2 * Copyright (c) 1997-2002 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 /* $Id: krb5_locl.h,v 1.93 2006/10/20 18:13:31 lha Exp $ */
36 #ifndef __KRB5_LOCL_H__
37 #define __KRB5_LOCL_H__
50 #ifdef HAVE_SYS_TYPES_H
51 #include <sys/types.h>
53 #ifdef HAVE_SYS_MMAN_H
63 #if defined(HAVE_SYS_IOCTL_H) && SunOS != 40
64 #include <sys/ioctl.h>
67 #undef _POSIX_PTHREAD_SEMANTICS
68 /* This gets us the 5-arg getpwnam_r on Solaris 9. */
69 #define _POSIX_PTHREAD_SEMANTICS
73 #ifdef HAVE_SYS_PARAM_H
74 #include <sys/param.h>
77 #ifdef HAVE_SYS_TIME_H
80 #ifdef HAVE_SYS_SELECT_H
81 #include <sys/select.h>
83 #ifdef HAVE_SYS_SOCKET_H
84 #include <sys/socket.h>
86 #ifdef HAVE_NETINET_IN_H
87 #include <netinet/in.h>
89 #ifdef HAVE_NETINET_IN6_H
90 #include <netinet/in6.h>
92 #ifdef HAVE_NETINET6_IN6_H
93 #include <netinet6/in6.h>
103 #ifdef HAVE_ARPA_INET_H
104 #include <arpa/inet.h>
106 #ifdef HAVE_ARPA_NAMESER_H
107 #include <arpa/nameser.h>
109 #ifdef HAVE_SYS_UIO_H
112 #ifdef HAVE_SYS_FILIO_H
113 #include <sys/filio.h>
115 #ifdef HAVE_SYS_FILE_H
116 #include <sys/file.h>
121 #define des_encrypt wingless_pigs_mostly_fail_to_fly
126 #ifdef HAVE_DOOR_CREATE
131 #include <parse_time.h>
134 #include "crypto-headers.h"
137 #include <krb5_asn1.h>
141 /* XXX glue for pkinit */
142 struct krb5_pk_identity;
145 typedef struct krb5_pk_init_ctx_data *krb5_pk_init_ctx;
146 struct krb5_dh_moduli;
149 struct _krb5_krb_auth_data;
154 #include <krb5_err.h>
155 #include <asn1_err.h>
157 #include <hx509_err.h>
159 #include <krb5-private.h>
161 #include "heim_threads.h"
163 #define ALLOC(X, N) (X) = calloc((N), sizeof(*(X)))
164 #define ALLOC_SEQ(X, N) do { (X)->len = (N); ALLOC((X)->val, (N)); } while(0)
166 /* should this be public? */
167 #define KEYTAB_DEFAULT "ANY:FILE:" SYSCONFDIR "/krb5.keytab,krb4:" SYSCONFDIR "/srvtab"
168 #define KEYTAB_DEFAULT_MODIFY "FILE:" SYSCONFDIR "/krb5.keytab"
170 #define MODULI_FILE SYSCONFDIR "/krb5.moduli"
176 #define KRB5_BUFSIZ 1024
179 KRB5_INIT_CREDS_TRISTATE_UNSET = 0,
180 KRB5_INIT_CREDS_TRISTATE_TRUE,
181 KRB5_INIT_CREDS_TRISTATE_FALSE
182 } krb5_get_init_creds_tristate;
184 struct _krb5_get_init_creds_opt_private {
187 const char *password;
188 krb5_s2k_proc key_proc;
190 krb5_get_init_creds_tristate req_pac;
192 krb5_pk_init_ctx pk_init_ctx;
195 krb5_get_init_creds_tristate addressless;
198 typedef struct krb5_context_data {
199 krb5_enctype *etypes;
200 krb5_enctype *etypes_des;
201 char **default_realms;
204 unsigned max_retries;
205 int32_t kdc_sec_offset;
206 int32_t kdc_usec_offset;
207 krb5_config_section *cf;
208 struct et_list *et_list;
209 struct krb5_log_facility *warn_dest;
212 const char *http_proxy;
213 const char *time_fmt;
214 krb5_boolean log_utc;
215 const char *default_keytab;
216 const char *default_keytab_modify;
217 krb5_boolean use_admin_kdc;
218 krb5_addresses *extra_addresses;
219 krb5_boolean scan_interfaces; /* `ifconfig -a' */
220 krb5_boolean srv_lookup; /* do SRV lookups */
221 krb5_boolean srv_try_txt; /* try TXT records also */
222 int32_t fcache_vno; /* create cache files w/ this
224 int num_kt_types; /* # of registered keytab types */
225 struct krb5_keytab_data *kt_types; /* registered keytab types */
226 const char *date_fmt;
229 krb5_addresses *ignore_addresses;
230 char *default_cc_name;
232 void *mutex; /* protects error_string/error_buf */
234 int dns_canonicalize_hostname;
235 struct send_to_kdc *send_to_kdc;
236 void *mem_ctx; /* Some parts of Samba4 need a valid
237 memory context (under the event
242 * Configurable options
245 #ifndef KRB5_DEFAULT_CCNAME
247 #define KRB5_DEFAULT_CCNAME "API:"
249 #define KRB5_DEFAULT_CCNAME "FILE:/tmp/krb5cc_%{uid}"
253 #ifndef KRB5_ADDRESSLESS_DEFAULT
254 #define KRB5_ADDRESSLESS_DEFAULT TRUE
257 #endif /* __KRB5_LOCL_H__ */