src/lib/gssapi/mechglue/mglueP.h

   1 /* #ident  "@(#)mglueP.h 1.2     96/01/18 SMI" */
   2
   3 /*
   4  * This header contains the private mechglue definitions.
   5  *
   6  * Copyright (c) 1995, by Sun Microsystems, Inc.
   7  * All rights reserved.
   8  */
   9
  10 #ifndef _GSS_MECHGLUEP_H
  11 #define _GSS_MECHGLUEP_H
  12
  13 #include "autoconf.h"
  14 #include "mechglue.h"
  15 #include "gssapiP_generic.h"
  16
  17 #define g_OID_copy(o1, o2)                                      \
  18 do {                                                            \
  19         memcpy((o1)->elements, (o2)->elements, (o2)->length);   \
  20         (o1)->length = (o2)->length;                            \
  21 } while (0)
  22
  23 /*
  24  * Array of context IDs typed by mechanism OID
  25  */
  26 typedef struct gss_ctx_id_struct {
  27         struct gss_ctx_id_struct *loopback;
  28         gss_OID                 mech_type;
  29         gss_ctx_id_t            internal_ctx_id;
  30 } gss_union_ctx_id_desc, *gss_union_ctx_id_t;
  31
  32 /*
  33  * Generic GSSAPI names.  A name can either be a generic name, or a
  34  * mechanism specific name....
  35  */
  36 typedef struct gss_name_struct {
  37         struct gss_name_struct *loopback;
  38         gss_OID                 name_type;
  39         gss_buffer_t            external_name;
  40         /*
  41          * These last two fields are only filled in for mechanism
  42          * names.
  43          */
  44         gss_OID                 mech_type;
  45         gss_name_t              mech_name;
  46 } gss_union_name_desc, *gss_union_name_t;
  47
  48 /*
  49  * Structure for holding list of mechanism-specific name types
  50  */
  51 typedef struct gss_mech_spec_name_t {
  52     gss_OID     name_type;
  53     gss_OID     mech;
  54     struct gss_mech_spec_name_t *next, *prev;
  55 } gss_mech_spec_name_desc, *gss_mech_spec_name;
  56
  57 /*
  58  * Credential auxiliary info, used in the credential structure
  59  */
  60 typedef struct gss_union_cred_auxinfo {
  61         gss_buffer_desc         name;
  62         gss_OID                 name_type;
  63         OM_uint32               creation_time;
  64         OM_uint32               time_rec;
  65         int                     cred_usage;
  66 } gss_union_cred_auxinfo;
  67
  68 /*
  69  * Set of Credentials typed on mechanism OID
  70  */
  71 typedef struct gss_cred_id_struct {
  72         struct gss_cred_id_struct *loopback;
  73         int                     count;
  74         gss_OID                 mechs_array;
  75         gss_cred_id_t           *cred_array;
  76         gss_union_cred_auxinfo  auxinfo;
  77 } gss_union_cred_desc, *gss_union_cred_t;
  78
  79 typedef OM_uint32           (*gss_acquire_cred_with_password_sfct)(
  80                     void *,             /* context */
  81                     OM_uint32 *,        /* minor_status */
  82                     const gss_name_t,   /* desired_name */
  83                     const gss_buffer_t, /* password */
  84                     OM_uint32,          /* time_req */
  85                     const gss_OID_set,  /* desired_mechs */
  86                     int,                /* cred_usage */
  87                     gss_cred_id_t *,    /* output_cred_handle */
  88                     gss_OID_set *,      /* actual_mechs */
  89                     OM_uint32 *         /* time_rec */
  90         /* */);
  91
  92 /*
  93  * Rudimentary pointer validation macro to check whether the
  94  * "loopback" field of an opaque struct points back to itself.  This
  95  * field also catches some programming errors where an opaque pointer
  96  * is passed to a function expecting the address of the opaque
  97  * pointer.
