2 * Copyright (c) 1997-2006 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the Institute nor the names of its contributors
20 * may be used to endorse or promote products derived from this software
21 * without specific prior written permission.
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
38 #ifndef __KRB5_LOCL_H__
39 #define __KRB5_LOCL_H__
50 #include <krb5-types.h>
52 #ifdef HAVE_SYS_TYPES_H
53 #include <sys/types.h>
55 #ifdef HAVE_SYS_MMAN_H
65 #if defined(HAVE_SYS_IOCTL_H) && SunOS != 40
66 #include <sys/ioctl.h>
69 #undef _POSIX_PTHREAD_SEMANTICS
70 /* This gets us the 5-arg getpwnam_r on Solaris 9. */
71 #define _POSIX_PTHREAD_SEMANTICS
75 #ifdef HAVE_SYS_PARAM_H
76 #include <sys/param.h>
79 #ifdef HAVE_SYS_TIME_H
82 #ifdef HAVE_SYS_SELECT_H
83 #include <sys/select.h>
85 #ifdef HAVE_SYS_SOCKET_H
86 #include <sys/socket.h>
88 #ifdef HAVE_NETINET_IN_H
89 #include <netinet/in.h>
91 #ifdef HAVE_NETINET_IN6_H
92 #include <netinet/in6.h>
94 #ifdef HAVE_NETINET6_IN6_H
95 #include <netinet6/in6.h>
105 #ifdef HAVE_ARPA_INET_H
106 #include <arpa/inet.h>
108 #ifdef HAVE_ARPA_NAMESER_H
109 #include <arpa/nameser.h>
111 #ifdef HAVE_SYS_UIO_H
114 #ifdef HAVE_SYS_FILIO_H
115 #include <sys/filio.h>
117 #ifdef HAVE_SYS_FILE_H
118 #include <sys/file.h>
123 #include <heimbase.h>
125 #define HEIMDAL_TEXTDOMAIN "heimdal_krb5"
129 #define N_(x,y) dgettext(HEIMDAL_TEXTDOMAIN, x)
132 #define bindtextdomain(package, localedir)
138 #define des_encrypt wingless_pigs_mostly_fail_to_fly
143 #ifdef HAVE_DOOR_CREATE
148 #include <parse_time.h>
153 #define HC_DEPRECATED_CRYPTO
154 #include "crypto-headers.h"
157 #include <krb5_asn1.h>
161 /* XXX glue for pkinit */
162 struct hx509_certs_data;
163 struct krb5_pk_identity;
166 struct AlgorithmIdentifier;
167 typedef struct krb5_pk_init_ctx_data *krb5_pk_init_ctx;
168 struct krb5_dh_moduli;
171 struct _krb5_krb_auth_data;
176 #include <krb5_err.h>
177 #include <asn1_err.h>
184 #include <krb5-private.h>
186 #include "heim_threads.h"
188 #define ALLOC(X, N) (X) = calloc((N), sizeof(*(X)))
189 #define ALLOC_SEQ(X, N) do { (X)->len = (N); ALLOC((X)->val, (N)); } while(0)
191 /* should this be public? */
192 #define KEYTAB_DEFAULT "FILE:" SYSCONFDIR "/krb5.keytab"
193 #define KEYTAB_DEFAULT_MODIFY "FILE:" SYSCONFDIR "/krb5.keytab"
196 #define MODULI_FILE SYSCONFDIR "/krb5.moduli"
207 #define SOCK_CLOEXEC 0
211 #define KRB5_BUFSIZ 1024
214 KRB5_INIT_CREDS_TRISTATE_UNSET = 0,
215 KRB5_INIT_CREDS_TRISTATE_TRUE,
216 KRB5_INIT_CREDS_TRISTATE_FALSE
217 } krb5_get_init_creds_tristate;
219 struct _krb5_get_init_creds_opt_private {
222 const char *password;
223 krb5_s2k_proc key_proc;
225 krb5_get_init_creds_tristate req_pac;
