xref: /titanic_51/usr/src/uts/common/rpc/auth_des.h (revision 7c478bd95313f5f23a4c958a745db2134aa03244)
1*7c478bd9Sstevel@tonic-gate /*
2*7c478bd9Sstevel@tonic-gate  * CDDL HEADER START
3*7c478bd9Sstevel@tonic-gate  *
4*7c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5*7c478bd9Sstevel@tonic-gate  * Common Development and Distribution License, Version 1.0 only
6*7c478bd9Sstevel@tonic-gate  * (the "License").  You may not use this file except in compliance
7*7c478bd9Sstevel@tonic-gate  * with the License.
8*7c478bd9Sstevel@tonic-gate  *
9*7c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*7c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
11*7c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
12*7c478bd9Sstevel@tonic-gate  * and limitations under the License.
13*7c478bd9Sstevel@tonic-gate  *
14*7c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
15*7c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*7c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
17*7c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
18*7c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
19*7c478bd9Sstevel@tonic-gate  *
20*7c478bd9Sstevel@tonic-gate  * CDDL HEADER END
21*7c478bd9Sstevel@tonic-gate  */
22*7c478bd9Sstevel@tonic-gate /*
23*7c478bd9Sstevel@tonic-gate  * Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
24*7c478bd9Sstevel@tonic-gate  * Use is subject to license terms.
25*7c478bd9Sstevel@tonic-gate  */
26*7c478bd9Sstevel@tonic-gate /* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */
27*7c478bd9Sstevel@tonic-gate /* All Rights Reserved */
28*7c478bd9Sstevel@tonic-gate /*
29*7c478bd9Sstevel@tonic-gate  * Portions of this source code were derived from Berkeley
30*7c478bd9Sstevel@tonic-gate  * 4.3 BSD under license from the Regents of the University of
31*7c478bd9Sstevel@tonic-gate  * California.
32*7c478bd9Sstevel@tonic-gate  */
33*7c478bd9Sstevel@tonic-gate 
34*7c478bd9Sstevel@tonic-gate #ifndef	_RPC_AUTH_DES_H
35*7c478bd9Sstevel@tonic-gate #define	_RPC_AUTH_DES_H
36*7c478bd9Sstevel@tonic-gate 
37*7c478bd9Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
38*7c478bd9Sstevel@tonic-gate 
39*7c478bd9Sstevel@tonic-gate /*
40*7c478bd9Sstevel@tonic-gate  * auth_des.h, Protocol for DES style authentication for RPC
41*7c478bd9Sstevel@tonic-gate  *
42*7c478bd9Sstevel@tonic-gate  */
43*7c478bd9Sstevel@tonic-gate 
44*7c478bd9Sstevel@tonic-gate #include <rpc/auth.h>
45*7c478bd9Sstevel@tonic-gate #ifdef _KERNEL
46*7c478bd9Sstevel@tonic-gate #include <rpc/svc.h>
47*7c478bd9Sstevel@tonic-gate #endif /* _KERNEL */
48*7c478bd9Sstevel@tonic-gate 
49*7c478bd9Sstevel@tonic-gate #ifdef	__cplusplus
50*7c478bd9Sstevel@tonic-gate extern "C" {
51*7c478bd9Sstevel@tonic-gate #endif
52*7c478bd9Sstevel@tonic-gate 
53*7c478bd9Sstevel@tonic-gate 
54*7c478bd9Sstevel@tonic-gate /*
55*7c478bd9Sstevel@tonic-gate  * There are two kinds of "names": fullnames and nicknames
56*7c478bd9Sstevel@tonic-gate  */
57*7c478bd9Sstevel@tonic-gate enum authdes_namekind {
58*7c478bd9Sstevel@tonic-gate 	ADN_FULLNAME,
59*7c478bd9Sstevel@tonic-gate 	ADN_NICKNAME
