/cygdrive/c/src/openafs/openafs.git/repo/src/WINNT/afsd/krb.h

/*
 * Copyright 2000, International Business Machines Corporation and others.
 * All Rights Reserved.
 *
 * This software has been released under the terms of the IBM Public
 * License.  For details, see the LICENSE file in the top-level source
 * directory or online at http://www.openafs.org/dl/license10.html
 */

/*
 * Excerpted from krb.sed
 */

/*
 * Copyright 1987, 1988 by the Massachusetts Institute of Technology.
 *
 * For copying and distribution information, please see the file
 * <mit-copyright.h>.
 *
 * Include file for the Kerberos library.
 */

/* Only one time, please */
#ifndef KRB_DEFS
#define KRB_DEFS

/* Need some defs from des.h     */
#include <hcrypto/des.h>

/* General definitions */
#define         KSUCCESS        0
#define         KFAILURE        255

/* The maximum sizes for aname, realm, sname, and instance +1 */
#define         ANAME_SZ        40
#define         REALM_SZ        40
#define         SNAME_SZ        40
#define         INST_SZ         40
/* include space for '.' and '@' */
#define         MAX_K_NAME_SZ   (ANAME_SZ + INST_SZ + REALM_SZ + 2)
#define         KKEY_SZ         100
#define         VERSION_SZ      1
#define         MSG_TYPE_SZ     1
#define         DATE_SZ         26      /* RTI date output */

#define         MAX_HSTNM       100

#ifndef DEFAULT_TKT_LIFE                /* allow compile-time override */
#define         DEFAULT_TKT_LIFE        120 /* default lifetime 10 hrs */
#endif

/* Definition of text structure used to pass text around */
#define         MAX_KTXT_LEN    1250

struct ktext {
    unsigned int     length;            /* Length of the text */
    unsigned char dat[MAX_KTXT_LEN];    /* The data itself */
    unsigned long mbz;          /* zero to catch runaway strings */
};

typedef struct ktext *KTEXT;
typedef struct ktext KTEXT_ST;


/* Definitions for send_to_kdc */
#define CLIENT_KRB_TIMEOUT      4       /* time between retries */
#define CLIENT_KRB_RETRY        5       /* retry this many times */
#define CLIENT_KRB_BUFLEN       512     /* max unfragmented packet */

/* Parameters for rd_ap_req */
/* Maximum alloable clock skew in seconds */
#define         CLOCK_SKEW      5*60

/* Error codes returned from the KDC */
#define         KDC_OK          0       /* Request OK */
#define         KDC_NAME_EXP    1       /* Principal expired */
#define         KDC_SERVICE_EXP 2       /* Service expired */
#define         KDC_AUTH_EXP    3       /* Auth expired */
#define         KDC_PKT_VER     4       /* Protocol version unknown */
#define         KDC_P_MKEY_VER  5       /* Wrong master key version */
#define         KDC_S_MKEY_VER  6       /* Wrong master key version */
#define         KDC_BYTE_ORDER  7       /* Byte order unknown */
#define         KDC_PR_UNKNOWN  8       /* Principal unknown */
#define         KDC_PR_N_UNIQUE 9       /* Principal not unique */
#define         KDC_NULL_KEY   10       /* Principal has null key */
#define         KDC_GEN_ERR    20       /* Generic error from KDC */


/* Values returned by get_credentials */
#define         GC_OK           0       /* Retrieve OK */
#define         RET_OK          0       /* Retrieve OK */
#define         GC_TKFIL       21       /* Can't read ticket file */
#define         RET_TKFIL      21       /* Can't read ticket file */
#define         GC_NOTKT       22       /* Can't find ticket or TGT */
#define         RET_NOTKT      22       /* Can't find ticket or TGT */


/* Values returned by mk_ap_req  */
#define         MK_AP_OK        0       /* Success */
#define         MK_AP_TGTEXP   26       /* TGT Expired */

/* Values returned by rd_ap_req */
#define         RD_AP_OK        0       /* Request authentic */
#define         RD_AP_UNDEC    31       /* Can't decode authenticator */
#define         RD_AP_EXP      32       /* Ticket expired */
#define         RD_AP_NYV      33       /* Ticket not yet valid */
#define         RD_AP_REPEAT   34       /* Repeated request */
#define         RD_AP_NOT_US   35       /* The ticket isn't for us */
#define         RD_AP_INCON    36       /* Request is inconsistent */
#define         RD_AP_TIME     37       /* delta_t too big */
#define         RD_AP_BADD     38       /* Incorrect net address */
#define         RD_AP_VERSION  39       /* protocol version mismatch */
#define         RD_AP_MSG_TYPE 40       /* invalid msg type */
#define         RD_AP_MODIFIED 41       /* message stream modified */
#define         RD_AP_ORDER    42       /* message out of order */
#define         RD_AP_UNAUTHOR 43       /* unauthorized request */

/* Values returned by get_pw_tkt */
#define         GT_PW_OK        0       /* Got password changing tkt */
#define         GT_PW_NULL     51       /* Current PW is null */
#define         GT_PW_BADPW    52       /* Incorrect current password */
#define         GT_PW_PROT     53       /* Protocol Error */
#define         GT_PW_KDCERR   54       /* Error returned by KDC */
#define         GT_PW_NULLTKT  55       /* Null tkt returned by KDC */


