/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */

[0] Fix | Delete

/*

[1] Fix | Delete

* Copyright 1990, 1991, 2016 by the Massachusetts Institute of Technology.

[2] Fix | Delete

* All Rights Reserved.

[3] Fix | Delete

*

[4] Fix | Delete

* Export of this software from the United States of America may

[5] Fix | Delete

* require a specific license from the United States Government.

[6] Fix | Delete

* It is the responsibility of any person or organization contemplating

[7] Fix | Delete

* export to obtain such a license before exporting.

[8] Fix | Delete

*

[9] Fix | Delete

* WITHIN THAT CONSTRAINT, permission to use, copy, modify, and

[10] Fix | Delete

* distribute this software and its documentation for any purpose and

[11] Fix | Delete

* without fee is hereby granted, provided that the above copyright

[12] Fix | Delete

* notice appear in all copies and that both that copyright notice and

[13] Fix | Delete

* this permission notice appear in supporting documentation, and that

[14] Fix | Delete

* the name of M.I.T. not be used in advertising or publicity pertaining

[15] Fix | Delete

* to distribution of the software without specific, written prior

[16] Fix | Delete

* permission. Furthermore if you modify this software you must label

[17] Fix | Delete

* your software as modified software and not distribute it in such a

[18] Fix | Delete

* fashion that it might be confused with the original M.I.T. software.

[19] Fix | Delete

* M.I.T. makes no representations about the suitability of

[20] Fix | Delete

* this software for any purpose. It is provided "as is" without express

[21] Fix | Delete

* or implied warranty.

[22] Fix | Delete

*/

[23] Fix | Delete

/*

[24] Fix | Delete

* Copyright (C) 1998 by the FundsXpress, INC.

[25] Fix | Delete

*

[26] Fix | Delete

* All rights reserved.

[27] Fix | Delete

*

[28] Fix | Delete

* Export of this software from the United States of America may require

[29] Fix | Delete

* a specific license from the United States Government. It is the

[30] Fix | Delete

* responsibility of any person or organization contemplating export to

[31] Fix | Delete

* obtain such a license before exporting.

[32] Fix | Delete

*

[33] Fix | Delete

* WITHIN THAT CONSTRAINT, permission to use, copy, modify, and

[34] Fix | Delete

* distribute this software and its documentation for any purpose and

[35] Fix | Delete

* without fee is hereby granted, provided that the above copyright

[36] Fix | Delete

* notice appear in all copies and that both that copyright notice and

[37] Fix | Delete

* this permission notice appear in supporting documentation, and that

[38] Fix | Delete

* the name of FundsXpress. not be used in advertising or publicity pertaining

[39] Fix | Delete

* to distribution of the software without specific, written prior

[40] Fix | Delete

* permission. FundsXpress makes no representations about the suitability of

[41] Fix | Delete

* this software for any purpose. It is provided "as is" without express

[42] Fix | Delete

* or implied warranty.

[43] Fix | Delete

*

[44] Fix | Delete

* THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR

[45] Fix | Delete

* IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED

[46] Fix | Delete

* WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.

[47] Fix | Delete

*/

[48] Fix | Delete

/*

[49] Fix | Delete

* Copyright 2009 Sun Microsystems, Inc. All rights reserved.

[50] Fix | Delete

* Use is subject to license terms.

[51] Fix | Delete

*/

[52] Fix | Delete

[53] Fix | Delete

/* KDC Database interface definitions */

[54] Fix | Delete

[55] Fix | Delete

/* This API is not considered as stable as the main krb5 API.

[56] Fix | Delete

*

[57] Fix | Delete

* - We may make arbitrary incompatible changes between feature

[58] Fix | Delete

* releases (e.g. from 1.7 to 1.8).

[59] Fix | Delete

* - We will make some effort to avoid making incompatible changes for

[60] Fix | Delete

* bugfix releases, but will make them if necessary.

