xref: /illumos-gate/usr/src/uts/common/gssapi/gssapi.h (revision 7c478bd9)
1 /*
2  * Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
3  * Use is subject to license terms.
4  */
5 
6 /*
7  * Copyright 1993 by OpenVision Technologies, Inc.
8  *
9  * Permission to use, copy, modify, distribute, and sell this software
10  * and its documentation for any purpose is hereby granted without fee,
11  * provided that the above copyright notice appears in all copies and
12  * that both that copyright notice and this permission notice appear in
13  * supporting documentation, and that the name of OpenVision not be used
14  * in advertising or publicity pertaining to distribution of the software
15  * without specific, written prior permission. OpenVision makes no
16  * representations about the suitability of this software for any
17  * purpose.  It is provided "as is" without express or implied warranty.
18  *
19  * OPENVISION DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
20  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
21  * EVENT SHALL OPENVISION BE LIABLE FOR ANY SPECIAL, INDIRECT OR
22  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
23  * USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
24  * OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
25  * PERFORMANCE OF THIS SOFTWARE.
26  */
27 
28 #ifndef	_GSSAPI_H_
29 #define	_GSSAPI_H_
30 
31 #pragma ident	"%Z%%M%	%I%	%E% SMI"
32 
33 #ifdef	__cplusplus
34 extern "C" {
35 #endif
36 
37 
38 /*
39  * First, include sys/types.h to get size_t defined.
40  */
41 #include <sys/types.h>
42 
43 /*
44  * If the platform supports the xom.h header file, it should be
45  * included here.
46  */
47 #ifdef HAVE_XOM_H
48 #include <xom.h>
49 #endif
50 
51 /*
52  * Now define the three implementation-dependent types.
53  */
54 struct gss_ctx_id;
55 struct gss_cred_id;
56 struct gss_name;
57 
58 typedef struct gss_ctx_id  *gss_ctx_id_t;
59 typedef struct gss_cred_id *gss_cred_id_t;
60 typedef struct gss_name *gss_name_t;
61 
62 /*
63  * The following type must be defined as the smallest natural
64  * unsigned integer supported by the platform that has at least
65  * 32 bits of precision.
66  */
67 typedef unsigned int gss_uint32;
68 typedef int gss_int32;
69 
70 
71 #ifdef OM_STRING
72 /*
73  * We have included the xom.h header file.  Verify that OM_uint32
74  * is defined correctly.
75  */
76 
77 #if sizeof (gss_uint32) != sizeof (OM_uint32)
78 #error Incompatible definition of OM_uint32 from xom.h
79 #endif
80 
81 typedef OM_object_identifier gss_OID_desc, *gss_OID;
82 
83 #else
84 
85 
86 
87 /*
88  * We can't use X/Open definitions, so roll our own.
89  */
90 
91 typedef gss_uint32 OM_uint32;
92 
93 typedef struct gss_OID_desc_struct {
94 	OM_uint32 length;
95 	void*elements;
96 } gss_OID_desc, *gss_OID;
97 
98 #endif
99 
100 typedef struct gss_OID_set_desc_struct	{
101 	size_t  count;
102 	gss_OID elements;
103 } gss_OID_set_desc, *gss_OID_set;
104 
105 #ifdef	_SYSCALL32
106 typedef struct gss_OID_desc_struct32 {
107 	OM_uint32 length;
108 	caddr32_t elements;
109 } gss_OID_desc32, *gss_OID32;
110 #endif	/* _SYSCALL32 */
111 
112 typedef struct gss_buffer_desc_struct {
113 	size_t length;
114 	void *value;
115 } gss_buffer_desc, *gss_buffer_t;
116 
117 typedef struct gss_channel_bindings_struct {
118 	OM_uint32 initiator_addrtype;
119 	gss_buffer_desc initiator_address;
120 	OM_uint32 acceptor_addrtype;
121 	gss_buffer_desc acceptor_address;
122 	gss_buffer_desc application_data;
123 } *gss_channel_bindings_t;
124 
125 /*
126  * For now, define a QOP-type as an OM_uint32
127  */
128 typedef	OM_uint32 gss_qop_t;
129 typedef	int gss_cred_usage_t;
130 
131 /*
132  * Flag bits for context-level services.