227 krb5_pk_init_ctx pk_init_ctx;
228 krb5_get_init_creds_tristate addressless;
230 #define KRB5_INIT_CREDS_CANONICALIZE 1
231 #define KRB5_INIT_CREDS_NO_C_CANON_CHECK 2
232 #define KRB5_INIT_CREDS_NO_C_NO_EKU_CHECK 4
234 krb5_gic_process_last_req func;
239 typedef struct krb5_context_data {
240 krb5_enctype *etypes;
241 krb5_enctype *etypes_des;
242 char **default_realms;
245 unsigned max_retries;
246 int32_t kdc_sec_offset;
247 int32_t kdc_usec_offset;
248 krb5_config_section *cf;
249 struct et_list *et_list;
250 struct krb5_log_facility *warn_dest;
251 struct krb5_log_facility *debug_dest;
252 const krb5_cc_ops **cc_ops;
254 const char *http_proxy;
255 const char *time_fmt;
256 krb5_boolean log_utc;
257 const char *default_keytab;
258 const char *default_keytab_modify;
259 krb5_boolean use_admin_kdc;
260 krb5_addresses *extra_addresses;
261 krb5_boolean scan_interfaces; /* `ifconfig -a' */
262 krb5_boolean srv_lookup; /* do SRV lookups */
263 krb5_boolean srv_try_txt; /* try TXT records also */
264 int32_t fcache_vno; /* create cache files w/ this
266 int num_kt_types; /* # of registered keytab types */
267 struct krb5_keytab_data *kt_types; /* registered keytab types */
268 const char *date_fmt;
270 krb5_error_code error_code;
271 krb5_addresses *ignore_addresses;
272 char *default_cc_name;
273 char *default_cc_name_env;
274 int default_cc_name_set;
275 void *mutex; /* protects error_string/error_buf */
278 #define KRB5_CTX_F_DNS_CANONICALIZE_HOSTNAME 1
279 #define KRB5_CTX_F_CHECK_PAC 2
280 #define KRB5_CTX_F_HOMEDIR_ACCESS 4
281 #define KRB5_CTX_F_SOCKETS_INITIALIZED 8
282 #define KRB5_CTX_F_RD_REQ_IGNORE 16
283 struct send_to_kdc *send_to_kdc;
285 hx509_context hx509ctx;
289 #ifndef KRB5_USE_PATH_TOKENS
290 #define KRB5_DEFAULT_CCNAME_FILE "FILE:/tmp/krb5cc_%{uid}"
292 #define KRB5_DEFAULT_CCNAME_FILE "FILE:%{TEMP}/krb5cc_%{uid}"
294 #define KRB5_DEFAULT_CCNAME_API "API:"
295 #define KRB5_DEFAULT_CCNAME_KCM_KCM "KCM:%{uid}"
296 #define KRB5_DEFAULT_CCNAME_KCM_API "API:%{uid}"
298 #define EXTRACT_TICKET_ALLOW_CNAME_MISMATCH 1
299 #define EXTRACT_TICKET_ALLOW_SERVER_MISMATCH 2
300 #define EXTRACT_TICKET_MATCH_REALM 4
301 #define EXTRACT_TICKET_AS_REQ 8
302 #define EXTRACT_TICKET_TIMESYNC 16
305 * Configurable options
308 #ifndef KRB5_DEFAULT_CCTYPE
310 #define KRB5_DEFAULT_CCTYPE (&krb5_acc_ops)
312 #define KRB5_DEFAULT_CCTYPE (&krb5_fcc_ops)
316 #ifndef KRB5_ADDRESSLESS_DEFAULT
317 #define KRB5_ADDRESSLESS_DEFAULT TRUE
320 #ifndef KRB5_FORWARDABLE_DEFAULT
321 #define KRB5_FORWARDABLE_DEFAULT TRUE
326 struct krb5_pk_identity {
327 hx509_verify_ctx verify_ctx;
331 hx509_certs certpool;
332 hx509_revoke_ctx revokectx;
334 #define PKINIT_BTMM 1
344 #endif /* __KRB5_LOCL_H__ */