  98  */
  99 #define GSSINT_CHK_LOOP(p) (!((p) != NULL && (p)->loopback == (p)))
 100
 101 /********************************************************/
 102 /* The Mechanism Dispatch Table -- a mechanism needs to */
 103 /* define one of these and provide a function to return */
 104 /* it to initialize the GSSAPI library            */
 105 int gssint_mechglue_initialize_library(void);
 106
 107 OM_uint32 gssint_get_mech_type_oid(gss_OID OID, gss_buffer_t token);
 108
 109 /*
 110  * This is the definition of the mechs_array struct, which is used to
 111  * define the mechs array table. This table is used to indirectly
 112  * access mechanism specific versions of the gssapi routines through
 113  * the routines in the glue module (gssd_mech_glue.c)
 114  *
 115  * This contants all of the functions defined in gssapi.h except for
 116  * gss_release_buffer() and gss_release_oid_set(), which I am
 117  * assuming, for now, to be equal across mechanisms.
 118  */
 119
 120 typedef struct gss_config {
 121     gss_OID_desc    mech_type;
 122     void *          context;
 123     OM_uint32       (*gss_acquire_cred)
 124         (
 125                     OM_uint32*,         /* minor_status */
 126                     gss_name_t,         /* desired_name */
 127                     OM_uint32,          /* time_req */
 128                     gss_OID_set,        /* desired_mechs */
 129                     int,                /* cred_usage */
 130                     gss_cred_id_t*,     /* output_cred_handle */
 131                     gss_OID_set*,       /* actual_mechs */
 132                     OM_uint32*          /* time_rec */
 133                     );
 134     OM_uint32       (*gss_release_cred)
 135         (
 136                     OM_uint32*,         /* minor_status */
 137                     gss_cred_id_t*      /* cred_handle */
 138                     );
 139     OM_uint32       (*gss_init_sec_context)
 140         (
 141                     OM_uint32*,                 /* minor_status */
 142                     gss_cred_id_t,              /* claimant_cred_handle */
 143                     gss_ctx_id_t*,              /* context_handle */
 144                     gss_name_t,                 /* target_name */
 145                     gss_OID,                    /* mech_type */
 146                     OM_uint32,                  /* req_flags */
 147                     OM_uint32,                  /* time_req */
 148                     gss_channel_bindings_t,     /* input_chan_bindings */
 149                     gss_buffer_t,               /* input_token */
 150                     gss_OID*,                   /* actual_mech_type */
 151                     gss_buffer_t,               /* output_token */
 152                     OM_uint32*,                 /* ret_flags */
 153                     OM_uint32*                  /* time_rec */
 154                     );
 155     OM_uint32       (*gss_accept_sec_context)
 156         (
 157                     OM_uint32*,                 /* minor_status */
 158                     gss_ctx_id_t*,              /* context_handle */
 159                     gss_cred_id_t,              /* verifier_cred_handle */
 160                     gss_buffer_t,               /* input_token_buffer */
 161                     gss_channel_bindings_t,     /* input_chan_bindings */
 162                     gss_name_t*,                /* src_name */
 163                     gss_OID*,                   /* mech_type */
 164                     gss_buffer_t,               /* output_token */
 165                     OM_uint32*,                 /* ret_flags */
 166                     OM_uint32*,                 /* time_rec */
 167                     gss_cred_id_t*              /* delegated_cred_handle */
 168                     );
 169     OM_uint32       (*gss_process_context_token)
 170         (
 171                     OM_uint32*,         /* minor_status */
 172                     gss_ctx_id_t,       /* context_handle */
 173                     gss_buffer_t        /* token_buffer */
 174                     );
 175     OM_uint32       (*gss_delete_sec_context)
 176         (
 177                     OM_uint32*,         /* minor_status */
 178                     gss_ctx_id_t*,      /* context_handle */
 179                     gss_buffer_t        /* output_token */
 180                     );
 181     OM_uint32       (*gss_context_time)
 182         (
 183                     OM_uint32*,         /* minor_status */
 184                     gss_ctx_id_t,       /* context_handle */
 185                     OM_uint32*          /* time_rec */
 186                     );
 187     OM_uint32       (*gss_get_mic)
 188         (
 189                     OM_uint32*,         /* minor_status */