133  */
134 #define	GSS_C_DELEG_FLAG 1
135 #define	GSS_C_MUTUAL_FLAG 2
136 #define	GSS_C_REPLAY_FLAG 4
137 #define	GSS_C_SEQUENCE_FLAG 8
138 #define	GSS_C_CONF_FLAG 16
139 #define	GSS_C_INTEG_FLAG 32
140 #define	GSS_C_ANON_FLAG 64
141 #define	GSS_C_PROT_READY_FLAG 128
142 #define	GSS_C_TRANS_FLAG 256
143 
144 /*
145  * Credential usage options
146  */
147 #define	GSS_C_BOTH 0
148 #define	GSS_C_INITIATE 1
149 #define	GSS_C_ACCEPT 2
150 
151 /*
152  * Status code types for gss_display_status
153  */
154 #define	GSS_C_GSS_CODE 1
155 #define	GSS_C_MECH_CODE 2
156 
157 /*
158  * The constant definitions for channel-bindings address families
159  */
160 #define	GSS_C_AF_UNSPEC		0
161 #define	GSS_C_AF_LOCAL		1
162 #define	GSS_C_AF_INET		2
163 #define	GSS_C_AF_IMPLINK	3
164 #define	GSS_C_AF_PUP		4
165 #define	GSS_C_AF_CHAOS		5
166 #define	GSS_C_AF_NS		6
167 #define	GSS_C_AF_NBS		7
168 #define	GSS_C_AF_ECMA		8
169 #define	GSS_C_AF_DATAKIT	9
170 #define	GSS_C_AF_CCITT		10
171 #define	GSS_C_AF_SNA		11
172 #define	GSS_C_AF_DECnet		12
173 #define	GSS_C_AF_DLI		13
174 #define	GSS_C_AF_LAT		14
175 #define	GSS_C_AF_HYLINK		15
176 #define	GSS_C_AF_APPLETALK	16
177 #define	GSS_C_AF_BSC		17
178 #define	GSS_C_AF_DSS		18
179 #define	GSS_C_AF_OSI		19
180 #define	GSS_C_AF_X25		21
181 
182 #define	GSS_C_AF_NULLADDR	255
183 
184 /*
185  * Various Null values
186  */
187 #define	GSS_C_NO_NAME ((gss_name_t) 0)
188 #define	GSS_C_NO_BUFFER ((gss_buffer_t) 0)
189 #define	GSS_C_NO_OID ((gss_OID) 0)
190 #define	GSS_C_NO_OID_SET ((gss_OID_set) 0)
191 #define	GSS_C_NO_CONTEXT ((gss_ctx_id_t) 0)
192 #define	GSS_C_NO_CREDENTIAL ((gss_cred_id_t) 0)
193 #define	GSS_C_NO_CHANNEL_BINDINGS ((gss_channel_bindings_t) 0)
194 #define	GSS_C_EMPTY_BUFFER {0, NULL}
195 
196 /*
197  * Some alternate names for a couple of the above
198  * values.  These are defined for V1 compatibility.
199  */
200 #define	GSS_C_NULL_OID		GSS_C_NO_OID
201 #define	GSS_C_NULL_OID_SET	GSS_C_NO_OID_SET
202 
203 /*
204  * Define the default Quality of Protection for per-message
205  * services.  Note that an implementation that offers multiple
206  * levels of QOP may define GSS_C_QOP_DEFAULT to be either zero
207  * (as done here) to mean "default protection", or to a specific
208  * explicit QOP value.  However, a value of 0 should always be
209  * interpreted by a GSSAPI implementation as a request for the
210  * default protection level.
211  */
212 #define	GSS_C_QOP_DEFAULT 0
213 
214 /*
215  * Expiration time of 2^32-1 seconds means infinite lifetime for a
216  * credential or security context
217  */
218 #define	GSS_C_INDEFINITE ((OM_uint32) 0xfffffffful)
219 
220 /*
221  * The implementation must reserve static storage for a
222  * gss_OID_desc object containing the value
223  * {10, (void *)"\x2a\x86\x48\x86\xf7\x12"
224  *  "\x01\x02\x01\x01"},
225  * corresponding to an object-identifier value of
226  * {iso(1) member-body(2) United States(840) mit(113554)
227  *  infosys(1) gssapi(2) generic(1) user_name(1)}.  The constant
228  * GSS_C_NT_USER_NAME should be initialized to point
229  * to that gss_OID_desc.
230  */
231 extern const gss_OID GSS_C_NT_USER_NAME;
232 
233 /*
234  * The implementation must reserve static storage for a
235  * gss_OID_desc object containing the value
236  * {10, (void *)"\x2a\x86\x48\x86\xf7\x12"
237  *  "\x01\x02\x01\x02"},
238  * corresponding to an object-identifier value of
239  * {iso(1) member-body(2) United States(840) mit(113554)
240  *  infosys(1) gssapi(2) generic(1) machine_uid_name(2)}.
