source4/kdc/mit_samba.h

   1 /*
   2    MIT-Samba4 library
   3
   4    Copyright (c) 2010, Simo Sorce <idra@samba.org>
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 3 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 #ifndef _MIT_SAMBA_H
  21 #define _MIT_SAMBA_H
  22
  23 struct mit_samba_context {
  24         struct auth_session_info *session_info;
  25
  26         /* for compat with hdb plugin common code */
  27         krb5_context context;
  28         struct samba_kdc_db_context *db_ctx;
  29 };
  30
  31 int mit_samba_context_init(struct mit_samba_context **_ctx);
  32
  33 void mit_samba_context_free(struct mit_samba_context *ctx);
  34
  35 int mit_samba_generate_salt(krb5_data *salt);
  36
  37 int mit_samba_generate_random_password(krb5_data *pwd);
  38
  39 int mit_samba_get_principal(struct mit_samba_context *ctx,
  40                                    krb5_const_principal principal,
  41                                    unsigned int kflags,
  42                                    krb5_db_entry **_kentry);
  43
  44 int mit_samba_get_firstkey(struct mit_samba_context *ctx,
  45                            krb5_db_entry **_kentry);
  46
  47 int mit_samba_get_nextkey(struct mit_samba_context *ctx,
  48                           krb5_db_entry **_kentry);
  49
  50 int mit_samba_get_pac(struct mit_samba_context *smb_ctx,
  51                       krb5_context context,
  52                       krb5_db_entry *client,
  53                       krb5_keyblock *client_key,
  54                       krb5_pac *pac);
  55
  56 krb5_error_code mit_samba_reget_pac(struct mit_samba_context *ctx,
  57                                     krb5_context context,
  58                                     int flags,
  59                                     krb5_const_principal client_principal,
  60                                     krb5_db_entry *client,
  61                                     krb5_db_entry *server,
  62                                     krb5_db_entry *krbtgt,
  63                                     krb5_keyblock *krbtgt_keyblock,
  64                                     krb5_pac *pac);
  65
  66 int mit_samba_check_client_access(struct mit_samba_context *ctx,
  67                                   krb5_db_entry *client,
  68                                   const char *client_name,
  69                                   krb5_db_entry *server,
  70                                   const char *server_name,
  71                                   const char *netbios_name,
  72                                   bool password_change,
  73                                   DATA_BLOB *e_data);
  74
  75 int mit_samba_check_s4u2proxy(struct mit_samba_context *ctx,
  76                               krb5_db_entry *kentry,
  77                               const char *target_name,
  78                               bool is_nt_enterprise_name);
  79
  80 int mit_samba_kpasswd_change_password(struct mit_samba_context *ctx,
  81                                       char *pwd,
  82                                       krb5_db_entry *db_entry);
  83
  84 void mit_samba_zero_bad_password_count(krb5_db_entry *db_entry);
  85
  86 void mit_samba_update_bad_password_count(krb5_db_entry *db_entry);
  87
  88 #endif /* _MIT_SAMBA_H */