Home | History | Annotate | Download | only in kadm5
      1 /*
      2  * Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
      3  * Use is subject to license terms.
      4  */
      5 
      6 /*
      7  * WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING
      8  *
      9  *	Openvision retains the copyright to derivative works of
     10  *	this source code.  Do *NOT* create a derivative of this
     11  *	source code before consulting with your legal department.
     12  *	Do *NOT* integrate *ANY* of this source code into another
     13  *	product before consulting with your legal department.
     14  *
     15  *	For further information, read the top-level Openvision
     16  *	copyright which is contained in the top-level MIT Kerberos
     17  *	copyright.
     18  *
     19  * WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING
     20  *
     21  */
     22 
     23 
     24 /*
     25  * Copyright 1993 OpenVision Technologies, Inc., All Rights Reserved
     26  *
     27  * $Header$
     28  */
     29 
     30 /*
     31  * This header file is used internally by the Admin API server
     32  * libraries and Admin server.  IF YOU THINK YOU NEED TO USE THIS FILE
     33  * FOR ANYTHING, YOU'RE ALMOST CERTAINLY WRONG.
     34  */
     35 
     36 #ifndef __KADM5_SERVER_INTERNAL_H__
     37 #define __KADM5_SERVER_INTERNAL_H__
     38 
     39 #ifdef HAVE_MEMORY_H
     40 #include    <memory.h>
     41 #endif
     42 #include    <stdlib.h>
     43 #include    <errno.h>
     44 #include    "k5-int.h"
     45 #include    <krb5/kdb.h>
     46 #include    <kadm5/admin.h>
     47 #include    <rpc/xdr.h>
     48 #include    "admin_internal.h"
     49 
     50 typedef struct _kadm5_server_handle_t {
     51 	krb5_ui_4	magic_number;
     52 	krb5_ui_4	struct_version;
     53 	krb5_ui_4	api_version;
     54 	krb5_context	context;
     55 	krb5_principal	current_caller;
     56 	kadm5_config_params  params;
     57 	struct _kadm5_server_handle_t *lhandle;
     58         char **db_args;
     59 	krb5_keyblock	master_keyblock;
     60 } kadm5_server_handle_rec, *kadm5_server_handle_t;
     61 
     62 #define OSA_ADB_PRINC_VERSION_1  0x12345C01
     63 
     64 typedef struct _osa_pw_hist_t {
     65   int n_key_data;
     66   krb5_key_data *key_data;
     67 } osa_pw_hist_ent, *osa_pw_hist_t;
     68 
     69 typedef struct _osa_princ_ent_t {
     70   int                         version;
     71   char                        *policy;
     72   long                        aux_attributes;
     73   unsigned int                old_key_len;
     74   unsigned int                old_key_next;
     75   krb5_kvno                   admin_history_kvno;
     76   osa_pw_hist_ent             *old_keys;
     77 } osa_princ_ent_rec, *osa_princ_ent_t;
     78 
     79 
     80 kadm5_ret_t    adb_policy_init(kadm5_server_handle_t handle);
     81 kadm5_ret_t    adb_policy_close(kadm5_server_handle_t handle);
     82 kadm5_ret_t    passwd_check(kadm5_server_handle_t handle,
     83 			    char *pass, int use_policy,
     84 			    kadm5_policy_ent_t policy,
     85 			    krb5_principal principal);
     86 kadm5_ret_t    principal_exists(krb5_principal principal);