[61] Fix | Delete

*/

[62] Fix | Delete

[63] Fix | Delete

#ifndef KRB5_KDB5__

[64] Fix | Delete

#define KRB5_KDB5__

[65] Fix | Delete

[66] Fix | Delete

#include <krb5.h>

[67] Fix | Delete

[68] Fix | Delete

/* This version will be incremented when incompatible changes are made to the

[69] Fix | Delete

* KDB API, and will be kept in sync with the libkdb major version. */

[70] Fix | Delete

#define KRB5_KDB_API_VERSION 10

[71] Fix | Delete

[72] Fix | Delete

/* Salt types */

[73] Fix | Delete

#define KRB5_KDB_SALTTYPE_NORMAL 0

[74] Fix | Delete

/* #define KRB5_KDB_SALTTYPE_V4 1 */

[75] Fix | Delete

#define KRB5_KDB_SALTTYPE_NOREALM 2

[76] Fix | Delete

#define KRB5_KDB_SALTTYPE_ONLYREALM 3

[77] Fix | Delete

#define KRB5_KDB_SALTTYPE_SPECIAL 4

[78] Fix | Delete

/* #define KRB5_KDB_SALTTYPE_AFS3 5 */

[79] Fix | Delete

#define KRB5_KDB_SALTTYPE_CERTHASH 6

[80] Fix | Delete

[81] Fix | Delete

/* Attributes */

[82] Fix | Delete

#define KRB5_KDB_DISALLOW_POSTDATED 0x00000001

[83] Fix | Delete

#define KRB5_KDB_DISALLOW_FORWARDABLE 0x00000002

[84] Fix | Delete

#define KRB5_KDB_DISALLOW_TGT_BASED 0x00000004

[85] Fix | Delete

#define KRB5_KDB_DISALLOW_RENEWABLE 0x00000008

[86] Fix | Delete

#define KRB5_KDB_DISALLOW_PROXIABLE 0x00000010

[87] Fix | Delete

#define KRB5_KDB_DISALLOW_DUP_SKEY 0x00000020

[88] Fix | Delete

#define KRB5_KDB_DISALLOW_ALL_TIX 0x00000040

[89] Fix | Delete

#define KRB5_KDB_REQUIRES_PRE_AUTH 0x00000080

[90] Fix | Delete

#define KRB5_KDB_REQUIRES_HW_AUTH 0x00000100

[91] Fix | Delete

#define KRB5_KDB_REQUIRES_PWCHANGE 0x00000200

[92] Fix | Delete

#define KRB5_KDB_DISALLOW_SVR 0x00001000

[93] Fix | Delete

#define KRB5_KDB_PWCHANGE_SERVICE 0x00002000

[94] Fix | Delete

#define KRB5_KDB_SUPPORT_DESMD5 0x00004000

[95] Fix | Delete

#define KRB5_KDB_NEW_PRINC 0x00008000

[96] Fix | Delete

#define KRB5_KDB_OK_AS_DELEGATE 0x00100000

[97] Fix | Delete

#define KRB5_KDB_OK_TO_AUTH_AS_DELEGATE 0x00200000 /* S4U2Self OK */

[98] Fix | Delete

#define KRB5_KDB_NO_AUTH_DATA_REQUIRED 0x00400000

[99] Fix | Delete

#define KRB5_KDB_LOCKDOWN_KEYS 0x00800000

[100] Fix | Delete

[101] Fix | Delete

/* Creation flags */

[102] Fix | Delete

#define KRB5_KDB_CREATE_BTREE 0x00000001

[103] Fix | Delete

#define KRB5_KDB_CREATE_HASH 0x00000002

[104] Fix | Delete

[105] Fix | Delete

/* Entry get flags */

[106] Fix | Delete

/* Name canonicalization requested */

[107] Fix | Delete

#define KRB5_KDB_FLAG_CANONICALIZE 0x00000010

[108] Fix | Delete

/* Include authorization data generated by backend */

[109] Fix | Delete

#define KRB5_KDB_FLAG_INCLUDE_PAC 0x00000020

[110] Fix | Delete

/* Is AS-REQ (client referrals only) */

[111] Fix | Delete

#define KRB5_KDB_FLAG_CLIENT_REFERRALS_ONLY 0x00000040

[112] Fix | Delete

/* Map cross-realm principals */

[113] Fix | Delete

#define KRB5_KDB_FLAG_MAP_PRINCIPALS 0x00000080

[114] Fix | Delete

/* Protocol transition */

[115] Fix | Delete

#define KRB5_KDB_FLAG_PROTOCOL_TRANSITION 0x00000100

[116] Fix | Delete

/* Constrained delegation */

[117] Fix | Delete

#define KRB5_KDB_FLAG_CONSTRAINED_DELEGATION 0x00000200

[118] Fix | Delete

/* User-to-user */

[119] Fix | Delete

#define KRB5_KDB_FLAG_USER_TO_USER 0x00000800

[120] Fix | Delete

/* Cross-realm */

[121] Fix | Delete

#define KRB5_KDB_FLAG_CROSS_REALM 0x00001000

[122] Fix | Delete

/* Issuing referral */

[123] Fix | Delete

#define KRB5_KDB_FLAG_ISSUING_REFERRAL 0x00004000

[124] Fix | Delete

