| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* | 
 | 2 |  * linux/include/linux/auth_gss.h | 
 | 3 |  * | 
 | 4 |  * Declarations for RPCSEC_GSS | 
 | 5 |  * | 
 | 6 |  * Dug Song <dugsong@monkey.org> | 
 | 7 |  * Andy Adamson <andros@umich.edu> | 
 | 8 |  * Bruce Fields <bfields@umich.edu> | 
 | 9 |  * Copyright (c) 2000 The Regents of the University of Michigan | 
 | 10 |  * | 
 | 11 |  * $Id$ | 
 | 12 |  */ | 
 | 13 |  | 
 | 14 | #ifndef _LINUX_SUNRPC_AUTH_GSS_H | 
 | 15 | #define _LINUX_SUNRPC_AUTH_GSS_H | 
 | 16 |  | 
 | 17 | #ifdef __KERNEL__ | 
 | 18 | #include <linux/sunrpc/auth.h> | 
 | 19 | #include <linux/sunrpc/svc.h> | 
 | 20 | #include <linux/sunrpc/gss_api.h> | 
 | 21 |  | 
 | 22 | #define RPC_GSS_VERSION		1 | 
 | 23 |  | 
 | 24 | #define MAXSEQ 0x80000000 /* maximum legal sequence number, from rfc 2203 */ | 
 | 25 |  | 
 | 26 | enum rpc_gss_proc { | 
 | 27 | 	RPC_GSS_PROC_DATA = 0, | 
 | 28 | 	RPC_GSS_PROC_INIT = 1, | 
 | 29 | 	RPC_GSS_PROC_CONTINUE_INIT = 2, | 
 | 30 | 	RPC_GSS_PROC_DESTROY = 3 | 
 | 31 | }; | 
 | 32 |  | 
 | 33 | enum rpc_gss_svc { | 
 | 34 | 	RPC_GSS_SVC_NONE = 1, | 
 | 35 | 	RPC_GSS_SVC_INTEGRITY = 2, | 
 | 36 | 	RPC_GSS_SVC_PRIVACY = 3 | 
 | 37 | }; | 
 | 38 |  | 
 | 39 | /* on-the-wire gss cred: */ | 
 | 40 | struct rpc_gss_wire_cred { | 
 | 41 | 	u32			gc_v;		/* version */ | 
 | 42 | 	u32			gc_proc;	/* control procedure */ | 
 | 43 | 	u32			gc_seq;		/* sequence number */ | 
 | 44 | 	u32			gc_svc;		/* service */ | 
 | 45 | 	struct xdr_netobj	gc_ctx;		/* context handle */ | 
 | 46 | }; | 
 | 47 |  | 
 | 48 | /* on-the-wire gss verifier: */ | 
 | 49 | struct rpc_gss_wire_verf { | 
 | 50 | 	u32			gv_flavor; | 
 | 51 | 	struct xdr_netobj	gv_verf; | 
 | 52 | }; | 
 | 53 |  | 
 | 54 | /* return from gss NULL PROC init sec context */ | 
 | 55 | struct rpc_gss_init_res { | 
 | 56 | 	struct xdr_netobj	gr_ctx;		/* context handle */ | 
 | 57 | 	u32			gr_major;	/* major status */ | 
 | 58 | 	u32			gr_minor;	/* minor status */ | 
 | 59 | 	u32			gr_win;		/* sequence window */ | 
 | 60 | 	struct xdr_netobj	gr_token;	/* token */ | 
 | 61 | }; | 
 | 62 |  | 
 | 63 | /* The gss_cl_ctx struct holds all the information the rpcsec_gss client | 
 | 64 |  * code needs to know about a single security context.  In particular, | 
 | 65 |  * gc_gss_ctx is the context handle that is used to do gss-api calls, while | 
 | 66 |  * gc_wire_ctx is the context handle that is used to identify the context on | 
 | 67 |  * the wire when communicating with a server. */ | 
 | 68 |  | 
 | 69 | struct gss_cl_ctx { | 
 | 70 | 	atomic_t		count; | 
 | 71 | 	enum rpc_gss_proc	gc_proc; | 
 | 72 | 	u32			gc_seq; | 
 | 73 | 	spinlock_t		gc_seq_lock; | 
 | 74 | 	struct gss_ctx		*gc_gss_ctx; | 
 | 75 | 	struct xdr_netobj	gc_wire_ctx; | 
 | 76 | 	u32			gc_win; | 
 | 77 | 	unsigned long		gc_expiry; | 
 | 78 | }; | 
 | 79 |  | 
 | 80 | struct gss_upcall_msg; | 
 | 81 | struct gss_cred { | 
 | 82 | 	struct rpc_cred		gc_base; | 
 | 83 | 	enum rpc_gss_svc	gc_service; | 
 | 84 | 	struct gss_cl_ctx	*gc_ctx; | 
 | 85 | 	struct gss_upcall_msg	*gc_upcall; | 
 | 86 | }; | 
 | 87 |  | 
 | 88 | #define gc_uid			gc_base.cr_uid | 
 | 89 | #define gc_count		gc_base.cr_count | 
 | 90 | #define gc_flags		gc_base.cr_flags | 
 | 91 | #define gc_expire		gc_base.cr_expire | 
 | 92 |  | 
 | 93 | void print_hexl(u32 *p, u_int length, u_int offset); | 
 | 94 |  | 
 | 95 | #endif /* __KERNEL__ */ | 
 | 96 | #endif /* _LINUX_SUNRPC_AUTH_GSS_H */ | 
 | 97 |  |