 190                     gss_ctx_id_t,       /* context_handle */
 191                     gss_qop_t,          /* qop_req */
 192                     gss_buffer_t,       /* message_buffer */
 193                     gss_buffer_t        /* message_token */
 194                     );
 195     OM_uint32       (*gss_verify_mic)
 196         (
 197                     OM_uint32*,         /* minor_status */
 198                     gss_ctx_id_t,       /* context_handle */
 199                     gss_buffer_t,       /* message_buffer */
 200                     gss_buffer_t,       /* token_buffer */
 201                     gss_qop_t*          /* qop_state */
 202                     );
 203     OM_uint32       (*gss_wrap)
 204         (
 205                     OM_uint32*,         /* minor_status */
 206                     gss_ctx_id_t,       /* context_handle */
 207                     int,                /* conf_req_flag */
 208                     gss_qop_t,          /* qop_req */
 209                     gss_buffer_t,       /* input_message_buffer */
 210                     int*,               /* conf_state */
 211                     gss_buffer_t        /* output_message_buffer */
 212                     );
 213     OM_uint32       (*gss_unwrap)
 214         (
 215                     OM_uint32*,         /* minor_status */
 216                     gss_ctx_id_t,       /* context_handle */
 217                     gss_buffer_t,       /* input_message_buffer */
 218                     gss_buffer_t,       /* output_message_buffer */
 219                     int*,               /* conf_state */
 220                     gss_qop_t*          /* qop_state */
 221                     );
 222     OM_uint32       (*gss_display_status)
 223         (
 224                     OM_uint32*,         /* minor_status */
 225                     OM_uint32,          /* status_value */
 226                     int,                /* status_type */
 227                     gss_OID,            /* mech_type */
 228                     OM_uint32*,         /* message_context */
 229                     gss_buffer_t        /* status_string */
 230                     );
 231     OM_uint32       (*gss_indicate_mechs)
 232         (
 233                     OM_uint32*,         /* minor_status */
 234                     gss_OID_set*        /* mech_set */
 235                     );
 236     OM_uint32       (*gss_compare_name)
 237         (
 238                     OM_uint32*,         /* minor_status */
 239                     gss_name_t,         /* name1 */
 240                     gss_name_t,         /* name2 */
 241                     int*                /* name_equal */
 242                     );
 243     OM_uint32       (*gss_display_name)
 244         (
 245                     OM_uint32*,         /* minor_status */
 246                     gss_name_t,         /* input_name */
 247                     gss_buffer_t,       /* output_name_buffer */
 248                     gss_OID*            /* output_name_type */
 249                     );
 250     OM_uint32       (*gss_import_name)
 251         (
 252                     OM_uint32*,         /* minor_status */
 253                     gss_buffer_t,       /* input_name_buffer */
 254                     gss_OID,            /* input_name_type */
 255                     gss_name_t*         /* output_name */
 256                     );
 257     OM_uint32       (*gss_release_name)
 258         (
 259                     OM_uint32*,         /* minor_status */
 260                     gss_name_t*         /* input_name */
 261                     );
 262     OM_uint32       (*gss_inquire_cred)
 263         (
 264                     OM_uint32 *,                /* minor_status */
 265                     gss_cred_id_t,              /* cred_handle */
 266                     gss_name_t *,               /* name */
 267                     OM_uint32 *,                /* lifetime */
 268                     int *,                      /* cred_usage */
 269                     gss_OID_set *               /* mechanisms */
 270                     );
 271     OM_uint32       (*gss_add_cred)
 272         (
 273                     OM_uint32 *,        /* minor_status */
 274                     gss_cred_id_t,      /* input_cred_handle */
 275                     gss_name_t,         /* desired_name */
 276                     gss_OID,            /* desired_mech */
 277                     gss_cred_usage_t,   /* cred_usage */
 278                     OM_uint32,          /* initiator_time_req */
 279                     OM_uint32,          /* acceptor_time_req */
 280                     gss_cred_id_t *,    /* output_cred_handle */
 281                     gss_OID_set *,      /* actual_mechs */
 282                     OM_uint32 *,        /* initiator_time_rec */