241  * The constant GSS_C_NT_MACHINE_UID_NAME should be
242  * initialized to point to that gss_OID_desc.
243  */
244 extern const gss_OID GSS_C_NT_MACHINE_UID_NAME;
245 
246 /*
247  * The implementation must reserve static storage for a
248  * gss_OID_desc object containing the value
249  * {10, (void *)"\x2a\x86\x48\x86\xf7\x12"
250  *  "\x01\x02\x01\x03"},
251  * corresponding to an object-identifier value of
252  * {iso(1) member-body(2) United States(840) mit(113554)
253  *  infosys(1) gssapi(2) generic(1) string_uid_name(3)}.
254  * The constant GSS_C_NT_STRING_UID_NAME should be
255  * initialized to point to that gss_OID_desc.
256  */
257 extern const gss_OID GSS_C_NT_STRING_UID_NAME;
258 
259 /*
260  * The implementation must reserve static storage for a
261  * gss_OID_desc object containing the value
262  * {6, (void *)"\x2b\x06\x01\x05\x06\x02"},
263  * corresponding to an object-identifier value of
264  * {1(iso), 3(org), 6(dod), 1(internet), 5(security),
265  * 6(nametypes), 2(gss-host-based-services)}.  The constant
266  * GSS_C_NT_HOSTBASED_SERVICE should be initialized to point
267  * to that gss_OID_desc.
268  */
269 extern const gss_OID GSS_C_NT_HOSTBASED_SERVICE;
270 
271 /*
272  * The implementation must reserve static storage for a
273  * gss_OID_desc object containing the value
274  * {6, (void *)"\x2b\x06\01\x05\x06\x03"},
275  * corresponding to an object identifier value of
276  * {1(iso), 3(org), 6(dod), 1(internet), 5(security),
277  * 6(nametypes), 3(gss-anonymous-name)}.  The constant
278  * and GSS_C_NT_ANONYMOUS should be initialized to point
279  * to that gss_OID_desc.
280  */
281 extern const gss_OID GSS_C_NT_ANONYMOUS;
282 
283 /*
284  * The implementation must reserve static storage for a
285  * gss_OID_desc object containing the value
286  * {6, (void *)"\x2b\x06\x01\x05\x06\x04"},
287  * corresponding to an object-identifier value of
288  * {1(iso), 3(org), 6(dod), 1(internet), 5(security),
289  * 6(nametypes), 4(gss-api-exported-name)}.  The constant
290  * GSS_C_NT_EXPORT_NAME should be initialized to point
291  * to that gss_OID_desc.
292  */
293 extern const gss_OID GSS_C_NT_EXPORT_NAME;
294 
295 
296 /* Major status codes */
297 
298 #define	GSS_S_COMPLETE 0
299 
300 /*
301  * Some "helper" definitions to make the status code macros obvious.
302  */
303 #define	GSS_C_CALLING_ERROR_OFFSET 24
304 #define	GSS_C_ROUTINE_ERROR_OFFSET 16
305 #define	GSS_C_SUPPLEMENTARY_OFFSET 0
306 #define	GSS_C_CALLING_ERROR_MASK ((OM_uint32) 0377ul)
307 #define	GSS_C_ROUTINE_ERROR_MASK ((OM_uint32) 0377ul)
308 #define	GSS_C_SUPPLEMENTARY_MASK ((OM_uint32) 0177777ul)
309 
310 /*
311  * The macros that test status codes for error conditions.
312  * Note that the GSS_ERROR() macro has changed slightly from
313  * the V1 GSSAPI so that it now evaluates its argument
314  * only once.
