1*0Sstevel@tonic-gate /* 2*0Sstevel@tonic-gate * CDDL HEADER START 3*0Sstevel@tonic-gate * 4*0Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*0Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only 6*0Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance 7*0Sstevel@tonic-gate * with the License. 8*0Sstevel@tonic-gate * 9*0Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10*0Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 11*0Sstevel@tonic-gate * See the License for the specific language governing permissions 12*0Sstevel@tonic-gate * and limitations under the License. 13*0Sstevel@tonic-gate * 14*0Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 15*0Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16*0Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 17*0Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 18*0Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 19*0Sstevel@tonic-gate * 20*0Sstevel@tonic-gate * CDDL HEADER END 21*0Sstevel@tonic-gate */ 22*0Sstevel@tonic-gate /* 23*0Sstevel@tonic-gate * Copyright 2005 Sun Microsystems, Inc. All rights reserved. 24*0Sstevel@tonic-gate * Use is subject to license terms. 25*0Sstevel@tonic-gate */ 26*0Sstevel@tonic-gate /* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */ 27*0Sstevel@tonic-gate /* All Rights Reserved */ 28*0Sstevel@tonic-gate /* 29*0Sstevel@tonic-gate * Portions of this source code were derived from Berkeley 30*0Sstevel@tonic-gate * 4.3 BSD under license from the Regents of the University of 31*0Sstevel@tonic-gate * California. 32*0Sstevel@tonic-gate */ 33*0Sstevel@tonic-gate 34*0Sstevel@tonic-gate #ifndef _RPC_AUTH_DES_H 35*0Sstevel@tonic-gate #define _RPC_AUTH_DES_H 36*0Sstevel@tonic-gate 37*0Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 38*0Sstevel@tonic-gate 39*0Sstevel@tonic-gate /* 40*0Sstevel@tonic-gate * auth_des.h, Protocol for DES style authentication for RPC 41*0Sstevel@tonic-gate * 42*0Sstevel@tonic-gate */ 43*0Sstevel@tonic-gate 44*0Sstevel@tonic-gate #include <rpc/auth.h> 45*0Sstevel@tonic-gate #ifdef _KERNEL 46*0Sstevel@tonic-gate #include <rpc/svc.h> 47*0Sstevel@tonic-gate #endif /* _KERNEL */ 48*0Sstevel@tonic-gate 49*0Sstevel@tonic-gate #ifdef __cplusplus 50*0Sstevel@tonic-gate extern "C" { 51*0Sstevel@tonic-gate #endif 52*0Sstevel@tonic-gate 53*0Sstevel@tonic-gate 54*0Sstevel@tonic-gate /* 55*0Sstevel@tonic-gate * There are two kinds of "names": fullnames and nicknames 56*0Sstevel@tonic-gate */ 57*0Sstevel@tonic-gate enum authdes_namekind { 58*0Sstevel@tonic-gate ADN_FULLNAME, 59*0Sstevel@tonic-gate ADN_NICKNAME 60*0Sstevel@tonic-gate }; 61*0Sstevel@tonic-gate 62*0Sstevel@tonic-gate /* 63*0Sstevel@tonic-gate * A fullname contains the network name of the client, 64*0Sstevel@tonic-gate * a conversation key and the window 65*0Sstevel@tonic-gate */ 66*0Sstevel@tonic-gate struct authdes_fullname { 67*0Sstevel@tonic-gate char *name; /* network name of client, up to MAXNETNAMELEN */ 68*0Sstevel@tonic-gate des_block key; /* conversation key */ 69*0Sstevel@tonic-gate uint32_t window; /* associated window */ 70*0Sstevel@tonic-gate }; 71*0Sstevel@tonic-gate 72*0Sstevel@tonic-gate 73*0Sstevel@tonic-gate /* 74*0Sstevel@tonic-gate * A credential 75*0Sstevel@tonic-gate */ 76*0Sstevel@tonic-gate struct authdes_cred { 77*0Sstevel@tonic-gate enum authdes_namekind adc_namekind; 78*0Sstevel@tonic-gate struct authdes_fullname adc_fullname; 79*0Sstevel@tonic-gate uint32_t adc_nickname; 80*0Sstevel@tonic-gate }; 81*0Sstevel@tonic-gate 82*0Sstevel@tonic-gate /* 83*0Sstevel@tonic-gate * A des authentication verifier 84*0Sstevel@tonic-gate */ 85*0Sstevel@tonic-gate struct authdes_verf { 86*0Sstevel@tonic-gate union { 87*0Sstevel@tonic-gate struct timeval adv_ctime; /* clear time */ 88*0Sstevel@tonic-gate des_block adv_xtime; /* crypt time */ 89*0Sstevel@tonic-gate } adv_time_u; 90*0Sstevel@tonic-gate uint32_t adv_int_u; 91*0Sstevel@tonic-gate }; 92*0Sstevel@tonic-gate 93*0Sstevel@tonic-gate /* 94*0Sstevel@tonic-gate * des authentication verifier: client variety 95*0Sstevel@tonic-gate * 96*0Sstevel@tonic-gate * adv_timestamp is the current time. 97*0Sstevel@tonic-gate * adv_winverf is the credential window + 1. 