     87 krb5_error_code	    kdb_init_master(kadm5_server_handle_t handle,
     88 				    char *r, int from_keyboard);
     89 krb5_error_code	    kdb_init_hist(kadm5_server_handle_t handle,
     90 				  char *r);
     91 krb5_error_code     kdb_get_entry(kadm5_server_handle_t handle,
     92 				  krb5_principal principal, krb5_db_entry *kdb,
     93 				  osa_princ_ent_rec *adb);
     94 krb5_error_code     kdb_free_entry(kadm5_server_handle_t handle,
     95 				   krb5_db_entry *kdb, osa_princ_ent_rec *adb);
     96 krb5_error_code     kdb_put_entry(kadm5_server_handle_t handle,
     97 				  krb5_db_entry *kdb, osa_princ_ent_rec *adb);
     98 krb5_error_code     kdb_delete_entry(kadm5_server_handle_t handle,
     99 				     krb5_principal name);
    100 krb5_error_code     kdb_iter_entry(kadm5_server_handle_t handle,
    101 				   char *match_entry,
    102 				   void (*iter_fct)(void *, krb5_principal),
    103 				   void *data);
    104 
    105 int		    init_dict(kadm5_config_params *);
    106 int		    find_word(const char *word);
    107 void		    destroy_dict(void);
    108 
    109 /* XXX this ought to be in libkrb5.a, but isn't */
    110 kadm5_ret_t krb5_copy_key_data_contents(krb5_context context,
    111 					krb5_key_data *from,
    112 					krb5_key_data *to);
    113 kadm5_ret_t krb5_free_key_data_contents(krb5_context context,
    114 					krb5_key_data *key);
    115 
    116 /*
    117  * *Warning*
    118  * *Warning*	    This is going to break if we
    119  * *Warning*	    ever go multi-threaded
    120  * *Warning*
    121  */
    122 extern	krb5_principal	current_caller;
    123 
    124 /*
    125  * Why is this (or something similar) not defined *anywhere* in krb5?
    126  */
    127 #define KSUCCESS	0
    128 #define WORD_NOT_FOUND	1
    129 
    130 /*
    131  * all the various mask bits or'd together
    132  */
    133 
    134 #define	ALL_PRINC_MASK \
    135  (KADM5_PRINCIPAL | KADM5_PRINC_EXPIRE_TIME | KADM5_PW_EXPIRATION | \
    136   KADM5_LAST_PWD_CHANGE | KADM5_ATTRIBUTES | KADM5_MAX_LIFE | \
    137   KADM5_MOD_TIME | KADM5_MOD_NAME | KADM5_KVNO | KADM5_MKVNO | \
    138   KADM5_AUX_ATTRIBUTES | KADM5_POLICY_CLR | KADM5_POLICY | \
    139   KADM5_MAX_RLIFE | KADM5_TL_DATA | KADM5_KEY_DATA)
    140 
    141 #define ALL_POLICY_MASK \
    142  (KADM5_POLICY | KADM5_PW_MAX_LIFE | KADM5_PW_MIN_LIFE | \
    143   KADM5_PW_MIN_LENGTH | KADM5_PW_MIN_CLASSES | KADM5_PW_HISTORY_NUM | \
    144   KADM5_REF_COUNT)
    145 
    146 #define SERVER_CHECK_HANDLE(handle) \
    147 { \
    148 	kadm5_server_handle_t srvr = \
    149 	     (kadm5_server_handle_t) handle; \
    150  \
    151 	if (! srvr->current_caller) \
    152 		return KADM5_BAD_SERVER_HANDLE; \
    153 	if (! srvr->lhandle) \
    154 	        return KADM5_BAD_SERVER_HANDLE; \
    155 }
    156 
    157 #define CHECK_HANDLE(handle) \
    158      GENERIC_CHECK_HANDLE(handle, KADM5_OLD_SERVER_API_VERSION, \
    159 			  KADM5_NEW_SERVER_API_VERSION) \
    160      SERVER_CHECK_HANDLE(handle)
    161 
    162 bool_t          xdr_osa_princ_ent_rec(XDR *xdrs, osa_princ_ent_t objp);
    163 
    164 void
    165 osa_free_princ_ent(osa_princ_ent_t val);
    166 
    167 #endif /* __KADM5_SERVER_INTERNAL_H__ */
    168