1*7c478bd9Sstevel@tonic-gate /* 2*7c478bd9Sstevel@tonic-gate * CDDL HEADER START 3*7c478bd9Sstevel@tonic-gate * 4*7c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*7c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only 6*7c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance 7*7c478bd9Sstevel@tonic-gate * with the License. 8*7c478bd9Sstevel@tonic-gate * 9*7c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10*7c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 11*7c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 12*7c478bd9Sstevel@tonic-gate * and limitations under the License. 13*7c478bd9Sstevel@tonic-gate * 14*7c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 15*7c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16*7c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 17*7c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 18*7c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 19*7c478bd9Sstevel@tonic-gate * 20*7c478bd9Sstevel@tonic-gate * CDDL HEADER END 21*7c478bd9Sstevel@tonic-gate */ 22*7c478bd9Sstevel@tonic-gate /* 23*7c478bd9Sstevel@tonic-gate * Copyright 2005 Sun Microsystems, Inc. All rights reserved. 24*7c478bd9Sstevel@tonic-gate * Use is subject to license terms. 25*7c478bd9Sstevel@tonic-gate */ 26*7c478bd9Sstevel@tonic-gate /* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */ 27*7c478bd9Sstevel@tonic-gate /* All Rights Reserved */ 28*7c478bd9Sstevel@tonic-gate /* 29*7c478bd9Sstevel@tonic-gate * Portions of this source code were derived from Berkeley 30*7c478bd9Sstevel@tonic-gate * 4.3 BSD under license from the Regents of the University of 31*7c478bd9Sstevel@tonic-gate * California. 32*7c478bd9Sstevel@tonic-gate */ 33*7c478bd9Sstevel@tonic-gate 34*7c478bd9Sstevel@tonic-gate #ifndef _RPC_AUTH_DES_H 35*7c478bd9Sstevel@tonic-gate #define _RPC_AUTH_DES_H 36*7c478bd9Sstevel@tonic-gate 37*7c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 38*7c478bd9Sstevel@tonic-gate 39*7c478bd9Sstevel@tonic-gate /* 40*7c478bd9Sstevel@tonic-gate * auth_des.h, Protocol for DES style authentication for RPC 41*7c478bd9Sstevel@tonic-gate * 42*7c478bd9Sstevel@tonic-gate */ 43*7c478bd9Sstevel@tonic-gate 44*7c478bd9Sstevel@tonic-gate #include <rpc/auth.h> 45*7c478bd9Sstevel@tonic-gate #ifdef _KERNEL 46*7c478bd9Sstevel@tonic-gate #include <rpc/svc.h> 47*7c478bd9Sstevel@tonic-gate #endif /* _KERNEL */ 48*7c478bd9Sstevel@tonic-gate 49*7c478bd9Sstevel@tonic-gate #ifdef __cplusplus 50*7c478bd9Sstevel@tonic-gate extern "C" { 51*7c478bd9Sstevel@tonic-gate #endif 52*7c478bd9Sstevel@tonic-gate 53*7c478bd9Sstevel@tonic-gate 54*7c478bd9Sstevel@tonic-gate /* 55*7c478bd9Sstevel@tonic-gate * There are two kinds of "names": fullnames and nicknames 56*7c478bd9Sstevel@tonic-gate */ 57*7c478bd9Sstevel@tonic-gate enum authdes_namekind { 58*7c478bd9Sstevel@tonic-gate ADN_FULLNAME, 59*7c478bd9Sstevel@tonic-gate ADN_NICKNAME 60*7c478bd9Sstevel@tonic-gate }; 61*7c478bd9Sstevel@tonic-gate 62*7c478bd9Sstevel@tonic-gate /* 63*7c478bd9Sstevel@tonic-gate * A fullname contains the network