Use AD-KDCIssued to protect RADIUS authdata. Cleanup.
[mech_eap.orig] / util_reauth.h
1 /*
2  * Copyright (c) 2010, JANET(UK)
3  * All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  *
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  *
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  *
16  * 3. Neither the name of JANET(UK) nor the names of its contributors
17  *    may be used to endorse or promote products derived from this software
18  *    without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
21  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  */
32
33 #include "gssapiP_eap.h"
34
35 #ifndef _UTIL_REAUTH_H_
36 #define _UTIL_REAUTH_H_ 1
37
38 #define KRB5_AUTHDATA_RADIUS_AVP        513
39
40 OM_uint32
41 gssInitSecContext(OM_uint32 *minor,
42                   gss_cred_id_t cred,
43                   gss_ctx_id_t *context_handle,
44                   gss_name_t target_name,
45                   gss_OID mech_type,
46                   OM_uint32 req_flags,
47                   OM_uint32 time_req,
48                   gss_channel_bindings_t input_chan_bindings,
49                   gss_buffer_t input_token,
50                   gss_OID *actual_mech_type,
51                   gss_buffer_t output_token,
52                   OM_uint32 *ret_flags,
53                   OM_uint32 *time_rec);
54
55 OM_uint32
56 gssAcceptSecContext(OM_uint32 *minor,
57                     gss_ctx_id_t *context_handle,
58                     gss_cred_id_t cred,
59                     gss_buffer_t input_token,
60                     gss_channel_bindings_t input_chan_bindings,
61                     gss_name_t *src_name,
62                     gss_OID *mech_type,
63                     gss_buffer_t output_token,
64                     OM_uint32 *ret_flags,
65                     OM_uint32 *time_rec,
66                     gss_cred_id_t *delegated_cred_handle);
67
68 OM_uint32
69 gssReleaseCred(OM_uint32 *minor,
70                gss_cred_id_t *cred_handle);
71
72 OM_uint32
73 gssReleaseName(OM_uint32 *minor,
74                gss_name_t *name);
75
76 OM_uint32
77 gssDeleteSecContext(OM_uint32 *minor,
78                     gss_ctx_id_t *context_handle,
79                     gss_buffer_t output_token);
80
81 OM_uint32
82 gssInquireSecContextByOid(OM_uint32 *minor,
83                           const gss_ctx_id_t context_handle,
84                           const gss_OID desired_object,
85                           gss_buffer_set_t *data_set);
86
87 OM_uint32
88 gssKrbExtractAuthzDataFromSecContext(OM_uint32 *minor,
89                                      const gss_ctx_id_t ctx,
90                                      int ad_type,
91                                      gss_buffer_t ad_data);
92
93 OM_uint32
94 gssStoreCred(OM_uint32 *minor,
95              const gss_cred_id_t input_cred_handle,
96              gss_cred_usage_t input_usage,
97              const gss_OID desired_mech,
98              OM_uint32 overwrite_cred,
99              OM_uint32 default_cred,
100              gss_OID_set *elements_stored,
101              gss_cred_usage_t *cred_usage_stored);
102
103 OM_uint32
104 gssGetNameAttribute(OM_uint32 *minor,
105                     gss_name_t name,
106                     gss_buffer_t attr,
107                     int *authenticated,
108                     int *complete,
109                     gss_buffer_t value,
110                     gss_buffer_t display_value,
111                     int *more);
112
113 OM_uint32
114 gssEapMakeReauthCreds(OM_uint32 *minor,
115                       gss_ctx_id_t ctx,
116                       gss_cred_id_t cred,
117                       gss_buffer_t credBuf);
118
119 OM_uint32
120 gssEapStoreReauthCreds(OM_uint32 *minor,
121                        gss_ctx_id_t ctx,
122                        gss_cred_id_t cred,
123                        gss_buffer_t credBuf);
124
125
126 OM_uint32
127 gssEapGlueToMechName(OM_uint32 *minor,
128                      gss_name_t glueName,
129                      gss_name_t *pMechName);
130
131 OM_uint32
132 gssEapMechToGlueName(OM_uint32 *minor,
133                      gss_name_t mechName,
134                      gss_name_t *pGlueName);
135
136 OM_uint32
137 gssEapReauthComplete(OM_uint32 *minor,
138                     gss_ctx_id_t ctx,
139                     gss_cred_id_t cred,
140                     const gss_OID mech,
141                     OM_uint32 timeRec);
142
143 OM_uint32
144 gssEapReauthInitialize(OM_uint32 *minor);
145
146 #endif /* _UTIL_REAUTH_H_ */