/* Values returned by send_to_kdc */
#define         SKDC_OK         0       /* Response received */
#define         SKDC_RETRY     56       /* Retry count exceeded */
#define         SKDC_CANT      57       /* Can't send request */

/*
 * Values returned by get_intkt
 * (can also return SKDC_* and KDC errors)
 */

#define         INTK_OK         0       /* Ticket obtained */
#define         INTK_W_NOTALL  61       /* Not ALL tickets returned */
#define         INTK_BADPW     62       /* Incorrect password */
#define         INTK_PROT      63       /* Protocol Error */
#define         INTK_ERR       70       /* Other error */

/* Values returned by get_adtkt */
#define         AD_OK           0       /* Ticket Obtained */
#define         AD_NOTGT       71       /* Don't have tgt */

/* Error codes returned by ticket file utilities */
#define         NO_TKT_FIL      76      /* No ticket file found */
#define         TKT_FIL_ACC     77      /* Couldn't access tkt file */
#define         TKT_FIL_LCK     78      /* Couldn't lock ticket file */
#define         TKT_FIL_FMT     79      /* Bad ticket file format */
#define         TKT_FIL_INI     80      /* tf_init not called first */

/* Error code returned by kparse_name */
#define         KNAME_FMT       81      /* Bad Kerberos name format */

/* Error code returned by krb_mk_safe */
#define         SAFE_PRIV_ERROR -1      /* syscall error */

#if 0
/*
 * macros for byte swapping; also scratch space
 * u_quad  0-->7, 1-->6, 2-->5, 3-->4, 4-->3, 5-->2, 6-->1, 7-->0
 * u_long  0-->3, 1-->2, 2-->1, 3-->0
 * u_short 0-->1, 1-->0
 */

#define     swap_u_16(x) {\
 unsigned long   _krb_swap_tmp[4];\
 swab(((char *) x) +0, ((char *)  _krb_swap_tmp) +14 ,2); \
 swab(((char *) x) +2, ((char *)  _krb_swap_tmp) +12 ,2); \
 swab(((char *) x) +4, ((char *)  _krb_swap_tmp) +10 ,2); \
 swab(((char *) x) +6, ((char *)  _krb_swap_tmp) +8  ,2); \
 swab(((char *) x) +8, ((char *)  _krb_swap_tmp) +6 ,2); \
 swab(((char *) x) +10,((char *)  _krb_swap_tmp) +4 ,2); \
 swab(((char *) x) +12,((char *)  _krb_swap_tmp) +2 ,2); \
 swab(((char *) x) +14,((char *)  _krb_swap_tmp) +0 ,2); \
 memcpy((char *)x, (char *)_krb_swap_tmp, 16);\
                            }

#define     swap_u_12(x) {\
 unsigned long   _krb_swap_tmp[4];\
 swab(( char *) x,     ((char *)  _krb_swap_tmp) +10 ,2); \
 swab(((char *) x) +2, ((char *)  _krb_swap_tmp) +8 ,2); \
 swab(((char *) x) +4, ((char *)  _krb_swap_tmp) +6 ,2); \
 swab(((char *) x) +6, ((char *)  _krb_swap_tmp) +4 ,2); \
 swab(((char *) x) +8, ((char *)  _krb_swap_tmp) +2 ,2); \
 swab(((char *) x) +10,((char *)  _krb_swap_tmp) +0 ,2); \
 memcpy((char *)x, (char *)_krb_swap_tmp, 12);\
                            }

#define     swap_C_Block(x) {\
 unsigned long   _krb_swap_tmp[4];\
 swab(( char *) x,    ((char *)  _krb_swap_tmp) +6 ,2); \
 swab(((char *) x) +2,((char *)  _krb_swap_tmp) +4 ,2); \
 swab(((char *) x) +4,((char *)  _krb_swap_tmp) +2 ,2); \
 swab(((char *) x) +6,((char *)  _krb_swap_tmp)    ,2); \
 memcpy((char *)x, (char *)_krb_swap_tmp, 8);\
                            }
#define     swap_u_quad(x) {\
 unsigned long   _krb_swap_tmp[4];\
 swab(( char *) &x,    ((char *)  _krb_swap_tmp) +6 ,2); \
 swab(((char *) &x) +2,((char *)  _krb_swap_tmp) +4 ,2); \
 swab(((char *) &x) +4,((char *)  _krb_swap_tmp) +2 ,2); \
 swab(((char *) &x) +6,((char *)  _krb_swap_tmp)    ,2); \
 memcpy((char *)&x, (char *)_krb_swap_tmp, 8);\
                            }

#define     swap_u_long(x) {\
 unsigned long   _krb_swap_tmp[4];\
 swab((char *)  &x,    ((char *)  _krb_swap_tmp) +2 ,2); \
 swab(((char *) &x) +2,((char *)  _krb_swap_tmp),2); \
 x = _krb_swap_tmp[0];   \
                           }

#define     swap_u_short(x) {\
 unsigned short _krb_swap_sh_tmp; \
 swab((char *)  &x,    ( &_krb_swap_sh_tmp) ,2); \
 x = (unsigned short) _krb_swap_sh_tmp; \
                            }
#endif /* 0 */

#include "krb_prot.h"

static send_to_kdc(
    KTEXT pkt,
    KTEXT rpkt);

#endif  /* KRB_DEFS */