[125] Fix | Delete

[126] Fix | Delete

#define KRB5_KDB_FLAGS_S4U ( KRB5_KDB_FLAG_PROTOCOL_TRANSITION | \

[127] Fix | Delete

KRB5_KDB_FLAG_CONSTRAINED_DELEGATION )

[128] Fix | Delete

[129] Fix | Delete

/* KDB iteration flags */

[130] Fix | Delete

#define KRB5_DB_ITER_WRITE 0x00000001

[131] Fix | Delete

#define KRB5_DB_ITER_REV 0x00000002

[132] Fix | Delete

#define KRB5_DB_ITER_RECURSE 0x00000004

[133] Fix | Delete

[134] Fix | Delete

/* String attribute names recognized by krb5 */

[135] Fix | Delete

#define KRB5_KDB_SK_SESSION_ENCTYPES "session_enctypes"

[136] Fix | Delete

#define KRB5_KDB_SK_REQUIRE_AUTH "require_auth"

[137] Fix | Delete

#define KRB5_KDB_SK_OPTIONAL_AD_SIGNEDPATH "optional_ad_signedpath"

[138] Fix | Delete

[139] Fix | Delete

#if !defined(_WIN32)

[140] Fix | Delete

[141] Fix | Delete

/*

[142] Fix | Delete

* Note --- these structures cannot be modified without changing the

[143] Fix | Delete

* database version number in libkdb.a, but should be expandable by

[144] Fix | Delete

* adding new tl_data types.

[145] Fix | Delete

*/

[146] Fix | Delete

typedef struct _krb5_tl_data {

[147] Fix | Delete

struct _krb5_tl_data* tl_data_next; /* NOT saved */

[148] Fix | Delete

krb5_int16 tl_data_type;

[149] Fix | Delete

krb5_ui_2 tl_data_length;

[150] Fix | Delete

krb5_octet * tl_data_contents;

[151] Fix | Delete

} krb5_tl_data;

[152] Fix | Delete

[153] Fix | Delete

/* String attributes (currently stored inside tl-data) map C string keys to

[154] Fix | Delete

* values. They can be set via kadmin and consumed by KDC plugins. */

[155] Fix | Delete

typedef struct krb5_string_attr_st {

[156] Fix | Delete

char *key;

[157] Fix | Delete

char *value;

[158] Fix | Delete

} krb5_string_attr;

[159] Fix | Delete

[160] Fix | Delete

/*

[161] Fix | Delete

* If this ever changes up the version number and make the arrays be as

[162] Fix | Delete

* big as necessary.

[163] Fix | Delete

*

[164] Fix | Delete

* Currently the first type is the enctype and the second is the salt type.

[165] Fix | Delete

*/

[166] Fix | Delete

typedef struct _krb5_key_data {

[167] Fix | Delete

krb5_int16 key_data_ver; /* Version */

[168] Fix | Delete

krb5_ui_2 key_data_kvno; /* Key Version */

[169] Fix | Delete

krb5_int16 key_data_type[2]; /* Array of types */

[170] Fix | Delete

krb5_ui_2 key_data_length[2]; /* Array of lengths */

[171] Fix | Delete

krb5_octet * key_data_contents[2]; /* Array of pointers */

[172] Fix | Delete

} krb5_key_data;

[173] Fix | Delete

[174] Fix | Delete

#define KRB5_KDB_V1_KEY_DATA_ARRAY 2 /* # of array elements */

[175] Fix | Delete

[176] Fix | Delete

typedef struct _krb5_keysalt {

[177] Fix | Delete

krb5_int16 type;

[178] Fix | Delete

krb5_data data; /* Length, data */

[179] Fix | Delete

} krb5_keysalt;

[180] Fix | Delete

[181] Fix | Delete

/*

[182] Fix | Delete

* A principal database entry. Extensions to this structure currently use the

[183] Fix | Delete

* tl_data list. The e_data and e_length fields are not used by any calling

[184] Fix | Delete

* code except kdb5_util dump and load, which marshal and unmarshal the array

[185] Fix | Delete

* in the dump record. KDB modules may use these fields internally as long as

[186] Fix | Delete

* they set e_length appropriately (non-zero if the data should be marshalled

[187] Fix | Delete

* across dump and load, zero if not) and handle null e_data values in

[188] Fix | Delete

* caller-constructed principal entries.

