/* $NetBSD: windc_plugin.h,v 1.2.22.1 2023/08/11 13:39:55 martin Exp $ */ /* * Copyright (c) 2006 Kungliga Tekniska Högskolan * (Royal Institute of Technology, Stockholm, Sweden). * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * 3. Neither the name of the Institute nor the names of its contributors * may be used to endorse or promote products derived from this software * without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. */ /* Id */ #ifndef HEIMDAL_KRB5_PAC_PLUGIN_H #define HEIMDAL_KRB5_PAC_PLUGIN_H 1 #include /* * The PAC generate function should allocate a krb5_pac using * krb5_pac_init and fill in the PAC structure for the principal using * krb5_pac_add_buffer. * * The PAC verify function should verify all components in the PAC * using krb5_pac_get_types and krb5_pac_get_buffer for all types. * * Check client access function check if the client is authorized. */ struct hdb_entry_ex; typedef krb5_error_code (KRB5_CALLCONV *krb5plugin_windc_pac_generate)(void *, krb5_context, struct hdb_entry_ex *, krb5_pac *); typedef krb5_error_code (KRB5_CALLCONV *krb5plugin_windc_pac_verify)(void *, krb5_context, const krb5_principal, /* new ticket client */ const krb5_principal, /* delegation proxy */ struct hdb_entry_ex *,/* client */ struct hdb_entry_ex *,/* server */ struct hdb_entry_ex *,/* krbtgt */ krb5_pac *); typedef krb5_error_code (KRB5_CALLCONV *krb5plugin_windc_client_access)( void *, krb5_context, krb5_kdc_configuration *config, hdb_entry_ex *, const char *, hdb_entry_ex *, const char *, KDC_REQ *, METHOD_DATA *); #define KRB5_WINDC_PLUGIN_MINOR 6 #define KRB5_WINDC_PLUGING_MINOR KRB5_WINDC_PLUGIN_MINOR typedef struct krb5plugin_windc_ftable { int minor_version; krb5_error_code (KRB5_CALLCONV *init)(krb5_context, void **); void (KRB5_CALLCONV *fini)(void *); krb5plugin_windc_pac_generate pac_generate; krb5plugin_windc_pac_verify pac_verify; krb5plugin_windc_client_access client_access; } krb5plugin_windc_ftable; #endif /* HEIMDAL_KRB5_PAC_PLUGIN_H */