 283                     OM_uint32 *         /* acceptor_time_rec */
 284                     );
 285     OM_uint32       (*gss_export_sec_context)
 286         (
 287                     OM_uint32 *,        /* minor_status */
 288                     gss_ctx_id_t *,     /* context_handle */
 289                     gss_buffer_t        /* interprocess_token */
 290                     );
 291     OM_uint32       (*gss_import_sec_context)
 292         (
 293                     OM_uint32 *,        /* minor_status */
 294                     gss_buffer_t,       /* interprocess_token */
 295                     gss_ctx_id_t *      /* context_handle */
 296                     );
 297     OM_uint32       (*gss_inquire_cred_by_mech)
 298         (
 299                     OM_uint32 *,        /* minor_status */
 300                     gss_cred_id_t,      /* cred_handle */
 301                     gss_OID,            /* mech_type */
 302                     gss_name_t *,       /* name */
 303                     OM_uint32 *,        /* initiator_lifetime */
 304                     OM_uint32 *,        /* acceptor_lifetime */
 305                     gss_cred_usage_t *  /* cred_usage */
 306                     );
 307     OM_uint32       (*gss_inquire_names_for_mech)
 308         (
 309                     OM_uint32 *,        /* minor_status */
 310                     gss_OID,            /* mechanism */
 311                     gss_OID_set *       /* name_types */
 312                     );
 313     OM_uint32   (*gss_inquire_context)
 314         (
 315                     OM_uint32 *,        /* minor_status */
 316                     gss_ctx_id_t,       /* context_handle */
 317                     gss_name_t *,       /* src_name */
 318                     gss_name_t *,       /* targ_name */
 319                     OM_uint32 *,        /* lifetime_rec */
 320                     gss_OID *,          /* mech_type */
 321                     OM_uint32 *,        /* ctx_flags */
 322                     int *,              /* locally_initiated */
 323                     int *               /* open */
 324                     );
 325     OM_uint32       (*gss_internal_release_oid)
 326         (
 327                     OM_uint32 *,        /* minor_status */
 328                     gss_OID *           /* OID */
 329          );
 330     OM_uint32        (*gss_wrap_size_limit)
 331         (
 332                     OM_uint32 *,        /* minor_status */
 333                     gss_ctx_id_t,       /* context_handle */
 334                     int,                /* conf_req_flag */
 335                     gss_qop_t,          /* qop_req */
 336                     OM_uint32,          /* req_output_size */
 337                     OM_uint32 *         /* max_input_size */
 338          );
 339 #if 0
 340     int              (*pname_to_uid)
 341         (
 342                     char *,             /* pname */
 343                     gss_OID,            /* name type */
 344                     gss_OID,            /* mech type */
 345                     uid_t *             /* uid */
 346                     );
 347         OM_uint32               (*gssint_userok)
 348         (
 349                     OM_uint32 *,        /* minor_status */
 350                     const gss_name_t,   /* pname */
 351                     const char *,       /* local user */
 352                     int *               /* user ok? */
 353         /* */);
 354 #endif
 355         OM_uint32               (*gss_export_name)
 356         (
 357                 OM_uint32 *,            /* minor_status */
 358                 const gss_name_t,       /* input_name */
 359                 gss_buffer_t            /* exported_name */
 360         /* */);
 361         OM_uint32       (*gss_store_cred)
 362         (
 363                 OM_uint32 *,            /* minor_status */
 364                 const gss_cred_id_t,    /* input_cred */
 365                 gss_cred_usage_t,       /* cred_usage */
 366                 const gss_OID,          /* desired_mech */
 367                 OM_uint32,              /* overwrite_cred */
 368                 OM_uint32,              /* default_cred */
 369                 gss_OID_set *,          /* elements_stored */
 370                 gss_cred_usage_t *      /* cred_usage_stored */
 371         /* */);
 372
 373
 374         /* GGF extensions */
 375
 376         OM_uint32       (*gss_inquire_sec_context_by_oid)
 377         (
 378                     OM_uint32 *,        /* minor_status */
 379                     const gss_ctx_id_t, /* context_handle */
 380                     const gss_OID,      /* OID */
 381                     gss_buffer_set_t *  /* data_set */
 382                     );