[189] Fix | Delete

*/

[190] Fix | Delete

typedef struct _krb5_db_entry_new {

[191] Fix | Delete

krb5_magic magic; /* NOT saved */

[192] Fix | Delete

krb5_ui_2 len;

[193] Fix | Delete

krb5_ui_4 mask; /* members currently changed/set */

[194] Fix | Delete

krb5_flags attributes;

[195] Fix | Delete

krb5_deltat max_life;

[196] Fix | Delete

krb5_deltat max_renewable_life;

[197] Fix | Delete

krb5_timestamp expiration; /* When the client expires */

[198] Fix | Delete

krb5_timestamp pw_expiration; /* When its passwd expires */

[199] Fix | Delete

krb5_timestamp last_success; /* Last successful passwd */

[200] Fix | Delete

krb5_timestamp last_failed; /* Last failed passwd attempt */

[201] Fix | Delete

krb5_kvno fail_auth_count; /* # of failed passwd attempt */

[202] Fix | Delete

krb5_int16 n_tl_data;

[203] Fix | Delete

krb5_int16 n_key_data;

[204] Fix | Delete

krb5_ui_2 e_length; /* Length of extra data */

[205] Fix | Delete

krb5_octet * e_data; /* Extra data to be saved */

[206] Fix | Delete

[207] Fix | Delete

krb5_principal princ; /* Length, data */

[208] Fix | Delete

krb5_tl_data * tl_data; /* Linked list */

[209] Fix | Delete

[210] Fix | Delete

/* key_data must be sorted by kvno in descending order. */

[211] Fix | Delete

krb5_key_data * key_data; /* Array */

[212] Fix | Delete

} krb5_db_entry;

[213] Fix | Delete

[214] Fix | Delete

typedef struct _osa_policy_ent_t {

[215] Fix | Delete

int version;

[216] Fix | Delete

char *name;

[217] Fix | Delete

krb5_ui_4 pw_min_life;

[218] Fix | Delete

krb5_ui_4 pw_max_life;

[219] Fix | Delete

krb5_ui_4 pw_min_length;

[220] Fix | Delete

krb5_ui_4 pw_min_classes;

[221] Fix | Delete

krb5_ui_4 pw_history_num;

[222] Fix | Delete

krb5_ui_4 policy_refcnt; /* no longer used */

[223] Fix | Delete

/* Only valid if version > 1 */

[224] Fix | Delete

krb5_ui_4 pw_max_fail; /* pwdMaxFailure */

[225] Fix | Delete

krb5_ui_4 pw_failcnt_interval; /* pwdFailureCountInterval */

[226] Fix | Delete

krb5_ui_4 pw_lockout_duration; /* pwdLockoutDuration */

[227] Fix | Delete

/* Only valid if version > 2 */

[228] Fix | Delete

krb5_ui_4 attributes;

[229] Fix | Delete

krb5_ui_4 max_life;

[230] Fix | Delete

krb5_ui_4 max_renewable_life;

[231] Fix | Delete

char * allowed_keysalts;

[232] Fix | Delete

krb5_int16 n_tl_data;

[233] Fix | Delete

krb5_tl_data * tl_data;

[234] Fix | Delete

} osa_policy_ent_rec, *osa_policy_ent_t;

[235] Fix | Delete

[236] Fix | Delete

typedef void (*osa_adb_iter_policy_func) (void *, osa_policy_ent_t);

[237] Fix | Delete

[238] Fix | Delete

typedef struct __krb5_key_salt_tuple {

[239] Fix | Delete

krb5_enctype ks_enctype;

[240] Fix | Delete

krb5_int32 ks_salttype;

[241] Fix | Delete

} krb5_key_salt_tuple;

