diff options
Diffstat (limited to 'ssh-gss.h')
-rw-r--r-- | ssh-gss.h | 41 |
1 files changed, 37 insertions, 4 deletions
@@ -1,6 +1,6 @@ | |||
1 | /* $OpenBSD: ssh-gss.h,v 1.10 2007/06/12 08:20:00 djm Exp $ */ | 1 | /* $OpenBSD: ssh-gss.h,v 1.10 2007/06/12 08:20:00 djm Exp $ */ |
2 | /* | 2 | /* |
3 | * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved. | 3 | * Copyright (c) 2001-2009 Simon Wilkinson. All rights reserved. |
4 | * | 4 | * |
5 | * Redistribution and use in source and binary forms, with or without | 5 | * Redistribution and use in source and binary forms, with or without |
6 | * modification, are permitted provided that the following conditions | 6 | * modification, are permitted provided that the following conditions |
@@ -61,10 +61,22 @@ | |||
61 | 61 | ||
62 | #define SSH_GSS_OIDTYPE 0x06 | 62 | #define SSH_GSS_OIDTYPE 0x06 |
63 | 63 | ||
64 | #define SSH2_MSG_KEXGSS_INIT 30 | ||
65 | #define SSH2_MSG_KEXGSS_CONTINUE 31 | ||
66 | #define SSH2_MSG_KEXGSS_COMPLETE 32 | ||
67 | #define SSH2_MSG_KEXGSS_HOSTKEY 33 | ||
68 | #define SSH2_MSG_KEXGSS_ERROR 34 | ||
69 | #define SSH2_MSG_KEXGSS_GROUPREQ 40 | ||
70 | #define SSH2_MSG_KEXGSS_GROUP 41 | ||
71 | #define KEX_GSS_GRP1_SHA1_ID "gss-group1-sha1-" | ||
72 | #define KEX_GSS_GRP14_SHA1_ID "gss-group14-sha1-" | ||
73 | #define KEX_GSS_GEX_SHA1_ID "gss-gex-sha1-" | ||
74 | |||
64 | typedef struct { | 75 | typedef struct { |
65 | char *filename; | 76 | char *filename; |
66 | char *envvar; | 77 | char *envvar; |
67 | char *envval; | 78 | char *envval; |
79 | struct passwd *owner; | ||
68 | void *data; | 80 | void *data; |
69 | } ssh_gssapi_ccache; | 81 | } ssh_gssapi_ccache; |
70 | 82 | ||
@@ -72,8 +84,11 @@ typedef struct { | |||
72 | gss_buffer_desc displayname; | 84 | gss_buffer_desc displayname; |
73 | gss_buffer_desc exportedname; | 85 | gss_buffer_desc exportedname; |
74 | gss_cred_id_t creds; | 86 | gss_cred_id_t creds; |
87 | gss_name_t name; | ||
75 | struct ssh_gssapi_mech_struct *mech; | 88 | struct ssh_gssapi_mech_struct *mech; |
76 | ssh_gssapi_ccache store; | 89 | ssh_gssapi_ccache store; |
90 | int used; | ||
91 | int updated; | ||
77 | } ssh_gssapi_client; | 92 | } ssh_gssapi_client; |
78 | 93 | ||
79 | typedef struct ssh_gssapi_mech_struct { | 94 | typedef struct ssh_gssapi_mech_struct { |
@@ -84,6 +99,7 @@ typedef struct ssh_gssapi_mech_struct { | |||
84 | int (*userok) (ssh_gssapi_client *, char *); | 99 | int (*userok) (ssh_gssapi_client *, char *); |
85 | int (*localname) (ssh_gssapi_client *, char **); | 100 | int (*localname) (ssh_gssapi_client *, char **); |
86 | void (*storecreds) (ssh_gssapi_client *); | 101 | void (*storecreds) (ssh_gssapi_client *); |
102 | int (*updatecreds) (ssh_gssapi_ccache *, ssh_gssapi_client *); | ||
87 | } ssh_gssapi_mech; | 103 | } ssh_gssapi_mech; |
88 | 104 | ||
89 | typedef struct { | 105 | typedef struct { |
@@ -94,10 +110,11 @@ typedef struct { | |||
94 | gss_OID oid; /* client */ | 110 | gss_OID oid; /* client */ |
