r26430: require explicit specification of loadparm context.

[nivanova/samba-autobuild/.git] / source4 / auth / credentials / credentials.h

diff --git a/source4/auth/credentials/credentials.h b/source4/auth/credentials/credentials.h
index 3e84db52a57a2738ec553b16f1b90ee87c74956f..e00acf727abb73b492e12d6a7f4a639fbc800f14 100644 (file)
--- a/source4/auth/credentials/credentials.h
+++ b/source4/auth/credentials/credentials.h
@@ -3,12 +3,12 @@
 
    Client credentials structure
 
-   Copyright (C) Jelmer Vernooij 2004-2005
+   Copyright (C) Jelmer Vernooij 2004-2006
    Copyright (C) Andrew Bartlett <abartlet@samba.org> 2005
 
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 2 of the License, or
+   the Free Software Foundation; either version 3 of the License, or
    (at your option) any later version.
    
    This program is distributed in the hope that it will be useful,
@@ -17,39 +17,56 @@
    GNU General Public License for more details.
    
    You should have received a copy of the GNU General Public License
-   along with this program; if not, write to the Free Software
-   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
+#ifndef __CREDENTIALS_H__
+#define __CREDENTIALS_H__
+
+#include "util/data_blob.h"
+#include "librpc/gen_ndr/misc.h"
 
 struct ccache_container;
 
 /* In order of priority */
 enum credentials_obtained { 
        CRED_UNINITIALISED = 0,  /* We don't even have a guess yet */
-       CRED_GUESS_ENV,          /* Current value should be used, which was guessed */
        CRED_CALLBACK,           /* Callback should be used to obtain value */
+       CRED_GUESS_ENV,          /* Current value should be used, which was guessed */
        CRED_GUESS_FILE,         /* A guess from a file (or file pointed at in env variable) */
+       CRED_CALLBACK_RESULT,    /* Value was obtained from a callback */
        CRED_SPECIFIED           /* Was explicitly specified on the command-line */
 };
 
+enum credentials_use_kerberos {
+       CRED_AUTO_USE_KERBEROS = 0, /* Default, we try kerberos if available */
+       CRED_DONT_USE_KERBEROS,     /* Sometimes trying kerberos just does 'bad things', so don't */
+       CRED_MUST_USE_KERBEROS      /* Sometimes administrators are parinoid, so always do kerberos */
+};
+
 #define CLI_CRED_NTLM2       0x01
 #define CLI_CRED_NTLMv2_AUTH 0x02
 #define CLI_CRED_LANMAN_AUTH 0x04
 #define CLI_CRED_NTLM_AUTH   0x08
+#define CLI_CRED_CLEAR_AUTH  0x10   /* TODO:  Push cleartext auth with this flag */
 
 struct cli_credentials {
-       /* Preferred methods, NULL means default */
-       const char **preferred_methods;
-
        enum credentials_obtained workstation_obtained;
        enum credentials_obtained username_obtained;
        enum credentials_obtained password_obtained;
        enum credentials_obtained domain_obtained;
        enum credentials_obtained realm_obtained;
        enum credentials_obtained ccache_obtained;
-       enum credentials_obtained gss_creds_obtained;
+       enum credentials_obtained client_gss_creds_obtained;
        enum credentials_obtained principal_obtained;
        enum credentials_obtained keytab_obtained;
+       enum credentials_obtained server_gss_creds_obtained;
+
+       /* Threshold values (essentially a MAX() over a number of the
+        * above) for the ccache and GSS credentials, to ensure we
+        * regenerate/pick correctly */
+
+       enum credentials_obtained ccache_threshold;
+       enum credentials_obtained client_gss_creds_threshold;
 
        const char *workstation;
        const char *username;
@@ -60,11 +77,14 @@ struct cli_credentials {
        const char *principal;
        const char *salt_principal;
 
+       const char *bind_dn;
+
        struct samr_Password *nt_hash;
 
        struct ccache_container *ccache;
-       struct gssapi_creds_container *gssapi_creds;
+       struct gssapi_creds_container *client_gss_creds;
        struct keytab_container *keytab;
+       struct gssapi_creds_container *server_gss_creds;
 
        const char *(*workstation_cb) (struct cli_credentials *);
        const char *(*password_cb) (struct cli_credentials *);
@@ -84,9 +104,30 @@ struct cli_credentials {
 
        /* We are flagged to get machine account details from the
         * secrets.ldb when we are asked for a username or password */
-
-       BOOL machine_account_pending;
+       bool machine_account_pending;
+       struct loadparm_context *machine_account_pending_lp_ctx;
        
        /* Is this a machine account? */
-       BOOL machine_account;
+       bool machine_account;
+
+       /* Should we be trying to use kerberos? */
+       enum credentials_use_kerberos use_kerberos;
+
+       /* gensec features which should be used for connections */
+       uint32_t gensec_features;
+
+       /* Number of retries left before bailing out */
+       int tries;
+
+       /* Whether any callback is currently running */
+       bool callback_running;
+
+       /* an event context for anyone wanting to use the credentials */
+       struct event_context *ev;
 };
+
+struct ldb_context;
+struct loadparm_context;
+#include "auth/credentials/credentials_proto.h"
+
+#endif /* __CREDENTIALS_H__ */