315  */
316 #define	GSS_CALLING_ERROR(x) \
317 	((x) & (GSS_C_CALLING_ERROR_MASK << GSS_C_CALLING_ERROR_OFFSET))
318 #define	GSS_ROUTINE_ERROR(x) \
319 	((x) & (GSS_C_ROUTINE_ERROR_MASK << GSS_C_ROUTINE_ERROR_OFFSET))
320 #define	GSS_SUPPLEMENTARY_INFO(x) \
321 	((x) & (GSS_C_SUPPLEMENTARY_MASK << GSS_C_SUPPLEMENTARY_OFFSET))
322 #define	GSS_ERROR(x) \
323 	((x) & ((GSS_C_CALLING_ERROR_MASK << GSS_C_CALLING_ERROR_OFFSET) | \
324 	(GSS_C_ROUTINE_ERROR_MASK << GSS_C_ROUTINE_ERROR_OFFSET)))
325 
326 /*
327  * Now the actual status code definitions
328  */
329 
330 /*
331  * Calling errors:
332  */
333 #define	GSS_S_CALL_INACCESSIBLE_READ \
334 	(((OM_uint32) 1ul) << GSS_C_CALLING_ERROR_OFFSET)
335 #define	GSS_S_CALL_INACCESSIBLE_WRITE \
336 	(((OM_uint32) 2ul) << GSS_C_CALLING_ERROR_OFFSET)
337 #define	GSS_S_CALL_BAD_STRUCTURE \
338 	(((OM_uint32) 3ul) << GSS_C_CALLING_ERROR_OFFSET)
339 
340 /*
341  * Routine errors:
342  */
343 #define	GSS_S_BAD_MECH (((OM_uint32) 1ul) << GSS_C_ROUTINE_ERROR_OFFSET)
344 #define	GSS_S_BAD_NAME (((OM_uint32) 2ul) << GSS_C_ROUTINE_ERROR_OFFSET)
345 #define	GSS_S_BAD_NAMETYPE (((OM_uint32) 3ul) << GSS_C_ROUTINE_ERROR_OFFSET)
346 #define	GSS_S_BAD_BINDINGS (((OM_uint32) 4ul) << GSS_C_ROUTINE_ERROR_OFFSET)
347 #define	GSS_S_BAD_STATUS (((OM_uint32) 5ul) << GSS_C_ROUTINE_ERROR_OFFSET)
348 #define	GSS_S_BAD_SIG (((OM_uint32) 6ul) << GSS_C_ROUTINE_ERROR_OFFSET)
349 #define	GSS_S_BAD_MIC GSS_S_BAD_SIG
350 #define	GSS_S_NO_CRED (((OM_uint32) 7ul) << GSS_C_ROUTINE_ERROR_OFFSET)
351 #define	GSS_S_NO_CONTEXT (((OM_uint32) 8ul) << GSS_C_ROUTINE_ERROR_OFFSET)
352 #define	GSS_S_DEFECTIVE_TOKEN (((OM_uint32) 9ul) << GSS_C_ROUTINE_ERROR_OFFSET)
353 #define	GSS_S_DEFECTIVE_CREDENTIAL \
354 	(((OM_uint32) 10ul) << GSS_C_ROUTINE_ERROR_OFFSET)
355 #define	GSS_S_CREDENTIALS_EXPIRED \
356 	(((OM_uint32) 11ul) << GSS_C_ROUTINE_ERROR_OFFSET)
357 #define	GSS_S_CONTEXT_EXPIRED \
358 	(((OM_uint32) 12ul) << GSS_C_ROUTINE_ERROR_OFFSET)
359 #define	GSS_S_FAILURE (((OM_uint32) 13ul) << GSS_C_ROUTINE_ERROR_OFFSET)
360 #define	GSS_S_BAD_QOP (((OM_uint32) 14ul) << GSS_C_ROUTINE_ERROR_OFFSET)
361 #define	GSS_S_UNAUTHORIZED (((OM_uint32) 15ul) << GSS_C_ROUTINE_ERROR_OFFSET)
362 #define	GSS_S_UNAVAILABLE (((OM_uint32) 16ul) << GSS_C_ROUTINE_ERROR_OFFSET)
363 #define	GSS_S_DUPLICATE_ELEMENT \
364 	(((OM_uint32) 17ul) << GSS_C_ROUTINE_ERROR_OFFSET)
365 #define	GSS_S_NAME_NOT_MN (((OM_uint32) 18ul) << GSS_C_ROUTINE_ERROR_OFFSET)
366 
367 /*
368  * Supplementary info bits:
369  */
370 #define	GSS_S_CONTINUE_NEEDED (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 0))
371 #define	GSS_S_DUPLICATE_TOKEN (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 1))
372 #define	GSS_S_OLD_TOKEN (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 2))
373 #define	GSS_S_UNSEQ_TOKEN (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 3))
374 #define	GSS_S_GAP_TOKEN (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 4))
375 
376 
377 /*
378  * Finally, function prototypes for the GSS-API routines.