98*0Sstevel@tonic-gate * Both are encrypted using the conversation key. 99*0Sstevel@tonic-gate */ 100*0Sstevel@tonic-gate #define adv_timestamp adv_time_u.adv_ctime 101*0Sstevel@tonic-gate #define adv_xtimestamp adv_time_u.adv_xtime 102*0Sstevel@tonic-gate #define adv_winverf adv_int_u 103*0Sstevel@tonic-gate 104*0Sstevel@tonic-gate /* 105*0Sstevel@tonic-gate * des authentication verifier: server variety 106*0Sstevel@tonic-gate * 107*0Sstevel@tonic-gate * adv_timeverf is the client's timestamp + client's window 108*0Sstevel@tonic-gate * adv_nickname is the server's nickname for the client. 109*0Sstevel@tonic-gate * adv_timeverf is encrypted using the conversation key. 110*0Sstevel@tonic-gate */ 111*0Sstevel@tonic-gate #define adv_timeverf adv_time_u.adv_ctime 112*0Sstevel@tonic-gate #define adv_xtimeverf adv_time_u.adv_xtime 113*0Sstevel@tonic-gate #define adv_nickname adv_int_u 114*0Sstevel@tonic-gate 115*0Sstevel@tonic-gate /* 116*0Sstevel@tonic-gate * Map a des credential into a unix cred. 117*0Sstevel@tonic-gate * 118*0Sstevel@tonic-gate * authdes_getucred(adc, uid, gid, grouplen, groups) 119*0Sstevel@tonic-gate * struct authdes_cred *adc; 120*0Sstevel@tonic-gate * uid_t *uid; 121*0Sstevel@tonic-gate * gid_t *gid; 122*0Sstevel@tonic-gate * short *grouplen; 123*0Sstevel@tonic-gate * gid_t *groups; 124*0Sstevel@tonic-gate * 125*0Sstevel@tonic-gate */ 126*0Sstevel@tonic-gate 127*0Sstevel@tonic-gate #ifdef _KERNEL 128*0Sstevel@tonic-gate extern int kauthdes_getucred(const struct authdes_cred *, cred_t *); 129*0Sstevel@tonic-gate #else 130*0Sstevel@tonic-gate #ifdef __STDC__ 131*0Sstevel@tonic-gate extern int authdes_getucred(const struct authdes_cred *, 132*0Sstevel@tonic-gate uid_t *, gid_t *, short *, gid_t *); 133*0Sstevel@tonic-gate #else 134*0Sstevel@tonic-gate extern int authdes_getucred(); 135*0Sstevel@tonic-gate #endif 136*0Sstevel@tonic-gate #endif 137*0Sstevel@tonic-gate 138*0Sstevel@tonic-gate #ifndef _KERNEL 139*0Sstevel@tonic-gate #ifdef __STDC__ 140*0Sstevel@tonic-gate extern int getpublickey(const char *, char *); 141*0Sstevel@tonic-gate extern int getsecretkey(const char *, char *, const char *); 142*0Sstevel@tonic-gate #else 143*0Sstevel@tonic-gate extern int getpublickey(); 144*0Sstevel@tonic-gate extern int getsecretkey(); 145*0Sstevel@tonic-gate #endif 146*0Sstevel@tonic-gate #endif 147*0Sstevel@tonic-gate 148*0Sstevel@tonic-gate #ifdef _KERNEL 149*0Sstevel@tonic-gate 150*0Sstevel@tonic-gate #ifdef __STDC__ 151*0Sstevel@tonic-gate extern int authdes_create(char *, uint_t, struct netbuf *, 152*0Sstevel@tonic-gate struct knetconfig *, des_block *, int, AUTH **); 153*0Sstevel@tonic-gate extern bool_t xdr_authdes_cred(XDR *, struct authdes_cred *); 154*0Sstevel@tonic-gate extern bool_t xdr_authdes_verf(XDR *, struct authdes_verf *); 155*0Sstevel@tonic-gate extern int rtime(struct knetconfig *, struct netbuf *, int, 156*0Sstevel@tonic-gate struct timeval *, struct timeval *); 157*0Sstevel@tonic-gate extern enum clnt_stat kgetnetname(char *); 158*0Sstevel@tonic-gate extern enum auth_stat _svcauth_des(struct svc_req *, struct rpc_msg *); 159*0Sstevel@tonic-gate #else 160*0Sstevel@tonic-gate extern int authdes_create(); 161*0Sstevel@tonic-gate extern bool_t xdr_authdes_cred(); 162*0Sstevel@tonic-gate extern bool_t xdr_authdes_verf(); 163*0Sstevel@tonic-gate extern int rtime(); 164*0Sstevel@tonic-gate extern enum clnt_stat kgetnetname(); 165*0Sstevel@tonic-gate extern enum auth_stat _svcauth_des(); 166*0Sstevel@tonic-gate #endif 167*0Sstevel@tonic-gate 168*0Sstevel@tonic-gate extern kmutex_t authdes_ops_lock; 169*0Sstevel@tonic-gate 170*0Sstevel@tonic-gate #endif 171*0Sstevel@tonic-gate 172*0Sstevel@tonic-gate #ifdef __cplusplus 173*0Sstevel@tonic-gate } 174*0Sstevel@tonic-gate #endif 175*0Sstevel@tonic-gate 176*0Sstevel@tonic-gate #endif /* _RPC_AUTH_DES_H */ 177