[242] Fix | Delete

[243] Fix | Delete

#define KRB5_KDB_MAGIC_NUMBER 0xdbdbdbdb

[244] Fix | Delete

#define KRB5_KDB_V1_BASE_LENGTH 38

[245] Fix | Delete

[246] Fix | Delete

#define KRB5_KDB_MAX_ALLOWED_KS_LEN 512

[247] Fix | Delete

[248] Fix | Delete

#define KRB5_TL_LAST_PWD_CHANGE 0x0001

[249] Fix | Delete

#define KRB5_TL_MOD_PRINC 0x0002

[250] Fix | Delete

#define KRB5_TL_KADM_DATA 0x0003

[251] Fix | Delete

#define KRB5_TL_KADM5_E_DATA 0x0004

[252] Fix | Delete

#define KRB5_TL_RB1_CHALLENGE 0x0005

[253] Fix | Delete

#ifdef SECURID

[254] Fix | Delete

#define KRB5_TL_SECURID_STATE 0x0006

[255] Fix | Delete

#endif /* SECURID */

[256] Fix | Delete

#define KRB5_TL_USER_CERTIFICATE 0x0007

[257] Fix | Delete

#define KRB5_TL_MKVNO 0x0008

[258] Fix | Delete

#define KRB5_TL_ACTKVNO 0x0009

[259] Fix | Delete

#define KRB5_TL_MKEY_AUX 0x000a

[260] Fix | Delete

[261] Fix | Delete

/* String attributes may not always be represented in tl-data. kadmin clients

[262] Fix | Delete

* must use the get_strings and set_string RPCs. */

[263] Fix | Delete

#define KRB5_TL_STRING_ATTRS 0x000b

[264] Fix | Delete

[265] Fix | Delete

#define KRB5_TL_PAC_LOGON_INFO 0x0100 /* NDR encoded validation info */

[266] Fix | Delete

#define KRB5_TL_SERVER_REFERRAL 0x0200 /* ASN.1 encoded ServerReferralInfo */

[267] Fix | Delete

#define KRB5_TL_SVR_REFERRAL_DATA 0x0300 /* ASN.1 encoded PA-SVR-REFERRAL-DATA */

[268] Fix | Delete

#define KRB5_TL_CONSTRAINED_DELEGATION_ACL 0x0400 /* Each entry is a permitted SPN */

[269] Fix | Delete

#define KRB5_TL_LM_KEY 0x0500 /* LM OWF */

[270] Fix | Delete

#define KRB5_TL_X509_SUBJECT_ISSUER_NAME 0x0600 /* <I>IssuerDN<S>SubjectDN */

[271] Fix | Delete

#define KRB5_TL_LAST_ADMIN_UNLOCK 0x0700 /* Timestamp of admin unlock */

[272] Fix | Delete

[273] Fix | Delete

#define KRB5_TL_DB_ARGS 0x7fff

[274] Fix | Delete

[275] Fix | Delete

/* version number for KRB5_TL_ACTKVNO data */

[276] Fix | Delete

#define KRB5_TL_ACTKVNO_VER 1

[277] Fix | Delete

[278] Fix | Delete

/* version number for KRB5_TL_MKEY_AUX data */

[279] Fix | Delete

#define KRB5_TL_MKEY_AUX_VER 1

[280] Fix | Delete

[281] Fix | Delete

typedef struct _krb5_actkvno_node {

[282] Fix | Delete

struct _krb5_actkvno_node *next;

[283] Fix | Delete

krb5_kvno act_kvno;

[284] Fix | Delete

krb5_timestamp act_time;

[285] Fix | Delete

} krb5_actkvno_node;

[286] Fix | Delete

[287] Fix | Delete

typedef struct _krb5_mkey_aux_node {

[288] Fix | Delete

struct _krb5_mkey_aux_node *next;

[289] Fix | Delete

krb5_kvno mkey_kvno; /* kvno of mkey protecting the latest_mkey */

[290] Fix | Delete

krb5_key_data latest_mkey; /* most recent mkey */

[291] Fix | Delete

} krb5_mkey_aux_node;

[292] Fix | Delete

[293] Fix | Delete

typedef struct _krb5_keylist_node {

[294] Fix | Delete

krb5_keyblock keyblock;

[295] Fix | Delete

krb5_kvno kvno;

[296] Fix | Delete

struct _krb5_keylist_node *next;

[297] Fix | Delete

} krb5_keylist_node;

[298] Fix | Delete

[299] Fix | Delete

/*

[300] Fix | Delete

* Determines the number of failed KDC requests before DISALLOW_ALL_TIX is set

[301] Fix | Delete

* on the principal.