 383         OM_uint32       (*gss_inquire_cred_by_oid)
 384         (
 385                     OM_uint32 *,        /* minor_status */
 386                     const gss_cred_id_t, /* cred_handle */
 387                     const gss_OID,      /* OID */
 388                     gss_buffer_set_t *  /* data_set */
 389                     );
 390         OM_uint32       (*gss_set_sec_context_option)
 391         (
 392                     OM_uint32 *,        /* minor_status */
 393                     gss_ctx_id_t *,     /* context_handle */
 394                     const gss_OID,      /* OID */
 395                     const gss_buffer_t  /* value */
 396                     );
 397         OM_uint32       (*gssspi_set_cred_option)
 398         (
 399                     OM_uint32 *,        /* minor_status */
 400                     gss_cred_id_t,      /* cred_handle */
 401                     const gss_OID,      /* OID */
 402                     const gss_buffer_t  /* value */
 403                     );
 404         OM_uint32       (*gssspi_mech_invoke)
 405         (
 406                     OM_uint32*,         /* minor_status */
 407                     const gss_OID,      /* mech OID */
 408                     const gss_OID,      /* OID */
 409                     gss_buffer_t        /* value */
 410                     );
 411
 412         /* AEAD extensions */
 413         OM_uint32       (*gss_wrap_aead)
 414         (
 415             OM_uint32 *,                /* minor_status */
 416             gss_ctx_id_t,               /* context_handle */
 417             int,                        /* conf_req_flag */
 418             gss_qop_t,                  /* qop_req */
 419             gss_buffer_t,               /* input_assoc_buffer */
 420             gss_buffer_t,               /* input_payload_buffer */
 421             int *,                      /* conf_state */
 422             gss_buffer_t                /* output_message_buffer */
 423         /* */);
 424
 425         OM_uint32       (*gss_unwrap_aead)
 426         (
 427             OM_uint32 *,                /* minor_status */
 428             gss_ctx_id_t,               /* context_handle */
 429             gss_buffer_t,               /* input_message_buffer */
 430             gss_buffer_t,               /* input_assoc_buffer */
 431             gss_buffer_t,               /* output_payload_buffer */
 432             int *,                      /* conf_state */
 433             gss_qop_t *                 /* qop_state */
 434         /* */);
 435
 436         /* SSPI extensions */
 437         OM_uint32       (*gss_wrap_iov)
 438         (
 439             OM_uint32 *,                /* minor_status */
 440             gss_ctx_id_t,               /* context_handle */
 441             int,                        /* conf_req_flag */
 442             gss_qop_t,                  /* qop_req */
 443             int *,                      /* conf_state */
 444             gss_iov_buffer_desc *,      /* iov */
 445             int                         /* iov_count */
 446         /* */);
 447
 448         OM_uint32       (*gss_unwrap_iov)
 449         (
 450             OM_uint32 *,                /* minor_status */
 451             gss_ctx_id_t,               /* context_handle */
 452             int *,                      /* conf_state */
 453             gss_qop_t *,                /* qop_state */
 454             gss_iov_buffer_desc *,      /* iov */
 455             int                         /* iov_count */
 456         /* */);
 457
 458         OM_uint32       (*gss_wrap_iov_length)
 459         (
 460             OM_uint32 *,                /* minor_status */
 461             gss_ctx_id_t,               /* context_handle */
 462             int,                        /* conf_req_flag*/
 463             gss_qop_t,                  /* qop_req */
 464             int *,                      /* conf_state */
 465             gss_iov_buffer_desc *,      /* iov */
 466             int                         /* iov_count */
 467         /* */);
 468
 469         OM_uint32       (*gss_complete_auth_token)
 470         (
 471                     OM_uint32*,         /* minor_status */
 472                     const gss_ctx_id_t, /* context_handle */
 473                     gss_buffer_t        /* input_message_buffer */
 474                     );
 475
 476         /* New for 1.8 */
 477
 478         OM_uint32       (*gss_acquire_cred_impersonate_name)
 479         (
 480             OM_uint32 *,                /* minor_status */
 481             const gss_cred_id_t,        /* impersonator_cred_handle */
 482             const gss_name_t,           /* desired_name */
 483             OM_uint32,                  /* time_req */
 484             const gss_OID_set,          /* desired_mechs */
