diff options
author | Linus Torvalds <torvalds@ppc970.osdl.org> | 2005-04-16 18:20:36 -0400 |
---|---|---|
committer | Linus Torvalds <torvalds@ppc970.osdl.org> | 2005-04-16 18:20:36 -0400 |
commit | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (patch) | |
tree | 0bba044c4ce775e45a88a51686b5d9f90697ea9d /include/linux/sunrpc/gss_krb5.h |
Linux-2.6.12-rc2v2.6.12-rc2
Initial git repository build. I'm not bothering with the full history,
even though we have it. We can create a separate "historical" git
archive of that later if we want to, and in the meantime it's about
3.2GB when imported into git - space that would just make the early
git days unnecessarily complicated, when we don't have a lot of good
infrastructure for it.
Let it rip!
Diffstat (limited to 'include/linux/sunrpc/gss_krb5.h')
-rw-r--r-- | include/linux/sunrpc/gss_krb5.h | 148 |
1 files changed, 148 insertions, 0 deletions
diff --git a/include/linux/sunrpc/gss_krb5.h b/include/linux/sunrpc/gss_krb5.h new file mode 100644 index 000000000000..ffe31d2eb9ec --- /dev/null +++ b/include/linux/sunrpc/gss_krb5.h | |||
@@ -0,0 +1,148 @@ | |||
1 | /* | ||
2 | * linux/include/linux/sunrpc/gss_krb5_types.h | ||
3 | * | ||
4 | * Adapted from MIT Kerberos 5-1.2.1 lib/include/krb5.h, | ||
5 | * lib/gssapi/krb5/gssapiP_krb5.h, and others | ||
6 | * | ||
7 | * Copyright (c) 2000 The Regents of the University of Michigan. | ||
8 | * All rights reserved. | ||
9 | * | ||
10 | * Andy Adamson <andros@umich.edu> | ||
11 | * Bruce Fields <bfields@umich.edu> | ||
12 | */ | ||
13 | |||
14 | /* | ||
15 | * Copyright 1995 by the Massachusetts Institute of Technology. | ||
16 | * All Rights Reserved. | ||
17 | * | ||
18 | * Export of this software from the United States of America may | ||
19 | * require a specific license from the United States Government. | ||
20 | * It is the responsibility of any person or organization contemplating | ||
21 | * export to obtain such a license before exporting. | ||
22 | * | ||
23 | * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and | ||
24 | * distribute this software and its documentation for any purpose and | ||
25 | * without fee is hereby granted, provided that the above copyright | ||
26 | * notice appear in all copies and that both that copyright notice and | ||
27 | * this permission notice appear in supporting documentation, and that | ||
28 | * the name of M.I.T. not be used in advertising or publicity pertaining | ||
29 | * to distribution of the software without specific, written prior | ||
30 | * permission. Furthermore if you modify this software you must label | ||
31 | * your software as modified software and not distribute it in such a | ||
32 | * fashion that it might be confused with the original M.I.T. software. | ||
33 | * M.I.T. makes no representations about the suitability of | ||
34 | * this software for any purpose. It is provided "as is" without express | ||
35 | * or implied warranty. | ||
36 | * | ||
37 | */ | ||
38 | |||
39 | #include <linux/sunrpc/auth_gss.h> | ||
40 | #include <linux/sunrpc/gss_err.h> | ||
41 | #include <linux/sunrpc/gss_asn1.h> | ||
42 | |||
43 | struct krb5_ctx { | ||
44 | int initiate; /* 1 = initiating, 0 = accepting */ | ||
45 | int seed_init; | ||
46 | unsigned char seed[16]; | ||
47 | int signalg; | ||
48 | int sealalg; | ||
49 | struct crypto_tfm *enc; | ||
50 | struct crypto_tfm *seq; | ||
51 | s32 endtime; | ||
52 | u32 seq_send; | ||
53 | struct xdr_netobj mech_used; | ||
54 | }; | ||
55 | |||
56 | #define KG_TOK_MIC_MSG 0x0101 | ||
57 | #define KG_TOK_WRAP_MSG 0x0201 | ||
58 | |||
59 | enum sgn_alg { | ||