60*7c478bd9Sstevel@tonic-gate };
61*7c478bd9Sstevel@tonic-gate 
62*7c478bd9Sstevel@tonic-gate /*
63*7c478bd9Sstevel@tonic-gate  * A fullname contains the network name of the client,
64*7c478bd9Sstevel@tonic-gate  * a conversation key and the window
65*7c478bd9Sstevel@tonic-gate  */
66*7c478bd9Sstevel@tonic-gate struct authdes_fullname {
67*7c478bd9Sstevel@tonic-gate 	char *name;	/* network name of client, up to MAXNETNAMELEN */
68*7c478bd9Sstevel@tonic-gate 	des_block key;	/* conversation key */
69*7c478bd9Sstevel@tonic-gate 	uint32_t window;	/* associated window */
70*7c478bd9Sstevel@tonic-gate };
71*7c478bd9Sstevel@tonic-gate 
72*7c478bd9Sstevel@tonic-gate 
73*7c478bd9Sstevel@tonic-gate /*
74*7c478bd9Sstevel@tonic-gate  * A credential
75*7c478bd9Sstevel@tonic-gate  */
76*7c478bd9Sstevel@tonic-gate struct authdes_cred {
77*7c478bd9Sstevel@tonic-gate 	enum authdes_namekind adc_namekind;
78*7c478bd9Sstevel@tonic-gate 	struct authdes_fullname adc_fullname;
79*7c478bd9Sstevel@tonic-gate 	uint32_t adc_nickname;
80*7c478bd9Sstevel@tonic-gate };
81*7c478bd9Sstevel@tonic-gate 
82*7c478bd9Sstevel@tonic-gate /*
83*7c478bd9Sstevel@tonic-gate  * A des authentication verifier
84*7c478bd9Sstevel@tonic-gate  */
85*7c478bd9Sstevel@tonic-gate struct authdes_verf {
86*7c478bd9Sstevel@tonic-gate 	union {
87*7c478bd9Sstevel@tonic-gate 		struct timeval adv_ctime;	/* clear time */
88*7c478bd9Sstevel@tonic-gate 		des_block adv_xtime;		/* crypt time */
89*7c478bd9Sstevel@tonic-gate 	} adv_time_u;
90*7c478bd9Sstevel@tonic-gate 	uint32_t adv_int_u;
91*7c478bd9Sstevel@tonic-gate };
92*7c478bd9Sstevel@tonic-gate 
93*7c478bd9Sstevel@tonic-gate /*
94*7c478bd9Sstevel@tonic-gate  * des authentication verifier: client variety
95*7c478bd9Sstevel@tonic-gate  *
96*7c478bd9Sstevel@tonic-gate  * adv_timestamp is the current time.
97*7c478bd9Sstevel@tonic-gate  * adv_winverf is the credential window + 1.
98*7c478bd9Sstevel@tonic-gate  * Both are encrypted using the conversation key.
99*7c478bd9Sstevel@tonic-gate  */
100*7c478bd9Sstevel@tonic-gate #define	adv_timestamp	adv_time_u.adv_ctime
101*7c478bd9Sstevel@tonic-gate #define	adv_xtimestamp	adv_time_u.adv_xtime
102*7c478bd9Sstevel@tonic-gate #define	adv_winverf	adv_int_u
103*7c478bd9Sstevel@tonic-gate 
104*7c478bd9Sstevel@tonic-gate /*
105*7c478bd9Sstevel@tonic-gate  * des authentication verifier: server variety
106*7c478bd9Sstevel@tonic-gate  *
107*7c478bd9Sstevel@tonic-gate  * adv_timeverf is the client's timestamp + client's window
108*7c478bd9Sstevel@tonic-gate  * adv_nickname is the server's nickname for the client.
109*7c478bd9Sstevel@tonic-gate  * adv_timeverf is encrypted using the conversation key.
110*7c478bd9Sstevel@tonic-gate  */
111*7c478bd9Sstevel@tonic-gate #define	adv_timeverf	adv_time_u.adv_ctime
112*7c478bd9Sstevel@tonic-gate #define	adv_xtimeverf	adv_time_u.adv_xtime
113*7c478bd9Sstevel@tonic-gate #define	adv_nickname	adv_int_u
114*7c478bd9Sstevel@tonic-gate 
115*7c478bd9Sstevel@tonic-gate /*
116*7c478bd9Sstevel@tonic-gate  * Map a des credential into a unix cred.