 485             gss_cred_usage_t,           /* cred_usage */
 486             gss_cred_id_t *,            /* output_cred_handle */
 487             gss_OID_set *,              /* actual_mechs */
 488             OM_uint32 *                 /* time_rec */
 489         /* */);
 490
 491         OM_uint32       (*gss_add_cred_impersonate_name)
 492         (
 493             OM_uint32 *,                /* minor_status */
 494             gss_cred_id_t,              /* input_cred_handle */
 495             const gss_cred_id_t,        /* impersonator_cred_handle */
 496             const gss_name_t,           /* desired_name */
 497             const gss_OID,              /* desired_mech */
 498             gss_cred_usage_t,           /* cred_usage */
 499             OM_uint32,                  /* initiator_time_req */
 500             OM_uint32,                  /* acceptor_time_req */
 501             gss_cred_id_t *,            /* output_cred_handle */
 502             gss_OID_set *,              /* actual_mechs */
 503             OM_uint32 *,                /* initiator_time_rec */
 504             OM_uint32 *                 /* acceptor_time_rec */
 505         /* */);
 506
 507         OM_uint32       (*gss_display_name_ext)
 508         (
 509             OM_uint32 *,                /* minor_status */
 510             gss_name_t,                 /* name */
 511             gss_OID,                    /* display_as_name_type */
 512             gss_buffer_t                /* display_name */
 513         /* */);
 514
 515         OM_uint32       (*gss_inquire_name)
 516         (
 517             OM_uint32 *,                /* minor_status */
 518             gss_name_t,                 /* name */
 519             int *,                      /* name_is_MN */
 520             gss_OID *,                  /* MN_mech */
 521             gss_buffer_set_t *          /* attrs */
 522         /* */);
 523
 524         OM_uint32       (*gss_get_name_attribute)
 525         (
 526             OM_uint32 *,                /* minor_status */
 527             gss_name_t,                 /* name */
 528             gss_buffer_t,               /* attr */
 529             int *,                      /* authenticated */
 530             int *,                      /* complete */
 531             gss_buffer_t,               /* value */
 532             gss_buffer_t,               /* display_value */
 533             int *                       /* more */
 534         /* */);
 535
 536         OM_uint32       (*gss_set_name_attribute)
 537         (
 538             OM_uint32 *,                /* minor_status */
 539             gss_name_t,                 /* name */
 540             int,                        /* complete */
 541             gss_buffer_t,               /* attr */
 542             gss_buffer_t                /* value */
 543         /* */);
 544
 545         OM_uint32       (*gss_delete_name_attribute)
 546         (
 547             OM_uint32 *,                /* minor_status */
 548             gss_name_t,                 /* name */
 549             gss_buffer_t                /* attr */
 550         /* */);
 551
 552         OM_uint32       (*gss_export_name_composite)
 553         (
 554             OM_uint32 *,                /* minor_status */
 555             gss_name_t,                 /* name */
 556             gss_buffer_t                /* exp_composite_name */
 557         /* */);
 558
 559         OM_uint32       (*gss_map_name_to_any)
 560         (
 561             OM_uint32 *,                /* minor_status */
 562             gss_name_t,                 /* name */
 563             int,                        /* authenticated */
 564             gss_buffer_t,               /* type_id */
 565             gss_any_t *                 /* output */
 566         /* */);
 567
 568         OM_uint32       (*gss_release_any_name_mapping)
 569         (
 570             OM_uint32 *,                /* minor_status */
 571             gss_name_t,                 /* name */
 572             gss_buffer_t,               /* type_id */
 573             gss_any_t *                 /* input */
 574         /* */);
 575
 576 } *gss_mechanism;
 577
 578 /* This structure MUST NOT be used by any code outside libgss */
 579 typedef struct gss_config_ext {
 580     gss_acquire_cred_with_password_sfct gss_acquire_cred_with_password;
 581 } *gss_mechanism_ext;
 582
 583 /*
 584  * In the user space we use a wrapper structure to encompass the
 585  * mechanism entry points.  The wrapper contain the mechanism
 586  * entry points and other data which is only relevant to the gss-api
 587  * layer.  In the kernel we use only the gss_config strucutre because
 588  * the kernal does not cantain any of the extra gss-api specific data.