60 | SGN_ALG_DES_MAC_MD5 = 0x0000, | ||
61 | SGN_ALG_MD2_5 = 0x0001, | ||
62 | SGN_ALG_DES_MAC = 0x0002, | ||
63 | SGN_ALG_3 = 0x0003, /* not published */ | ||
64 | SGN_ALG_HMAC_MD5 = 0x0011, /* microsoft w2k; no support */ | ||
65 | SGN_ALG_HMAC_SHA1_DES3_KD = 0x0004 | ||
66 | }; | ||
67 | enum seal_alg { | ||
68 | SEAL_ALG_NONE = 0xffff, | ||
69 | SEAL_ALG_DES = 0x0000, | ||
70 | SEAL_ALG_1 = 0x0001, /* not published */ | ||
71 | SEAL_ALG_MICROSOFT_RC4 = 0x0010,/* microsoft w2k; no support */ | ||
72 | SEAL_ALG_DES3KD = 0x0002 | ||
73 | }; | ||
74 | |||
75 | #define KRB5_CKSUM_LENGTH 8 | ||
76 | |||
77 | #define CKSUMTYPE_CRC32 0x0001 | ||
78 | #define CKSUMTYPE_RSA_MD4 0x0002 | ||
79 | #define CKSUMTYPE_RSA_MD4_DES 0x0003 | ||
80 | #define CKSUMTYPE_DESCBC 0x0004 | ||
81 | #define CKSUMTYPE_RSA_MD5 0x0007 | ||
82 | #define CKSUMTYPE_RSA_MD5_DES 0x0008 | ||
83 | #define CKSUMTYPE_NIST_SHA 0x0009 | ||
84 | #define CKSUMTYPE_HMAC_SHA1_DES3 0x000c | ||
85 | |||
86 | /* from gssapi_err_krb5.h */ | ||
87 | #define KG_CCACHE_NOMATCH (39756032L) | ||
88 | #define KG_KEYTAB_NOMATCH (39756033L) | ||
89 | #define KG_TGT_MISSING (39756034L) | ||
90 | #define KG_NO_SUBKEY (39756035L) | ||
91 | #define KG_CONTEXT_ESTABLISHED (39756036L) | ||
92 | #define KG_BAD_SIGN_TYPE (39756037L) | ||
93 | #define KG_BAD_LENGTH (39756038L) | ||
94 | #define KG_CTX_INCOMPLETE (39756039L) | ||
95 | #define KG_CONTEXT (39756040L) | ||
96 | #define KG_CRED (39756041L) | ||
97 | #define KG_ENC_DESC (39756042L) | ||
98 | #define KG_BAD_SEQ (39756043L) | ||
99 | #define KG_EMPTY_CCACHE (39756044L) | ||
100 | #define KG_NO_CTYPES (39756045L) | ||
101 | |||
102 | /* per Kerberos v5 protocol spec crypto types from the wire. | ||
103 | * these get mapped to linux kernel crypto routines. | ||
104 | */ | ||
105 | #define ENCTYPE_NULL 0x0000 | ||
106 | #define ENCTYPE_DES_CBC_CRC 0x0001 /* DES cbc mode with CRC-32 */ | ||
107 | #define ENCTYPE_DES_CBC_MD4 0x0002 /* DES cbc mode with RSA-MD4 */ | ||
108 | #define ENCTYPE_DES_CBC_MD5 0x0003 /* DES cbc mode with RSA-MD5 */ | ||
109 | #define ENCTYPE_DES_CBC_RAW 0x0004 /* DES cbc mode raw */ | ||
110 | /* XXX deprecated? */ | ||
111 | #define ENCTYPE_DES3_CBC_SHA 0x0005 /* DES-3 cbc mode with NIST-SHA */ | ||
112 | #define ENCTYPE_DES3_CBC_RAW 0x0006 /* DES-3 cbc mode raw */ | ||
113 | #define ENCTYPE_DES_HMAC_SHA1 0x0008 | ||
114 | #define ENCTYPE_DES3_CBC_SHA1 0x0010 | ||
115 | #define ENCTYPE_UNKNOWN 0x01ff | ||
116 | |||
117 | s32 | ||
118 | make_checksum(s32 cksumtype, char *header, int hdrlen, struct xdr_buf *body, | ||
119 | struct xdr_netobj *cksum); | ||
120 | |||
121 | u32 | ||
122 | krb5_make_token(struct krb5_ctx *context_handle, int qop_req, | ||
123 | struct xdr_buf *input_message_buffer, | ||
124 | struct xdr_netobj *output_message_buffer, int toktype); | ||
125 | |||
126 | u32 | ||
127 | krb5_read_token(struct krb5_ctx *context_handle, | ||
128 | struct xdr_netobj *input_token_buffer, | ||
129 | struct xdr_buf *message_buffer, | ||
130 | int *qop_state, int toktype); | ||
131 | |||
132 | u32 | ||
133 | krb5_encrypt(struct crypto_tfm * key, | ||
134 | void *iv, void *in, void *out, int length); | ||
135 | |||
136 | u32 | ||
137 | krb5_decrypt(struct crypto_tfm * key, | ||
138 | void *iv, void *in, void *out, int length); | ||
139 | |||
140 | s32 | ||
141 | krb5_make_seq_num(struct crypto_tfm * key, | ||
142 | int direction, | ||
143 | s32 seqnum, unsigned char *cksum, unsigned char *buf); | ||
144 | |||
145 | s32 | ||
146 | krb5_get_seq_num(struct crypto_tfm * key, | ||
147 | unsigned char *cksum, | ||
148 | unsigned char *buf, int *direction, s32 * seqnum); | ||