Home | History | Annotate | Download | only in sunrpc
      1 /*
      2  * linux/include/linux/auth_gss.h
      3  *
      4  * Declarations for RPCSEC_GSS
      5  *
      6  * Dug Song <dugsong (at) monkey.org>
      7  * Andy Adamson <andros (at) umich.edu>
      8  * Bruce Fields <bfields (at) umich.edu>
      9  * Copyright (c) 2000 The Regents of the University of Michigan
     10  *
     11  * $Id$
     12  */
     13 
     14 #ifndef _LINUX_SUNRPC_AUTH_GSS_H
     15 #define _LINUX_SUNRPC_AUTH_GSS_H
     16 
     17 #ifdef __KERNEL__
     18 #include <linux/sunrpc/auth.h>
     19 #include <linux/sunrpc/svc.h>
     20 #include <linux/sunrpc/gss_api.h>
     21 
     22 #define RPC_GSS_VERSION		1
     23 
     24 #define MAXSEQ 0x80000000 /* maximum legal sequence number, from rfc 2203 */
     25 
     26 enum rpc_gss_proc {
     27 	RPC_GSS_PROC_DATA = 0,
     28 	RPC_GSS_PROC_INIT = 1,
     29 	RPC_GSS_PROC_CONTINUE_INIT = 2,
     30 	RPC_GSS_PROC_DESTROY = 3
     31 };
     32 
     33 enum rpc_gss_svc {
     34 	RPC_GSS_SVC_NONE = 1,
     35 	RPC_GSS_SVC_INTEGRITY = 2,
     36 	RPC_GSS_SVC_PRIVACY = 3
     37 };
     38 
     39 /* on-the-wire gss cred: */
     40 struct rpc_gss_wire_cred {
     41 	u32			gc_v;		/* version */
     42 	u32			gc_proc;	/* control procedure */
     43 	u32			gc_seq;		/* sequence number */
     44 	u32			gc_svc;		/* service */
     45 	struct xdr_netobj	gc_ctx;		/* context handle */
     46 };
     47 
     48 /* on-the-wire gss verifier: */
     49 struct rpc_gss_wire_verf {
     50 	u32			gv_flavor;
     51 	struct xdr_netobj	gv_verf;
     52 };
     53 
     54 /* return from gss NULL PROC init sec context */
     55 struct rpc_gss_init_res {
     56 	struct xdr_netobj	gr_ctx;		/* context handle */
     57 	u32			gr_major;	/* major status */
     58 	u32			gr_minor;	/* minor status */
     59 	u32			gr_win;		/* sequence window */
     60 	struct xdr_netobj	gr_token;	/* token */
     61 };
     62 
     63 /* The gss_cl_ctx struct holds all the information the rpcsec_gss client
     64  * code needs to know about a single security context.  In particular,
     65  * gc_gss_ctx is the context handle that is used to do gss-api calls, while
     66  * gc_wire_ctx is the context handle that is used to identify the context on
     67  * the wire when communicating with a server. */
     68 
     69 struct gss_cl_ctx {
     70 	atomic_t		count;
     71 	enum rpc_gss_proc	gc_proc;
     72 	u32			gc_seq;
     73 	spinlock_t		gc_seq_lock;
     74 	struct gss_ctx		*gc_gss_ctx;
     75 	struct xdr_netobj	gc_wire_ctx;
     76 	u32			gc_win;
     77 	unsigned long		gc_expiry;
     78 };
     79 
     80 struct gss_upcall_msg;
     81 struct gss_cred {
     82 	struct rpc_cred		gc_base;
     83 	enum rpc_gss_svc	gc_service;
     84 	struct gss_cl_ctx	*gc_ctx;
     85 	struct gss_upcall_msg	*gc_upcall;
     86 };
     87 
     88 #define gc_uid			gc_base.cr_uid
     89 #define gc_count		gc_base.cr_count
     90 #define gc_flags		gc_base.cr_flags
     91 #define gc_expire		gc_base.cr_expire
     92 
     93 void print_hexl(u32 *p, u_int length, u_int offset);
     94 
     95 #endif /* __KERNEL__ */
     96 #endif /* _LINUX_SUNRPC_AUTH_GSS_H */
     97 
     98