117*7c478bd9Sstevel@tonic-gate  *
118*7c478bd9Sstevel@tonic-gate  *  authdes_getucred(adc, uid, gid, grouplen, groups)
119*7c478bd9Sstevel@tonic-gate  *	struct authdes_cred *adc;
120*7c478bd9Sstevel@tonic-gate  *	uid_t *uid;
121*7c478bd9Sstevel@tonic-gate  *	gid_t *gid;
122*7c478bd9Sstevel@tonic-gate  *	short *grouplen;
123*7c478bd9Sstevel@tonic-gate  *	gid_t *groups;
124*7c478bd9Sstevel@tonic-gate  *
125*7c478bd9Sstevel@tonic-gate  */
126*7c478bd9Sstevel@tonic-gate 
127*7c478bd9Sstevel@tonic-gate #ifdef _KERNEL
128*7c478bd9Sstevel@tonic-gate extern int	kauthdes_getucred(const struct authdes_cred *, cred_t *);
129*7c478bd9Sstevel@tonic-gate #else
130*7c478bd9Sstevel@tonic-gate #ifdef __STDC__
131*7c478bd9Sstevel@tonic-gate extern int	authdes_getucred(const struct authdes_cred *,
132*7c478bd9Sstevel@tonic-gate 			uid_t *, gid_t *, short *, gid_t *);
133*7c478bd9Sstevel@tonic-gate #else
134*7c478bd9Sstevel@tonic-gate extern int	authdes_getucred();
135*7c478bd9Sstevel@tonic-gate #endif
136*7c478bd9Sstevel@tonic-gate #endif
137*7c478bd9Sstevel@tonic-gate 
138*7c478bd9Sstevel@tonic-gate #ifndef _KERNEL
139*7c478bd9Sstevel@tonic-gate #ifdef __STDC__
140*7c478bd9Sstevel@tonic-gate extern int	getpublickey(const char *, char *);
141*7c478bd9Sstevel@tonic-gate extern int	getsecretkey(const char *, char *, const char *);
142*7c478bd9Sstevel@tonic-gate #else
143*7c478bd9Sstevel@tonic-gate extern int	getpublickey();
144*7c478bd9Sstevel@tonic-gate extern int	getsecretkey();
145*7c478bd9Sstevel@tonic-gate #endif
146*7c478bd9Sstevel@tonic-gate #endif
147*7c478bd9Sstevel@tonic-gate 
148*7c478bd9Sstevel@tonic-gate #ifdef _KERNEL
149*7c478bd9Sstevel@tonic-gate 
150*7c478bd9Sstevel@tonic-gate #ifdef __STDC__
151*7c478bd9Sstevel@tonic-gate extern int	authdes_create(char *, uint_t, struct netbuf *,
152*7c478bd9Sstevel@tonic-gate 			struct knetconfig *, des_block *, int, AUTH **);
153*7c478bd9Sstevel@tonic-gate extern bool_t	xdr_authdes_cred(XDR *, struct authdes_cred *);
154*7c478bd9Sstevel@tonic-gate extern bool_t	xdr_authdes_verf(XDR *, struct authdes_verf *);
155*7c478bd9Sstevel@tonic-gate extern int	rtime(struct knetconfig *, struct netbuf *, int,
156*7c478bd9Sstevel@tonic-gate 			struct timeval *, struct timeval *);
157*7c478bd9Sstevel@tonic-gate extern enum clnt_stat kgetnetname(char *);
158*7c478bd9Sstevel@tonic-gate extern enum auth_stat _svcauth_des(struct svc_req *, struct rpc_msg *);
159*7c478bd9Sstevel@tonic-gate #else
160*7c478bd9Sstevel@tonic-gate extern int	authdes_create();
161*7c478bd9Sstevel@tonic-gate extern bool_t	xdr_authdes_cred();
162*7c478bd9Sstevel@tonic-gate extern bool_t	xdr_authdes_verf();
163*7c478bd9Sstevel@tonic-gate extern int	rtime();
164*7c478bd9Sstevel@tonic-gate extern enum clnt_stat	kgetnetname();
165*7c478bd9Sstevel@tonic-gate extern enum auth_stat _svcauth_des();
166*7c478bd9Sstevel@tonic-gate #endif
167*7c478bd9Sstevel@tonic-gate 
168*7c478bd9Sstevel@tonic-gate extern kmutex_t	authdes_ops_lock;
169*7c478bd9Sstevel@tonic-gate 
170*7c478bd9Sstevel@tonic-gate #endif
171*7c478bd9Sstevel@tonic-gate 
172*7c478bd9Sstevel@tonic-gate #ifdef	__cplusplus
173*7c478bd9Sstevel@tonic-gate }
174*7c478bd9Sstevel@tonic-gate #endif
175*7c478bd9Sstevel@tonic-gate 
176*7c478bd9Sstevel@tonic-gate #endif	/* _RPC_AUTH_DES_H */
177