379  */
380 
381 OM_uint32 gss_acquire_cred(
382 	OM_uint32 *,		/* minor_status */
383 	const gss_name_t,	/* desired_name */
384 	OM_uint32,		/* time_req */
385 	const gss_OID_set,	/* desired_mechs */
386 	gss_cred_usage_t,	/* cred_usage */
387 	gss_cred_id_t *,	/* output_cred_handle */
388 	gss_OID_set *,		/* actual_mechs */
389 	OM_uint32 *		/* time_rec */
390 );
391 
392 OM_uint32 gss_release_cred(
393 	OM_uint32 *,		/* minor_status */
394 	gss_cred_id_t *		/* cred_handle */
395 );
396 
397 OM_uint32 gss_init_sec_context(
398 	OM_uint32 *,		/* minor_status */
399 	const gss_cred_id_t,	/* initiator_cred_handle */
400 	gss_ctx_id_t *,		/* context_handle */
401 	const gss_name_t,	/* target_name */
402 	const gss_OID,		/* mech_type */
403 	OM_uint32,		/* req_flags */
404 	OM_uint32,		/* time_req */
405 	gss_channel_bindings_t,	/* input_chan_bindings */
406 	const gss_buffer_t,	/* input_token */
407 	gss_OID *,		/* actual_mech_type */
408 	gss_buffer_t,		/* output_token */
409 	OM_uint32 *,		/* ret_flags */
410 	OM_uint32 *		/* time_rec */
411 );
412 
413 OM_uint32 gss_accept_sec_context(
414 	OM_uint32 *,		/* minor_status */
415 	gss_ctx_id_t *,		/* context_handle */
416 	const gss_cred_id_t,	/* acceptor_cred_handle */
417 	const gss_buffer_t,	/* input_token_buffer */
418 	const gss_channel_bindings_t,	/* input_chan_bindings */
419 	gss_name_t *,		/* src_name */
420 	gss_OID *,		/* mech_type */
421 	gss_buffer_t,		/* output_token */
422 	OM_uint32 *,		/* ret_flags */
423 	OM_uint32 *,		/* time_rec */
424 	gss_cred_id_t *		/* delegated_cred_handle */
425 );
426 
427 OM_uint32 gss_process_context_token(
428 	OM_uint32 *,		/* minor_status */
429 	const gss_ctx_id_t,	/* context_handle */
430 	const gss_buffer_t	/* token_buffer */
431 );
432 
433 OM_uint32 gss_delete_sec_context(
434 	OM_uint32 *,		/* minor_status */
435 	gss_ctx_id_t *,		/* context_handle */
436 	gss_buffer_t		/* output_token */
437 );
438 
439 OM_uint32 gss_context_time(
440 	OM_uint32 *,		/* minor_status */
441 	const gss_ctx_id_t,	/* context_handle */
442 	OM_uint32 *		/* time_rec */
443 );
444 
445 OM_uint32 gss_get_mic(
446 	OM_uint32 *,		/* minor_status */
447 	const gss_ctx_id_t,	/* context_handle */
448 	gss_qop_t,		/* qop_req */
449 	const gss_buffer_t,	/* message_buffer */
450 	gss_buffer_t		/* message_token */
451 );
452 
453 OM_uint32 gss_verify_mic(
454 	OM_uint32 *,		/* minor_status */
455 	const gss_ctx_id_t,	/* context_handle */
456 	const gss_buffer_t,	/* message_buffer */
457 	const gss_buffer_t,	/* token_buffer */
458 	gss_qop_t *		/* qop_state */
459 );
460 
461 OM_uint32 gss_wrap(
462 	OM_uint32 *,		/* minor_status */
463 	const gss_ctx_id_t,	/* context_handle */
464 	int,			/* conf_req_flag */
465 	gss_qop_t,		/* qop_req */
466 	const gss_buffer_t,	/* input_message_buffer */
467 	int *,			/* conf_state */
468 	gss_buffer_t		/* output_message_buffer */
469 );
470 
471 OM_uint32 gss_unwrap(
472 	OM_uint32 *,		/* minor_status */
473 	const gss_ctx_id_t,	/* context_handle */
474 	const gss_buffer_t,	/* input_message_buffer */
475 	gss_buffer_t,		/* output_message_buffer */
476 	int *,			/* conf_state */
477 	gss_qop_t *		/* qop_state */
478 );
479 
480 OM_uint32 gss_display_status(
481 	OM_uint32 *,		/* minor_status */
482 	OM_uint32,		/* status_value */
483 	int,			/* status_type */