name of the client, 64*7c478bd9Sstevel@tonic-gate * a conversation key and the window 65*7c478bd9Sstevel@tonic-gate */ 66*7c478bd9Sstevel@tonic-gate struct authdes_fullname { 67*7c478bd9Sstevel@tonic-gate char *name; /* network name of client, up to MAXNETNAMELEN */ 68*7c478bd9Sstevel@tonic-gate des_block key; /* conversation key */ 69*7c478bd9Sstevel@tonic-gate uint32_t window; /* associated window */ 70*7c478bd9Sstevel@tonic-gate }; 71*7c478bd9Sstevel@tonic-gate 72*7c478bd9Sstevel@tonic-gate 73*7c478bd9Sstevel@tonic-gate /* 74*7c478bd9Sstevel@tonic-gate * A credential 75*7c478bd9Sstevel@tonic-gate */ 76*7c478bd9Sstevel@tonic-gate struct authdes_cred { 77*7c478bd9Sstevel@tonic-gate enum authdes_namekind adc_namekind; 78*7c478bd9Sstevel@tonic-gate struct authdes_fullname adc_fullname; 79*7c478bd9Sstevel@tonic-gate uint32_t adc_nickname; 80*7c478bd9Sstevel@tonic-gate }; 81*7c478bd9Sstevel@tonic-gate 82*7c478bd9Sstevel@tonic-gate /* 83*7c478bd9Sstevel@tonic-gate * A des authentication verifier 84*7c478bd9Sstevel@tonic-gate */ 85*7c478bd9Sstevel@tonic-gate struct authdes_verf { 86*7c478bd9Sstevel@tonic-gate union { 87*7c478bd9Sstevel@tonic-gate struct timeval adv_ctime; /* clear time */ 88*7c478bd9Sstevel@tonic-gate des_block adv_xtime; /* crypt time */ 89*7c478bd9Sstevel@tonic-gate } adv_time_u; 90*7c478bd9Sstevel@tonic-gate uint32_t adv_int_u; 91*7c478bd9Sstevel@tonic-gate }; 92*7c478bd9Sstevel@tonic-gate 93*7c478bd9Sstevel@tonic-gate /* 94*7c478bd9Sstevel@tonic-gate * des authentication verifier: client variety 95*7c478bd9Sstevel@tonic-gate * 96*7c478bd9Sstevel@tonic-gate * adv_timestamp is the current time. 97*7c478bd9Sstevel@tonic-gate * adv_winverf is the credential window + 1. 98*7c478bd9Sstevel@tonic-gate * Both are encrypted using the conversation key. 99*7c478bd9Sstevel@tonic-gate */ 100*7c478bd9Sstevel@tonic-gate #define adv_timestamp adv_time_u.adv_ctime 101*7c478bd9Sstevel@tonic-gate #define adv_xtimestamp adv_time_u.adv_xtime 102*7c478bd9Sstevel@tonic-gate #define adv_winverf adv_int_u 103*7c478bd9Sstevel@tonic-gate 104*7c478bd9Sstevel@tonic-gate /* 105*7c478bd9Sstevel@tonic-gate * des authentication verifier: server variety 106*7c478bd9Sstevel@tonic-gate * 107*7c478bd9Sstevel@tonic-gate * adv_timeverf is the client's timestamp + client's window 108*7c478bd9Sstevel@tonic-gate * adv_nickname is the server's nickname for the client. 109*7c478bd9Sstevel@tonic-gate * adv_timeverf is encrypted using the conversation key. 110*7c478bd9Sstevel@tonic-gate */ 111*7c478bd9Sstevel@tonic-gate #define adv_timeverf adv_time_u.adv_ctime 112*7c478bd9Sstevel@tonic-gate #define adv_xtimeverf adv_time_u.adv_xtime 113*7c478bd9Sstevel@tonic-gate #define adv_nickname adv_int_u 114*7c478bd9Sstevel@tonic-gate 115*7c478bd9Sstevel@tonic-gate /* 116*7c478bd9Sstevel@tonic-gate * Map a des credential into a unix cred. 117*7c478bd9Sstevel@tonic-gate * 118*7c478bd9Sstevel@tonic-gate * authdes_getucred(adc, uid, gid, grouplen, groups) 119*7c478bd9Sstevel@tonic-gate * struct authdes_cred *adc; 120*7c478bd9Sstevel@tonic-gate * uid_t *uid; 121*7c478bd9Sstevel@tonic-gate * gid_t *gid; 122*7c478bd9Sstevel@tonic-gate * short *grouplen; 123*7c478bd9Sstevel@tonic-gate * gid_t *groups; 124*7c478bd9Sstevel@tonic-gate * 125*7c478bd9Sstevel@tonic-gate */ 126*7c478bd9Sstevel@tonic-gate 127*7c478bd9Sstevel@tonic-gate #ifdef _KERNEL 128*7c478bd9Sstevel@tonic-gate extern int kauthdes_getucred(const struct authdes_cred *, cred_t *); 129*7c478bd9Sstevel@tonic-gate #else 130*7c478bd9Sstevel@tonic-gate #ifdef __STDC__ 131*7c478bd9Sstevel@tonic-gate extern int authdes_getucred(const struct authdes_cred *, 132*7c478bd9Sstevel@tonic-gate uid_t *, gid_t *, short *, gid_t *); 133*7c478bd9Sstevel@tonic-gate #else 134*7c478bd9Sstevel@tonic-gate extern int authdes_getucred(); 135*7c478bd9Sstevel@tonic-gate #endif 136*7c478bd9Sstevel@tonic-gate #endif 137*7c478bd9Sstevel@tonic-gate 138*7c478bd9Sstevel@tonic-gate #ifndef _KERNEL 139*7c478bd9Sstevel@tonic-gate #ifdef __STDC__ 140*7c478bd9Sstevel@tonic-gate extern int getpublickey(const char *, char *); 141*7c478bd9Sstevel@tonic-gate extern int getsecretkey(const char *, char *, const char *); 142*7c478bd9Sstevel@tonic-gate #else 143*7c478bd9Sstevel@tonic-gate extern int getpublickey(); 144*7c478bd9Sstevel@tonic-gate extern int getsecretkey(); 145*7c478bd9Sstevel@tonic-gate #endif 146*7c478bd9Sstevel@tonic-gate #endif 147*7c478bd9Sstevel@tonic-gate 148*7c478bd9Sstevel@tonic-gate #ifdef _KERNEL 149*7c478bd9Sstevel@tonic-gate 150*7c478bd9Sstevel@tonic-gate #ifdef __STDC__ 151*7c478bd9Sstevel@tonic-gate extern int authdes_create(char *, uint_t, struct netbuf *, 152*7c478bd9Sstevel@tonic-gate struct knetconfig *, des_block *, int, AUTH **); 153*7c478bd9Sstevel@tonic-gate extern bool_t xdr_authdes_cred(XDR *, struct authdes_cred *); 154*7c478bd9Sstevel@tonic-gate extern bool_t xdr_authdes_verf(XDR *, struct authdes_verf *); 155*7c478bd9Sstevel@tonic-gate extern int rtime(struct knetconfig *, struct netbuf *, int, 156*7c478bd9Sstevel@tonic-gate struct timeval *, struct timeval *); 157*7c478bd9Sstevel@tonic-gate extern enum clnt_stat kgetnetname(char *); 158*7c478bd9Sstevel@tonic-gate extern enum auth_stat _svcauth_des(struct svc_req *, struct rpc_msg *); 159*7c478bd9Sstevel@tonic-gate #else 160*7c478bd9Sstevel@tonic-gate extern int authdes_create(); 161*7c478bd9Sstevel@tonic-gate extern bool_t xdr_authdes_cred(); 162*7c478bd9Sstevel@tonic-gate extern bool_t xdr_authdes_verf(); 163*7c478bd9Sstevel@tonic-gate extern int rtime(); 164*7c478bd9Sstevel@tonic-gate extern enum clnt_stat kgetnetname(); 165*7c478bd9Sstevel@tonic-gate extern enum auth_stat _svcauth_des(); 166*7c478bd9Sstevel@tonic-gate #endif 167*7c478bd9Sstevel@tonic-gate 168*7c478bd9Sstevel@tonic-gate extern kmutex_t authdes_ops_lock; 169*7c478bd9Sstevel@tonic-gate 170*7c478bd9Sstevel@tonic-gate #endif 171*7c478bd9Sstevel@tonic-gate 172*7c478bd9Sstevel@tonic-gate #ifdef __cplusplus 173*7c478bd9Sstevel@tonic-gate } 174*7c478bd9Sstevel@tonic-gate #endif 175*7c478bd9Sstevel@tonic-gate 176*7c478bd9Sstevel@tonic-gate #endif /* _RPC_AUTH_DES_H */ 177