struct svc_req *, struct rpc_msg *); 122 extern enum auth_stat _svcauth_short(struct svc_req *, struct rpc_msg *); 123 #endif 124 125 #ifdef __cplusplus 126 } 127 #endif 128 129 #endif /* !_RPC_AUTH_SYS_H */ 130