484 	const gss_OID,		/* mech_type */
485 	OM_uint32 *,		/* message_context */
486 	gss_buffer_t		/* status_string */
487 );
488 
489 OM_uint32 gss_indicate_mechs(
490 	OM_uint32 *,		/* minor_status */
491 	gss_OID_set *		/* mech_set */
492 );
493 
494 OM_uint32 gss_compare_name(
495 	OM_uint32 *,		/* minor_status */
496 	const gss_name_t,	/* name1 */
497 	const gss_name_t,	/* name2 */
498 	int *			/* name_equal */
499 );
500 
501 OM_uint32 gss_display_name(
502 	OM_uint32 *,		/* minor_status */
503 	const gss_name_t,	/* input_name */
504 	gss_buffer_t,		/* output_name_buffer */
505 	gss_OID *		/* output_name_type */
506 );
507 
508 OM_uint32 gss_import_name(
509 	OM_uint32 *,		/* minor_status */
510 	const gss_buffer_t,	/* input_name_buffer */
511 	const gss_OID,		/* input_name_type */
512 	gss_name_t *		/* output_name */
513 );
514 
515 OM_uint32 gss_export_name(
516 	OM_uint32 *,		/* minor_status */
517 	const gss_name_t,  	/* input_name */
518 	gss_buffer_t 		/* exported_name */
519 );
520 
521 OM_uint32 gss_release_name(
522 	OM_uint32 *,		/* minor_status */
523 	gss_name_t *		/* input_name */
524 );
525 
526 OM_uint32 gss_release_buffer(
527 	OM_uint32 *,		/* minor_status */
528 	gss_buffer_t		/* buffer */
529 );
530 
531 OM_uint32 gss_release_oid_set(
532 	OM_uint32 *,		/* minor_status */
533 	gss_OID_set *		/* set */
534 );
535 
536 OM_uint32 gss_inquire_cred(
537 	OM_uint32 *,		/* minor_status */
538 	const gss_cred_id_t,	/* cred_handle */
539 	gss_name_t *,		/* name */
540 	OM_uint32 *,		/* lifetime */
541 	gss_cred_usage_t *,	/* cred_usage */
542 	gss_OID_set *		/* mechanisms */
543 );
544 
545 OM_uint32 gss_inquire_context(
546 	OM_uint32 *,		/* minor_status */
547 	const gss_ctx_id_t,	/* context_handle */
548 	gss_name_t *,		/* src_name */
549 	gss_name_t *,		/* targ_name */
550 	OM_uint32 *,		/* lifetime_rec */
551 	gss_OID *,		/* mech_type */
552 	OM_uint32 *,		/* ctx_flags */
553 	int *,			/* locally_initiated */
554 	int *			/* open */
555 );
556 
557 OM_uint32 gss_wrap_size_limit(
558 	OM_uint32 *,		/* minor_status */
559 	const gss_ctx_id_t,	/* context_handle */
560 	int,			/* conf_req_flag */
561 	gss_qop_t,		/* qop_req */
562 	OM_uint32,		/* req_output_size */
563 	OM_uint32 *		/* max_input_size */
564 );
565 
566 OM_uint32 gss_add_cred(
567 	OM_uint32 *,		/* minor_status */
568 	const gss_cred_id_t,	/* input_cred_handle */
569 	const gss_name_t,	/* desired_name */
570 	const gss_OID,		/* desired_mech */
571 	gss_cred_usage_t,	/* cred_usage */
572 	OM_uint32,		/* initiator_time_req */
573 	OM_uint32,		/* acceptor_time_req */
574 	gss_cred_id_t *,	/* output_cred_handle */
575 	gss_OID_set *,		/* actual_mechs */
576 	OM_uint32 *,		/* initiator_time_rec */
577 	OM_uint32 *		/* acceptor_time_rec */
578 );
579 
580 OM_uint32 gss_store_cred(
581 	OM_uint32 *,		/* minor_status */
582 	const gss_cred_id_t,	/* input_cred */
583 	gss_cred_usage_t,	/* cred_usage */
584 	const gss_OID,		/* desired_mech */
585 	OM_uint32,		/* overwrite_cred */
586 	OM_uint32,		/* default_cred */
587 	gss_OID_set *,		/* elements_stored */
588 	gss_cred_usage_t *	/* cred_usage_stored */
589 );
590 
591 OM_uint32 gss_inquire_cred_by_mech(
592 	OM_uint32  *,		/* minor_status */
593 	const gss_cred_id_t,	/* cred_handle */
594 	const gss_OID,		/* mech_type */
595 	gss_name_t *,		/* name */
