1*0Sstevel@tonic-gate /* 2*0Sstevel@tonic-gate * CDDL HEADER START 3*0Sstevel@tonic-gate * 4*0Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*0Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only 6*0Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance 7*0Sstevel@tonic-gate * with the License. 8*0Sstevel@tonic-gate * 9*0Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10*0Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 11*0Sstevel@tonic-gate * See the License for the specific language governing permissions 12*0Sstevel@tonic-gate * and limitations under the License. 13*0Sstevel@tonic-gate * 14*0Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 15*0Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16*0Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 17*0Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 18*0Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 19*0Sstevel@tonic-gate * 20*0Sstevel@tonic-gate * CDDL HEADER END 21*0Sstevel@tonic-gate */ 22*0Sstevel@tonic-gate /* 23*0Sstevel@tonic-gate * Copyright 2005 Sun Microsystems, Inc. All rights reserved. 24*0Sstevel@tonic-gate * Use is subject to license terms. 25*0Sstevel@tonic-gate */ 26*0Sstevel@tonic-gate /* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */ 27*0Sstevel@tonic-gate /* All Rights Reserved */ 28*0Sstevel@tonic-gate /* 29*0Sstevel@tonic-gate * Portions of this source code were derived from Berkeley 30*0Sstevel@tonic-gate * 4.3 BSD under license from the Regents of the University of 31*0Sstevel@tonic-gate * California. 32*0Sstevel@tonic-gate */ 33*0Sstevel@tonic-gate 34*0Sstevel@tonic-gate #ifndef _RPC_SVC_AUTH_H 35*0Sstevel@tonic-gate #define _RPC_SVC_AUTH_H 36*0Sstevel@tonic-gate 37*0Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 38*0Sstevel@tonic-gate 39*0Sstevel@tonic-gate /* 40*0Sstevel@tonic-gate * svc_auth.h, Service side of rpc authentication. 41*0Sstevel@tonic-gate */ 42*0Sstevel@tonic-gate #include <rpc/rpcsec_gss.h> 43*0Sstevel@tonic-gate #include <rpc/rpc_msg.h> 44*0Sstevel@tonic-gate 45*0Sstevel@tonic-gate #ifdef __cplusplus 46*0Sstevel@tonic-gate extern "C" { 47*0Sstevel@tonic-gate #endif 48*0Sstevel@tonic-gate 49*0Sstevel@tonic-gate /* 50*0Sstevel@tonic-gate * Server side authenticator 51*0Sstevel@tonic-gate */ 52*0Sstevel@tonic-gate #ifdef _KERNEL 53*0Sstevel@tonic-gate /* 54*0Sstevel@tonic-gate * Copy of GSS parameters, needed for MT operation 55*0Sstevel@tonic-gate */ 56*0Sstevel@tonic-gate typedef struct { 57*0Sstevel@tonic-gate bool_t established; 58*0Sstevel@tonic-gate rpc_gss_service_t service; 59*0Sstevel@tonic-gate uint_t qop_rcvd; 60*0Sstevel@tonic-gate void *context; 61*0Sstevel@tonic-gate uint_t seq_num; 62*0Sstevel@tonic-gate } svc_rpc_gss_parms_t; 63*0Sstevel@tonic-gate 64*0Sstevel@tonic-gate /* 65*0Sstevel@tonic-gate * sec_svc_control() commands 66*0Sstevel@tonic-gate */ 67*0Sstevel@tonic-gate #define RPC_SVC_SET_GSS_CALLBACK 1 /* set rpcsec_gss callback routine */ 68*0Sstevel@tonic-gate extern bool_t sec_svc_control(); 69*0Sstevel@tonic-gate 70*0Sstevel@tonic-gate /* 71*0Sstevel@tonic-gate * Interface to server-side authentication flavors, may change on 72*0Sstevel@tonic-gate * each request. 