2012-04-01 06:09:22 +04:00
/*
Unix SMB / CIFS implementation .
kerberos authorization data ( PAC ) utility library
Copyright ( C ) Andrew Bartlett < abartlet @ samba . org > 2011
Copyright ( C ) Simo Sorce 2010 - 2012
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; either version 3 of the License , or
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
along with this program . If not , see < http : //www.gnu.org/licenses/>.
*/
# ifndef _PAC_UTILS_H
# define _PAC_UTILS_H
2012-09-22 02:59:11 +04:00
# ifdef HAVE_KRB5
2012-04-22 01:26:18 +04:00
# include "lib/krb5_wrap/krb5_samba.h"
2012-05-21 20:25:28 +04:00
# include "lib/krb5_wrap/gss_samba.h"
2012-04-24 20:37:13 +04:00
2012-04-01 06:09:22 +04:00
struct PAC_SIGNATURE_DATA ;
struct PAC_DATA ;
2012-07-06 00:17:00 +04:00
struct PAC_LOGON_INFO ;
2012-04-01 06:09:22 +04:00
krb5_error_code check_pac_checksum ( DATA_BLOB pac_data ,
struct PAC_SIGNATURE_DATA * sig ,
krb5_context context ,
const krb5_keyblock * keyblock ) ;
NTSTATUS kerberos_decode_pac ( TALLOC_CTX * mem_ctx ,
DATA_BLOB pac_data_blob ,
krb5_context context ,
const krb5_keyblock * krbtgt_keyblock ,
const krb5_keyblock * service_keyblock ,
krb5_const_principal client_principal ,
time_t tgs_authtime ,
struct PAC_DATA * * pac_data_out ) ;
2012-07-06 00:17:00 +04:00
NTSTATUS kerberos_pac_logon_info ( TALLOC_CTX * mem_ctx ,
DATA_BLOB blob ,
krb5_context context ,
const krb5_keyblock * krbtgt_keyblock ,
const krb5_keyblock * service_keyblock ,
krb5_const_principal client_principal ,
time_t tgs_authtime ,
struct PAC_LOGON_INFO * * logon_info ) ;
2019-12-19 17:34:36 +03:00
struct PAC_DATA ;
struct PAC_DATA_CTR {
DATA_BLOB pac_blob ;
struct PAC_DATA * pac_data ;
} ;
struct auth4_context * auth4_context_for_PAC_DATA_CTR ( TALLOC_CTX * mem_ctx ) ;
struct PAC_DATA_CTR * auth4_context_get_PAC_DATA_CTR ( struct auth4_context * auth_ctx ,
TALLOC_CTX * mem_ctx ) ;
2012-04-01 06:09:22 +04:00
NTSTATUS gssapi_obtain_pac_blob ( TALLOC_CTX * mem_ctx ,
gss_ctx_id_t gssapi_context ,
gss_name_t gss_client_name ,
DATA_BLOB * pac_data ) ;
NTSTATUS gssapi_get_session_key ( TALLOC_CTX * mem_ctx ,
gss_ctx_id_t gssapi_context ,
DATA_BLOB * session_key ,
uint32_t * keytype ) ;
2012-04-22 01:26:18 +04:00
/* not the best place here, need to move to a more generic gssapi
* wrapper later */
char * gssapi_error_string ( TALLOC_CTX * mem_ctx ,
OM_uint32 maj_stat , OM_uint32 min_stat ,
const gss_OID mech ) ;
2012-09-22 02:59:11 +04:00
# endif /* HAVE_KRB5 */
2012-04-01 06:09:22 +04:00
# endif /* _PAC_UTILS_H */