596 	OM_uint32 *,		/* initiator_lifetime */
597 	OM_uint32 *,		/* acceptor_lifetime */
598 	gss_cred_usage_t *	/* cred_usage */
599 );
600 
601 OM_uint32 gss_export_sec_context(
602 	OM_uint32 *,		/* minor_status */
603 	gss_ctx_id_t *,		/* context_handle */
604 	gss_buffer_t		/* interprocess_token */
605 );
606 
607 OM_uint32 gss_import_sec_context(
608 	OM_uint32 *,		/* minor_status */
609 	const gss_buffer_t,	/* interprocess_token */
610 	gss_ctx_id_t *		/* context_handle */
611 );
612 
613 OM_uint32 gss_create_empty_oid_set(
614 	OM_uint32 *, 		/* minor_status */
615 	gss_OID_set *		/* oid_set */
616 );
617 
618 OM_uint32 gss_add_oid_set_member(
619 	OM_uint32 *, 		/* minor_status */
620 	const gss_OID,  	/* member_oid */
621 	gss_OID_set *		/* oid_set */
622 );
623 
624 OM_uint32 gss_test_oid_set_member(
625 	OM_uint32 *, 		/* minor_status */
626 	const gss_OID,  	/* member */
627 	const gss_OID_set, 	/* set */
628 	int *  			/* present */
629 );
630 
631 OM_uint32 gss_inquire_names_for_mech(
632 	OM_uint32 *, 		/* minor_status */
633 	const gss_OID,  	/* mechanism */
634 	gss_OID_set *		/* name_types */
635 );
636 
637 OM_uint32 gss_inquire_mechs_for_name(
638 	OM_uint32 *, 		/* minor_status */
639 	const gss_name_t,  	/* input_name */
640 	gss_OID_set *		/* mech_types */
641 );
642 
643 OM_uint32 gss_canonicalize_name(
644 	OM_uint32 *, 		/* minor_status */
645 	const gss_name_t,  	/* input_name */
646 	const gss_OID,  	/* mech_type */
647 	gss_name_t * 		/* output_name */
648 );
649 
650 OM_uint32 gss_duplicate_name(
651 	OM_uint32 *, 		/* minor_status */
652 	const gss_name_t,  	/* src_name */
653 	gss_name_t * 		/* dest_name */
654 );
655 
656 
657 OM_uint32 gss_release_oid(
658 	OM_uint32 *,		/* minor_status */
659 	gss_OID *		/* oid */
660 );
661 
662 OM_uint32 gss_str_to_oid(
663 	OM_uint32 *,		/* minor_status */
664 	const gss_buffer_t,	/* oid_str */
665 	gss_OID *		/* oid */
666 );
667 
668 OM_uint32 gss_oid_to_str(
669 	OM_uint32 *,		/* minor_status */
670 	const gss_OID,		/* oid */
671 	gss_buffer_t		/* oid_str */
672 );
673 
674 
675 /*
676  * The following routines are obsolete variants of gss_get_mic,
677  * gss_verify_mic, gss_wrap and gss_unwrap.  They should be
678  * provided by GSSAPI V2 implementations for backwards
679  * compatibility with V1 applications.  Distinct entrypoints
680  * (as opposed to #defines) should be provided, both to allow
681  * GSSAPI V1 applications to link against GSSAPI V2 implementations,
682  * and to retain the slight parameter type differences between the
683  * obsolete versions of these routines and their current forms.
684  */
685 
686 OM_uint32 gss_sign(
687 	OM_uint32 *,		/* minor_status */
688 	gss_ctx_id_t,		/* context_handle */
689 	int,			/* qop_req */
690 	gss_buffer_t,		/* message_buffer */
691 	gss_buffer_t		/* message_token */
692 );
693 
694 OM_uint32 gss_verify(
695 	OM_uint32 *,		/* minor_status */
696 	gss_ctx_id_t,		/* context_handle */
697 	gss_buffer_t,		/* message_buffer */
698 	gss_buffer_t,		/* token_buffer */
699 	int *			/* qop_state */
700 );
701 
702 OM_uint32 gss_seal(
703 	OM_uint32 *,		/* minor_status */
704 	gss_ctx_id_t,		/* context_handle */
705 	int,			/* conf_req_flag */
706 	int,			/* qop_req */
707 	gss_buffer_t,		/* input_message_buffer */