[302] Fix | Delete

*/

[303] Fix | Delete

#define KRB5_MAX_FAIL_COUNT 5

[304] Fix | Delete

[305] Fix | Delete

/* XXX depends on knowledge of krb5_parse_name() formats */

[306] Fix | Delete

#define KRB5_KDB_M_NAME "K/M" /* Kerberos/Master */

[307] Fix | Delete

[308] Fix | Delete

/* prompts used by default when reading the KDC password from the keyboard. */

[309] Fix | Delete

#define KRB5_KDC_MKEY_1 "Enter KDC database master key"

[310] Fix | Delete

#define KRB5_KDC_MKEY_2 "Re-enter KDC database master key to verify"

[311] Fix | Delete

[312] Fix | Delete

[313] Fix | Delete

extern char *krb5_mkey_pwd_prompt1;

[314] Fix | Delete

extern char *krb5_mkey_pwd_prompt2;

[315] Fix | Delete

[316] Fix | Delete

/*

[317] Fix | Delete

* These macros specify the encoding of data within the database.

[318] Fix | Delete

*

[319] Fix | Delete

* Data encoding is little-endian.

[320] Fix | Delete

*/

[321] Fix | Delete

#ifdef _KRB5_INT_H

[322] Fix | Delete

#include "k5-platform.h"

[323] Fix | Delete

#define krb5_kdb_decode_int16(cp, i16) \

[324] Fix | Delete

*((krb5_int16 *) &(i16)) = load_16_le(cp)

[325] Fix | Delete

#define krb5_kdb_decode_int32(cp, i32) \

[326] Fix | Delete

*((krb5_int32 *) &(i32)) = load_32_le(cp)

[327] Fix | Delete

#define krb5_kdb_encode_int16(i16, cp) store_16_le(i16, cp)

[328] Fix | Delete

#define krb5_kdb_encode_int32(i32, cp) store_32_le(i32, cp)

[329] Fix | Delete

#endif /* _KRB5_INT_H */

[330] Fix | Delete

[331] Fix | Delete

#define KRB5_KDB_OPEN_RW 0

[332] Fix | Delete

#define KRB5_KDB_OPEN_RO 1

[333] Fix | Delete

[334] Fix | Delete

#ifndef KRB5_KDB_SRV_TYPE_KDC

[335] Fix | Delete

#define KRB5_KDB_SRV_TYPE_KDC 0x0100

[336] Fix | Delete

#endif

[337] Fix | Delete

[338] Fix | Delete

#ifndef KRB5_KDB_SRV_TYPE_ADMIN

[339] Fix | Delete

#define KRB5_KDB_SRV_TYPE_ADMIN 0x0200

[340] Fix | Delete

#endif

[341] Fix | Delete

[342] Fix | Delete

/* 0x0300 was KRB5_KDB_SRV_TYPE_PASSWD but it is no longer used. */

[343] Fix | Delete

[344] Fix | Delete

#ifndef KRB5_KDB_SRV_TYPE_OTHER

[345] Fix | Delete

#define KRB5_KDB_SRV_TYPE_OTHER 0x0400

[346] Fix | Delete

#endif

[347] Fix | Delete

[348] Fix | Delete

#define KRB5_KDB_OPT_SET_DB_NAME 0

[349] Fix | Delete

#define KRB5_KDB_OPT_SET_LOCK_MODE 1

[350] Fix | Delete

[351] Fix | Delete

#define KRB5_DB_LOCKMODE_SHARED 0x0001

[352] Fix | Delete

#define KRB5_DB_LOCKMODE_EXCLUSIVE 0x0002

[353] Fix | Delete

#define KRB5_DB_LOCKMODE_PERMANENT 0x0008

[354] Fix | Delete

[355] Fix | Delete

/* libkdb.spec */

[356] Fix | Delete

krb5_error_code krb5_db_setup_lib_handle(krb5_context kcontext);

[357] Fix | Delete

krb5_error_code krb5_db_open( krb5_context kcontext, char **db_args, int mode );

[358] Fix | Delete

krb5_error_code krb5_db_init ( krb5_context kcontext );

[359] Fix | Delete

krb5_error_code krb5_db_create ( krb5_context kcontext, char **db_args );

[360] Fix | Delete

krb5_error_code krb5_db_inited ( krb5_context kcontext );

[361] Fix | Delete

krb5_error_code kdb5_db_create ( krb5_context kcontext, char **db_args );

[362] Fix | Delete

krb5_error_code krb5_db_fini ( krb5_context kcontext );