73*0Sstevel@tonic-gate */ 74*0Sstevel@tonic-gate typedef struct { 75*0Sstevel@tonic-gate struct svc_auth_ops { 76*0Sstevel@tonic-gate int (*svc_ah_wrap)(); 77*0Sstevel@tonic-gate int (*svc_ah_unwrap)(); 78*0Sstevel@tonic-gate } svc_ah_ops; 79*0Sstevel@tonic-gate caddr_t svc_ah_private; 80*0Sstevel@tonic-gate svc_rpc_gss_parms_t svc_gss_parms; 81*0Sstevel@tonic-gate rpc_gss_rawcred_t raw_cred; 82*0Sstevel@tonic-gate } SVCAUTH; 83*0Sstevel@tonic-gate 84*0Sstevel@tonic-gate #define SVCAUTH_GSSPARMS(auth) ((svc_rpc_gss_parms_t *)&(auth)->svc_gss_parms) 85*0Sstevel@tonic-gate 86*0Sstevel@tonic-gate /* 87*0Sstevel@tonic-gate * Auth flavors can now apply a transformation in addition to simple XDR 88*0Sstevel@tonic-gate * on the body of a call/response in ways that depend on the flavor being 89*0Sstevel@tonic-gate * used. These interfaces provide a generic interface between the 90*0Sstevel@tonic-gate * internal RPC frame and the auth flavor specific code to allow the 91*0Sstevel@tonic-gate * auth flavor to encode (WRAP) or decode (UNWRAP) the body. 92*0Sstevel@tonic-gate */ 93*0Sstevel@tonic-gate #define SVCAUTH_WRAP(auth, xdrs, xfunc, xwhere) \ 94*0Sstevel@tonic-gate ((*((auth)->svc_ah_ops.svc_ah_wrap))(auth, xdrs, xfunc, xwhere)) 95*0Sstevel@tonic-gate #define SVCAUTH_UNWRAP(auth, xdrs, xfunc, xwhere) \ 96*0Sstevel@tonic-gate ((*((auth)->svc_ah_ops.svc_ah_unwrap))(auth, xdrs, xfunc, xwhere)) 97*0Sstevel@tonic-gate 98*0Sstevel@tonic-gate /* 99*0Sstevel@tonic-gate * Server side authenticator 100*0Sstevel@tonic-gate */ 101*0Sstevel@tonic-gate #ifdef __STDC__ 102*0Sstevel@tonic-gate extern enum auth_stat sec_svc_msg(struct svc_req *, struct rpc_msg *, 103*0Sstevel@tonic-gate bool_t *); 104*0Sstevel@tonic-gate #else 105*0Sstevel@tonic-gate extern enum auth_stat sec_svc_msg(); 106*0Sstevel@tonic-gate #endif /* __STDC__ */ 107*0Sstevel@tonic-gate 108*0Sstevel@tonic-gate #else 109*0Sstevel@tonic-gate 110*0Sstevel@tonic-gate #ifdef __STDC__ 111*0Sstevel@tonic-gate extern enum auth_stat __gss_authenticate(struct svc_req *, struct rpc_msg *, 112*0Sstevel@tonic-gate bool_t *); 113*0Sstevel@tonic-gate extern enum auth_stat __authenticate(struct svc_req *, struct rpc_msg *); 114*0Sstevel@tonic-gate #else 115*0Sstevel@tonic-gate extern enum auth_stat __gss_authenticate(); 116*0Sstevel@tonic-gate extern enum auth_stat __authenticate(); 117*0Sstevel@tonic-gate #endif /* __STDC__ */ 118*0Sstevel@tonic-gate 119*0Sstevel@tonic-gate #endif /* _KERNEL */ 120*0Sstevel@tonic-gate 121*0Sstevel@tonic-gate #ifdef __cplusplus 122*0Sstevel@tonic-gate } 123*0Sstevel@tonic-gate #endif 124*0Sstevel@tonic-gate 125*0Sstevel@tonic-gate #endif /* _RPC_SVC_AUTH_H */ 126