708 	int *,			/* conf_state */
709 	gss_buffer_t		/* output_message_buffer */
710 );
711 
712 OM_uint32 gss_unseal(
713 	OM_uint32 *,		/* minor_status */
714 	gss_ctx_id_t,		/* context_handle */
715 	gss_buffer_t,		/* input_message_buffer */
716 	gss_buffer_t,		/* output_message_buffer */
717 	int *,			/* conf_state */
718 	int *			/* qop_state */
719 );
720 
721 
722 #ifdef _KERNEL /* For kernel */
723 
724 #include <rpc/types.h>
725 
726 void kgss_free_oid(gss_OID oid);
727 
728 OM_uint32 kgss_acquire_cred(
729 	OM_uint32 *,
730 	const gss_name_t,
731 	OM_uint32,
732 	const gss_OID_set,
733 	int,
734 	gss_cred_id_t *,
735 	gss_OID_set *,
736 	OM_uint32 *,
737 	uid_t);
738 
739 OM_uint32 kgss_add_cred(
740 	OM_uint32 *,
741 	gss_cred_id_t,
742 	gss_name_t,
743 	gss_OID,
744 	int,
745 	int,
746 	int,
747 	gss_OID_set *,
748 	OM_uint32 *,
749 	OM_uint32 *,
750 	uid_t);
751 
752 OM_uint32 kgss_release_cred(
753 	OM_uint32 *,
754 	gss_cred_id_t *,
755 	uid_t);
756 
757 OM_uint32 kgss_init_sec_context(
758 	OM_uint32 *,
759 	const gss_cred_id_t,
760 	gss_ctx_id_t *,
761 	const gss_name_t,
762 	const gss_OID,
763 	int,
764 	OM_uint32,
765 	const gss_channel_bindings_t,
766 	const gss_buffer_t,
767 	gss_OID *,
768 	gss_buffer_t,
769 	int *,
770 	OM_uint32 *,
771 	uid_t);
772 
773 OM_uint32 kgss_accept_sec_context(
774 	OM_uint32 *,
775 	gss_ctx_id_t *,
776 	const gss_cred_id_t,
777 	const gss_buffer_t,
778 	const gss_channel_bindings_t,
779 	const gss_buffer_t,
780 	gss_OID *,
781 	gss_buffer_t,
782 	int *,
783 	OM_uint32 *,
784 	gss_cred_id_t *,
785 	uid_t);
786 
787 OM_uint32 kgss_process_context_token(
788 	OM_uint32 *,
789 	const gss_ctx_id_t,
790 	const gss_buffer_t,
791 	uid_t);
792 
793 OM_uint32 kgss_delete_sec_context(
794 	OM_uint32 *,
795 	gss_ctx_id_t *,
796 	gss_buffer_t);
797 
798 OM_uint32 kgss_export_sec_context(
799 	OM_uint32 *,
800 	const gss_ctx_id_t,
801 	gss_buffer_t);
802 
803 OM_uint32 kgss_import_sec_context(
804 	OM_uint32  *,
805 	const gss_buffer_t,
806 	gss_ctx_id_t);
807 
808 OM_uint32 kgss_context_time(
809 	OM_uint32 *,
810 	const gss_ctx_id_t,
811 	OM_uint32 *,
812 	uid_t);
813 
814 OM_uint32 kgss_sign(
815 	OM_uint32 *,
816 	const gss_ctx_id_t,
817 	int,
818 	const gss_buffer_t,
819 	gss_buffer_t);
820 
821 
822 OM_uint32 kgss_verify(
823 	OM_uint32 *,
824 	const gss_ctx_id_t,
825 	const gss_buffer_t,
826 	const gss_buffer_t,
827 	int *);
828 
829 OM_uint32 kgss_seal(
830 	OM_uint32 *,
831 	const gss_ctx_id_t,
832 	int,
833 	int,
834 	const gss_buffer_t,
835 	int *,
836 	gss_buffer_t);
837 
838 OM_uint32 kgss_unseal(
839 	OM_uint32 *,
840 	const gss_ctx_id_t,
841 	const gss_buffer_t,
842 	gss_buffer_t,
843 	int *,
844 	int *);
845 
846 OM_uint32 kgss_display_status(
847 	OM_uint32 *,
848 	OM_uint32,
849 	int,
850 	const gss_OID,
851 	int *,
852 	gss_buffer_t,
853 	uid_t);
854 
855 OM_uint32 kgss_indicate_mechs(
856 	OM_uint32 *,
857 	gss_OID_set *,
858 	uid_t);
859 
860 OM_uint32 kgss_inquire_cred(
861 	OM_uint32 *,
862 	const gss_cred_id_t,
863 	gss_name_t *,
864 	OM_uint32 *,
865 	int *,
866 	gss_OID_set *,
867 	uid_t);
868 
869 OM_uint32 kgss_inquire_cred_by_mech(
870 	OM_uint32 *,
871 	gss_cred_id_t,
872 	gss_OID,
873 	uid_t);
874 
875 
876 #endif /* if _KERNEL */
877 
878 #ifdef	__cplusplus
879 }
880 #endif
881 
882 #endif	/* _GSSAPI_H_ */
883