95 | gss_cred_id_t creds; /* server */ | 111 | gss_cred_id_t creds; /* server */ |
96 | gss_name_t client; /* server */ | 112 | gss_name_t client; /* server */ |
97 | gss_cred_id_t client_creds; /* server */ | 113 | gss_cred_id_t client_creds; /* both */ |
98 | } Gssctxt; | 114 | } Gssctxt; |
99 | 115 | ||
100 | extern ssh_gssapi_mech *supported_mechs[]; | 116 | extern ssh_gssapi_mech *supported_mechs[]; |
117 | extern Gssctxt *gss_kex_context; | ||
101 | 118 | ||
102 | int ssh_gssapi_check_oid(Gssctxt *, void *, size_t); | 119 | int ssh_gssapi_check_oid(Gssctxt *, void *, size_t); |
103 | void ssh_gssapi_set_oid_data(Gssctxt *, void *, size_t); | 120 | void ssh_gssapi_set_oid_data(Gssctxt *, void *, size_t); |
@@ -117,16 +134,32 @@ void ssh_gssapi_build_ctx(Gssctxt **); | |||
117 | void ssh_gssapi_delete_ctx(Gssctxt **); | 134 | void ssh_gssapi_delete_ctx(Gssctxt **); |
118 | OM_uint32 ssh_gssapi_sign(Gssctxt *, gss_buffer_t, gss_buffer_t); | 135 | OM_uint32 ssh_gssapi_sign(Gssctxt *, gss_buffer_t, gss_buffer_t); |
119 | void ssh_gssapi_buildmic(Buffer *, const char *, const char *, const char *); | 136 | void ssh_gssapi_buildmic(Buffer *, const char *, const char *, const char *); |
120 | int ssh_gssapi_check_mechanism(Gssctxt **, gss_OID, const char *); | 137 | int ssh_gssapi_check_mechanism(Gssctxt **, gss_OID, const char *, const char *); |
138 | OM_uint32 ssh_gssapi_client_identity(Gssctxt *, const char *); | ||
139 | int ssh_gssapi_credentials_updated(Gssctxt *); | ||
121 | 140 | ||
122 | /* In the server */ | 141 | /* In the server */ |
142 | typedef int ssh_gssapi_check_fn(Gssctxt **, gss_OID, const char *, | ||
143 | const char *); | ||
144 | char *ssh_gssapi_client_mechanisms(const char *, const char *); | ||
145 | char *ssh_gssapi_kex_mechs(gss_OID_set, ssh_gssapi_check_fn *, const char *, | ||
146 | const char *); | ||
147 | gss_OID ssh_gssapi_id_kex(Gssctxt *, char *, int); | ||
148 | int ssh_gssapi_server_check_mech(Gssctxt **,gss_OID, const char *, | ||
149 | const char *); | ||
123 | OM_uint32 ssh_gssapi_server_ctx(Gssctxt **, gss_OID); | 150 | OM_uint32 ssh_gssapi_server_ctx(Gssctxt **, gss_OID); |
124 | int ssh_gssapi_userok(char *name); | 151 | int ssh_gssapi_userok(char *name, struct passwd *); |
125 | OM_uint32 ssh_gssapi_checkmic(Gssctxt *, gss_buffer_t, gss_buffer_t); | 152 | OM_uint32 ssh_gssapi_checkmic(Gssctxt *, gss_buffer_t, gss_buffer_t); |
126 | void ssh_gssapi_do_child(char ***, u_int *); | 153 | void ssh_gssapi_do_child(char ***, u_int *); |
127 | void ssh_gssapi_cleanup_creds(void); | 154 | void ssh_gssapi_cleanup_creds(void); |
128 | void ssh_gssapi_storecreds(void); | 155 | void ssh_gssapi_storecreds(void); |
129 | 156 | ||
157 | char *ssh_gssapi_server_mechanisms(void); | ||
158 | int ssh_gssapi_oid_table_ok(void); | ||
159 | |||
160 | int ssh_gssapi_update_creds(ssh_gssapi_ccache *store); | ||
161 | void ssh_gssapi_rekey_creds(void); | ||
162 | |||
130 | #endif /* GSSAPI */ | 163 | #endif /* GSSAPI */ |
131 | 164 | ||
132 | #endif /* _SSH_GSS_H */ | 165 | #endif /* _SSH_GSS_H */ |