 589  */
 590 typedef struct gss_mech_config {
 591         char *kmodName;                 /* kernel module name */
 592         char *uLibName;                 /* user library name */
 593         char *mechNameStr;              /* mechanism string name */
 594         char *optionStr;                /* optional mech parameters */
 595         void *dl_handle;                /* RTLD object handle for the mech */
 596         gss_OID mech_type;              /* mechanism oid */
 597         gss_mechanism mech;             /* mechanism initialization struct */
 598         gss_mechanism_ext mech_ext;     /* extensions */
 599         int priority;                   /* mechanism preference order */
 600         int freeMech;                   /* free mech table */
 601         struct gss_mech_config *next;   /* next element in the list */
 602 } *gss_mech_info;
 603
 604 /********************************************************/
 605 /* Internal mechglue routines */
 606
 607 #if 0
 608 int gssint_mechglue_init(void);
 609 void gssint_mechglue_fini(void);
 610 #endif
 611
 612 gss_mechanism gssint_get_mechanism (gss_OID);
 613 gss_mechanism_ext gssint_get_mechanism_ext(const gss_OID);
 614 OM_uint32 gssint_get_mech_type (gss_OID, gss_buffer_t);
 615 char *gssint_get_kmodName(const gss_OID);
 616 char *gssint_get_modOptions(const gss_OID);
 617 OM_uint32 gssint_import_internal_name (OM_uint32 *, gss_OID, gss_union_name_t,
 618                                       gss_name_t *);
 619 OM_uint32 gssint_export_internal_name(OM_uint32 *, const gss_OID,
 620         const gss_name_t, gss_buffer_t);
 621 OM_uint32 gssint_display_internal_name (OM_uint32 *, gss_OID, gss_name_t,
 622                                        gss_buffer_t, gss_OID *);
 623 OM_uint32 gssint_release_internal_name (OM_uint32 *, gss_OID, gss_name_t *);
 624 OM_uint32 gssint_delete_internal_sec_context (OM_uint32 *, gss_OID,
 625                                               gss_ctx_id_t *, gss_buffer_t);
 626 #ifdef _GSS_STATIC_LINK
 627 int gssint_register_mechinfo(gss_mech_info template);
 628 #endif
 629
 630 OM_uint32 gssint_convert_name_to_union_name
 631           (OM_uint32 *,         /* minor_status */
 632            gss_mechanism,       /* mech */
 633            gss_name_t,          /* internal_name */
 634            gss_name_t *         /* external_name */
 635            );
 636 gss_cred_id_t gssint_get_mechanism_cred
 637           (gss_union_cred_t,    /* union_cred */
 638            gss_OID              /* mech_type */
 639            );
 640
 641 OM_uint32 gssint_create_copy_buffer(
 642         const gss_buffer_t,     /* src buffer */
 643         gss_buffer_t *,         /* destination buffer */
 644         int                     /* NULL terminate buffer ? */
 645 );
 646
 647 OM_uint32 gssint_copy_oid_set(
 648         OM_uint32 *,                    /* minor_status */
 649         const gss_OID_set_desc * const, /* oid set */
 650         gss_OID_set *                   /* new oid set */
 651 );
 652
 653 gss_OID gss_find_mechanism_from_name_type (gss_OID); /* name_type */
 654
 655 OM_uint32 gss_add_mech_name_type
 656            (OM_uint32 *,        /* minor_status */
 657             gss_OID,            /* name_type */
 658             gss_OID             /* mech */
 659                );
 660
 661 /*
 662  * Sun extensions to GSS-API v2
 663  */
 664
 665 OM_uint32
 666 gssint_mech_to_oid(
 667         const char *mech,               /* mechanism string name */
 668         gss_OID *oid                    /* mechanism oid */
 669 );
 670
 671 const char *
 672 gssint_oid_to_mech(
 673         const gss_OID oid               /* mechanism oid */
 674 );
 675