[363] Fix | Delete

const char * krb5_db_errcode2string ( krb5_context kcontext, long err_code );

[364] Fix | Delete

krb5_error_code krb5_db_destroy ( krb5_context kcontext, char **db_args );

[365] Fix | Delete

krb5_error_code krb5_db_promote ( krb5_context kcontext, char **db_args );

[366] Fix | Delete

krb5_error_code krb5_db_get_age ( krb5_context kcontext, char *db_name, time_t *t );

[367] Fix | Delete

krb5_error_code krb5_db_lock ( krb5_context kcontext, int lock_mode );

[368] Fix | Delete

krb5_error_code krb5_db_unlock ( krb5_context kcontext );

[369] Fix | Delete

krb5_error_code krb5_db_get_principal ( krb5_context kcontext,

[370] Fix | Delete

krb5_const_principal search_for,

[371] Fix | Delete

unsigned int flags,

[372] Fix | Delete

krb5_db_entry **entry );

[373] Fix | Delete

void krb5_db_free_principal ( krb5_context kcontext, krb5_db_entry *entry );

[374] Fix | Delete

krb5_error_code krb5_db_put_principal ( krb5_context kcontext,

[375] Fix | Delete

krb5_db_entry *entry );

[376] Fix | Delete

krb5_error_code krb5_db_delete_principal ( krb5_context kcontext,

[377] Fix | Delete

krb5_principal search_for );

[378] Fix | Delete

krb5_error_code krb5_db_rename_principal ( krb5_context kcontext,

[379] Fix | Delete

krb5_principal source,

[380] Fix | Delete

krb5_principal target );

[381] Fix | Delete

[382] Fix | Delete

/*

[383] Fix | Delete

* Iterate over principals in the KDB. If the callback may write to the DB,

[384] Fix | Delete

* the caller must get an exclusive lock with krb5_db_lock before iterating,

[385] Fix | Delete

* and release it with krb5_db_unlock after iterating.

[386] Fix | Delete

*/

[387] Fix | Delete

krb5_error_code krb5_db_iterate ( krb5_context kcontext,

[388] Fix | Delete

char *match_entry,

[389] Fix | Delete

int (*func) (krb5_pointer, krb5_db_entry *),

[390] Fix | Delete

krb5_pointer func_arg, krb5_flags iterflags );

[391] Fix | Delete

[392] Fix | Delete

[393] Fix | Delete

krb5_error_code krb5_db_store_master_key ( krb5_context kcontext,

[394] Fix | Delete

char *keyfile,

[395] Fix | Delete

krb5_principal mname,

[396] Fix | Delete

krb5_kvno kvno,

[397] Fix | Delete

krb5_keyblock *key,

[398] Fix | Delete

char *master_pwd);

[399] Fix | Delete

krb5_error_code krb5_db_store_master_key_list ( krb5_context kcontext,

[400] Fix | Delete

char *keyfile,

[401] Fix | Delete

krb5_principal mname,

[402] Fix | Delete

char *master_pwd);

[403] Fix | Delete

krb5_error_code krb5_db_fetch_mkey ( krb5_context context,

[404] Fix | Delete

krb5_principal mname,

[405] Fix | Delete

krb5_enctype etype,

[406] Fix | Delete

krb5_boolean fromkeyboard,

[407] Fix | Delete

krb5_boolean twice,

[408] Fix | Delete

char *db_args,

[409] Fix | Delete

krb5_kvno *kvno,

[410] Fix | Delete

krb5_data *salt,

[411] Fix | Delete

krb5_keyblock *key);

[412] Fix | Delete

krb5_error_code

[413] Fix | Delete

krb5_db_fetch_mkey_list( krb5_context context,

[414] Fix | Delete

krb5_principal mname,

[415] Fix | Delete

const krb5_keyblock * mkey );

[416] Fix | Delete

[417] Fix | Delete

krb5_error_code

[418] Fix | Delete

krb5_dbe_find_enctype( krb5_context kcontext,

[419] Fix | Delete

krb5_db_entry *dbentp,

[420] Fix | Delete

krb5_int32 ktype,

[421] Fix | Delete

krb5_int32 stype,

[422] Fix | Delete

krb5_int32 kvno,

[423] Fix | Delete

krb5_key_data **kdatap);

