1/* 2 * linux/include/linux/auth_gss.h 3 * 4 * Declarations for RPCSEC_GSS 5 * 6 * Dug Song <dugsong@monkey.org> 7 * Andy Adamson <andros@umich.edu> 8 * Bruce Fields <bfields@umich.edu> 9 * Copyright (c) 2000 The Regents of the University of Michigan 10 * 11 * $Id$ 12 */ 13 14#ifndef _LINUX_SUNRPC_AUTH_GSS_H 15#define _LINUX_SUNRPC_AUTH_GSS_H 16 17#ifdef __KERNEL__ 18#include <linux/sunrpc/auth.h> 19#include <linux/sunrpc/svc.h> 20#include <linux/sunrpc/gss_api.h> 21 22#define RPC_GSS_VERSION 1 23 24#define MAXSEQ 0x80000000 /* maximum legal sequence number, from rfc 2203 */ 25 26enum rpc_gss_proc { 27 RPC_GSS_PROC_DATA = 0, 28 RPC_GSS_PROC_INIT = 1, 29 RPC_GSS_PROC_CONTINUE_INIT = 2, 30 RPC_GSS_PROC_DESTROY = 3 31}; 32 33enum rpc_gss_svc { 34 RPC_GSS_SVC_NONE = 1, 35 RPC_GSS_SVC_INTEGRITY = 2, 36 RPC_GSS_SVC_PRIVACY = 3 37}; 38 39/* on-the-wire gss cred: */ 40struct rpc_gss_wire_cred { 41 u32 gc_v; /* version */ 42 u32 gc_proc; /* control procedure */ 43 u32 gc_seq; /* sequence number */ 44 u32 gc_svc; /* service */ 45 struct xdr_netobj gc_ctx; /* context handle */ 46}; 47 48/* on-the-wire gss verifier: */ 49struct rpc_gss_wire_verf { 50 u32 gv_flavor; 51 struct xdr_netobj gv_verf; 52}; 53 54/* return from gss NULL PROC init sec context */ 55struct rpc_gss_init_res { 56 struct xdr_netobj gr_ctx; /* context handle */ 57 u32 gr_major; /* major status */ 58 u32 gr_minor; /* minor status */ 59 u32 gr_win; /* sequence window */ 60 struct xdr_netobj gr_token; /* token */ 61}; 62 63/* The gss_cl_ctx struct holds all the information the rpcsec_gss client 64 * code needs to know about a single security context. In particular, 65 * gc_gss_ctx is the context handle that is used to do gss-api calls, while 66 * gc_wire_ctx is the context handle that is used to identify the context on 67 * the wire when communicating with a server. */ 68 69struct gss_cl_ctx { 70 atomic_t count; 71 enum rpc_gss_proc gc_proc; 72 u32 gc_seq; 73 spinlock_t gc_seq_lock; 74 struct gss_ctx *gc_gss_ctx; 75 struct xdr_netobj gc_wire_ctx; 76 u32 gc_win; 77 unsigned long gc_expiry; 78}; 79 80struct gss_upcall_msg; 81struct gss_cred { 82 struct rpc_cred gc_base; 83 enum rpc_gss_svc gc_service; 84 struct gss_cl_ctx *gc_ctx; 85 struct gss_upcall_msg *gc_upcall; 86}; 87 88#define gc_uid gc_base.cr_uid 89#define gc_count gc_base.cr_count 90#define gc_flags gc_base.cr_flags 91#define gc_expire gc_base.cr_expire 92 93void print_hexl(u32 *p, u_int length, u_int offset); 94 95#endif /* __KERNEL__ */ 96#endif /* _LINUX_SUNRPC_AUTH_GSS_H */ 97 98