Home | History | Annotate | Line # | Download | only in kadm5
      1 /*	$NetBSD: private.h,v 1.2 2017/01/28 21:31:49 christos Exp $	*/
      2 
      3 /*
      4  * Copyright (c) 1997-2000 Kungliga Tekniska Hgskolan
      5  * (Royal Institute of Technology, Stockholm, Sweden).
      6  * All rights reserved.
      7  *
      8  * Redistribution and use in source and binary forms, with or without
      9  * modification, are permitted provided that the following conditions
     10  * are met:
     11  *
     12  * 1. Redistributions of source code must retain the above copyright
     13  *    notice, this list of conditions and the following disclaimer.
     14  *
     15  * 2. Redistributions in binary form must reproduce the above copyright
     16  *    notice, this list of conditions and the following disclaimer in the
     17  *    documentation and/or other materials provided with the distribution.
     18  *
     19  * 3. Neither the name of the Institute nor the names of its contributors
     20  *    may be used to endorse or promote products derived from this software
     21  *    without specific prior written permission.
     22  *
     23  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
     24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
     27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     33  * SUCH DAMAGE.
     34  */
     35 
     36 /* Id */
     37 
     38 #ifndef __kadm5_privatex_h__
     39 #define __kadm5_privatex_h__
     40 
     41 #ifdef HAVE_SYS_UN_H
     42 #include <sys/un.h>
     43 #endif
     44 
     45 struct kadm_func {
     46     kadm5_ret_t (*chpass_principal) (void *, krb5_principal, int,
     47 				     int, krb5_key_salt_tuple*, const char*);
     48     kadm5_ret_t (*create_principal) (void*, kadm5_principal_ent_t, uint32_t,
     49 				     int, krb5_key_salt_tuple *,
     50 				     const char*);
     51     kadm5_ret_t (*delete_principal) (void*, krb5_principal);
     52     kadm5_ret_t (*destroy) (void*);
     53     kadm5_ret_t (*flush) (void*);
     54     kadm5_ret_t (*get_principal) (void*, krb5_principal,
     55 				  kadm5_principal_ent_t, uint32_t);
     56     kadm5_ret_t (*get_principals) (void*, const char*, char***, int*);
     57     kadm5_ret_t (*get_privs) (void*, uint32_t*);
     58     kadm5_ret_t (*modify_principal) (void*, kadm5_principal_ent_t, uint32_t);
     59     kadm5_ret_t (*randkey_principal) (void*, krb5_principal, krb5_boolean, int,
     60 				      krb5_key_salt_tuple*, krb5_keyblock**,
     61 				      int*);
     62     kadm5_ret_t (*rename_principal) (void*, krb5_principal, krb5_principal);
     63     kadm5_ret_t (*chpass_principal_with_key) (void *, krb5_principal, int,
     64 					      int, krb5_key_data *);
     65     kadm5_ret_t (*lock) (void *);
     66     kadm5_ret_t (*unlock) (void *);
     67     kadm5_ret_t (*setkey_principal_3) (void *, krb5_principal, krb5_boolean,
     68 				       int, krb5_key_salt_tuple *,
     69 				       krb5_keyblock *, int);
     70 };
     71 
     72 /* XXX should be integrated */
     73 typedef struct kadm5_common_context {
     74     krb5_context context;
     75     krb5_boolean my_context;
     76     struct kadm_func funcs;
     77     void *data;
     78 } kadm5_common_context;
     79 
     80 typedef struct kadm5_log_peer {
     81     int fd;
     82     char *name;
     83     krb5_auth_context ac;
     84     struct kadm5_log_peer *next;
     85 } kadm5_log_peer;
     86 
     87 typedef struct kadm5_log_context {
     88     char *log_file;
     89     int log_fd;
     90     int read_only;
     91     int lock_mode;
     92     uint32_t version;
     93     time_t last_time;
     94 #ifndef NO_UNIX_SOCKETS
     95     struct sockaddr_un socket_name;
     96 #else
     97     struct addrinfo *socket_info;
     98 #endif
     99     krb5_socket_t socket_fd;
    100 } kadm5_log_context;
    101 
    102 typedef struct kadm5_server_context {
    103     krb5_context context;
    104     krb5_boolean my_context;
    105     struct kadm_func funcs;
    106     /* */
    107     kadm5_config_params config;
    108     HDB *db;
    109     int keep_open;
    110     krb5_principal caller;
    111     unsigned acl_flags;
    112     kadm5_log_context log_context;
    113 } kadm5_server_context;
    114 
    115 typedef struct kadm5_client_context {
    116     krb5_context context;
    117     krb5_boolean my_context;
    118     struct kadm_func funcs;
    119     /* */
    120     krb5_auth_context ac;
    121     char *realm;
    122     char *admin_server;
    123     int kadmind_port;
    124     krb5_socket_t sock;
    125     char *client_name;
    126     char *service_name;
    127     krb5_prompter_fct prompter;
    128     const char *keytab;
    129     krb5_ccache ccache;
    130     kadm5_config_params *realm_params;
    131 } kadm5_client_context;
    132 
    133 typedef struct kadm5_ad_context {
    134     krb5_context context;
    135     krb5_boolean my_context;
    136     struct kadm_func funcs;
    137     /* */
    138     kadm5_config_params config;
    139     krb5_principal caller;
    140     krb5_ccache ccache;
    141     char *client_name;
    142     char *realm;
    143     void *ldap_conn;
    144     char *base_dn;
    145 } kadm5_ad_context;
    146 
    147 /*
    148  * This enum is used in the iprop log file and on the wire in the iprop
    149  * protocol.  DO NOT CHANGE, except to add new op types at the end, and
    150  * look for places in lib/kadm5/log.c to update.
    151  */
    152 enum kadm_ops {
    153     kadm_get,
    154     kadm_delete,
    155     kadm_create,
    156     kadm_rename,
    157     kadm_chpass,
    158     kadm_modify,
    159     kadm_randkey,
    160     kadm_get_privs,
    161     kadm_get_princs,
    162     kadm_chpass_with_key,
    163     kadm_nop,
    164     kadm_first = kadm_get,
    165     kadm_last = kadm_nop
    166 };
    167 
    168 /* FIXME nop types are currently not implemented */
    169 enum kadm_nop_type {
    170     kadm_nop_plain, /* plain nop, not relevance except as uberblock */
    171     kadm_nop_trunc, /* indicates that the master truncated the log  */
    172     kadm_nop_close  /* indicates that the master closed this log    */
    173 };
    174 
    175 enum kadm_iter_opts {
    176     kadm_forward        = 1,
    177     kadm_backward       = 2,
    178     kadm_confirmed      = 4,
    179     kadm_unconfirmed    = 8
    180 };
    181 
    182 enum kadm_recover_mode {
    183     kadm_recover_commit,
    184     kadm_recover_replay
    185 };
    186 
    187 #define KADMIN_APPL_VERSION "KADM0.1"
    188 #define KADMIN_OLD_APPL_VERSION "KADM0.0"
    189 
    190 #include "kadm5-private.h"
    191 
    192 #endif /* __kadm5_privatex_h__ */
    193