[424] Fix | Delete

[425] Fix | Delete

[426] Fix | Delete

krb5_error_code krb5_dbe_search_enctype ( krb5_context kcontext,

[427] Fix | Delete

krb5_db_entry *dbentp,

[428] Fix | Delete

krb5_int32 *start,

[429] Fix | Delete

krb5_int32 ktype,

[430] Fix | Delete

krb5_int32 stype,

[431] Fix | Delete

krb5_int32 kvno,

[432] Fix | Delete

krb5_key_data **kdatap);

[433] Fix | Delete

[434] Fix | Delete

krb5_error_code

[435] Fix | Delete

krb5_db_setup_mkey_name ( krb5_context context,

[436] Fix | Delete

const char *keyname,

[437] Fix | Delete

const char *realm,

[438] Fix | Delete

char **fullname,

[439] Fix | Delete

krb5_principal *principal);

[440] Fix | Delete

[441] Fix | Delete

/**

[442] Fix | Delete

* Decrypts the key given in @@a key_data. If @a mkey is specified, that

[443] Fix | Delete

* master key is used. If @a mkey is NULL, then all master keys are tried.

[444] Fix | Delete

*/

[445] Fix | Delete

krb5_error_code

[446] Fix | Delete

krb5_dbe_decrypt_key_data( krb5_context context,

[447] Fix | Delete

const krb5_keyblock * mkey,

[448] Fix | Delete

const krb5_key_data * key_data,

[449] Fix | Delete

krb5_keyblock * dbkey,

[450] Fix | Delete

krb5_keysalt * keysalt);

[451] Fix | Delete

[452] Fix | Delete

krb5_error_code

[453] Fix | Delete

krb5_dbe_encrypt_key_data( krb5_context context,

[454] Fix | Delete

const krb5_keyblock * mkey,

[455] Fix | Delete

const krb5_keyblock * dbkey,

[456] Fix | Delete

const krb5_keysalt * keysalt,

[457] Fix | Delete

int keyver,

[458] Fix | Delete

krb5_key_data * key_data);

[459] Fix | Delete

[460] Fix | Delete

krb5_error_code

[461] Fix | Delete

krb5_dbe_fetch_act_key_list(krb5_context context,

[462] Fix | Delete

krb5_principal princ,

[463] Fix | Delete

krb5_actkvno_node **act_key_list);

[464] Fix | Delete

[465] Fix | Delete

krb5_error_code

[466] Fix | Delete

krb5_dbe_find_act_mkey( krb5_context context,

[467] Fix | Delete

krb5_actkvno_node * act_mkey_list,

[468] Fix | Delete

krb5_kvno * act_kvno,

[469] Fix | Delete

krb5_keyblock ** act_mkey);

[470] Fix | Delete

[471] Fix | Delete

krb5_error_code

[472] Fix | Delete

krb5_dbe_find_mkey( krb5_context context,

[473] Fix | Delete

krb5_db_entry * entry,

[474] Fix | Delete

krb5_keyblock ** mkey);

[475] Fix | Delete

[476] Fix | Delete

/* Set *mkvno to mkvno in entry tl_data, or 0 if not present. */

[477] Fix | Delete

krb5_error_code

[478] Fix | Delete

krb5_dbe_lookup_mkvno( krb5_context context,

[479] Fix | Delete

krb5_db_entry * entry,

[480] Fix | Delete

krb5_kvno * mkvno);

[481] Fix | Delete

[482] Fix | Delete

krb5_keylist_node *

[483] Fix | Delete

krb5_db_mkey_list_alias( krb5_context kcontext );

[484] Fix | Delete

[485] Fix | Delete

/* Set *mkvno to mkvno in entry tl_data, or minimum value from mkey_list. */

[486] Fix | Delete

krb5_error_code

[487] Fix | Delete

krb5_dbe_get_mkvno( krb5_context context,

[488] Fix | Delete

krb5_db_entry * entry,

[489] Fix | Delete

krb5_kvno * mkvno);

[490] Fix | Delete

[491] Fix | Delete

krb5_error_code

[492] Fix | Delete

krb5_dbe_lookup_mod_princ_data( krb5_context context,

[493] Fix | Delete

krb5_db_entry * entry,

[494] Fix | Delete

krb5_timestamp * mod_time,

[495] Fix | Delete

krb5_principal * mod_princ);

[496] Fix | Delete

[497] Fix | Delete

krb5_error_code

[498] Fix | Delete

krb5_dbe_lookup_mkey_aux( krb5_context context,

[499] Fix | Delete