 676 OM_uint32
 677 gssint_get_mechanisms(
 678         char *mechArray[],              /* array to populate with mechs */
 679         int arrayLen                    /* length of passed in array */
 680 );
 681
 682 OM_uint32
 683 gssint_userok(
 684         OM_uint32 *,            /* minor */
 685         const gss_name_t,       /* name */
 686         const char *,           /* user */
 687         int *                   /* user_ok */
 688 );
 689
 690 OM_uint32
 691 gss_store_cred(
 692         OM_uint32 *,            /* minor_status */
 693         const gss_cred_id_t,    /* input_cred_handle */
 694         gss_cred_usage_t,       /* cred_usage */
 695         const gss_OID,          /* desired_mech */
 696         OM_uint32,              /* overwrite_cred */
 697         OM_uint32,              /* default_cred */
 698         gss_OID_set *,          /* elements_stored */
 699         gss_cred_usage_t *      /* cred_usage_stored */
 700 );
 701
 702 int
 703 gssint_get_der_length(
 704         unsigned char **,       /* buf */
 705         unsigned int,           /* buf_len */
 706         unsigned int *          /* bytes */
 707 );
 708
 709 unsigned int
 710 gssint_der_length_size(unsigned int /* len */);
 711
 712 int
 713 gssint_put_der_length(
 714         unsigned int,           /* length */
 715         unsigned char **,       /* buf */
 716         unsigned int            /* max_len */
 717 );
 718
 719 OM_uint32
 720 gssint_wrap_aead (gss_mechanism,        /* mech */
 721                   OM_uint32 *,          /* minor_status */
 722                   gss_union_ctx_id_t,   /* ctx */
 723                   int,                  /* conf_req_flag */
 724                   gss_qop_t,            /* qop_req_flag */
 725                   gss_buffer_t,         /* input_assoc_buffer */
 726                   gss_buffer_t,         /* input_payload_buffer */
 727                   int *,                /* conf_state */
 728                   gss_buffer_t);        /* output_message_buffer */
 729 OM_uint32
 730 gssint_unwrap_aead (gss_mechanism,      /* mech */
 731                     OM_uint32 *,        /* minor_status */
 732                     gss_union_ctx_id_t, /* ctx */
 733                     gss_buffer_t,       /* input_message_buffer */
 734                     gss_buffer_t,       /* input_assoc_buffer */
 735                     gss_buffer_t,       /* output_payload_buffer */
 736                     int *,              /* conf_state */
 737                     gss_qop_t *);       /* qop_state */
 738
 739
 740 /* Use this to map an error code that was returned from a mech
 741    operation; the mech will be asked to produce the associated error
 742    messages.
 743
 744    Remember that if the minor status code cannot be returned to the
 745    caller (e.g., if it's stuffed in an automatic variable and then
 746    ignored), then we don't care about producing a mapping.  */
 747 #define map_error(MINORP, MECH) \
 748     (*(MINORP) = gssint_mecherrmap_map(*(MINORP), &(MECH)->mech_type))
 749 #define map_error_oid(MINORP, MECHOID) \
 750     (*(MINORP) = gssint_mecherrmap_map(*(MINORP), (MECHOID)))
 751
 752 /* Use this to map an errno value or com_err error code being
 753    generated within the mechglue code (e.g., by calling generic oid
 754    ops).  Any errno or com_err values produced by mech operations
 755    should be processed with map_error.  This means they'll be stored
 756    separately even if the mech uses com_err, because we can't assume
 757    that it will use com_err.  */
 758 #define map_errcode(MINORP) \
 759     (*(MINORP) = gssint_mecherrmap_map_errcode(*(MINORP)))
 760
 761 #endif /* _GSS_MECHGLUEP_H */