1 /* -*- mode: c; c-basic-offset: 8; indent-tabs-mode: nil; -*-
2 * vim:expandtab:shiftwidth=8:tabstop=8:
4 * Modified from NFSv4 project for Lustre
5 * Copyright 2004, Cluster File Systems, Inc.
7 * Author: Eric Mei <ericm@clusterfs.com>
10 #ifndef __SEC_GSS_GSS_INTERNAL_H_
11 #define __SEC_GSS_GSS_INTERNAL_H_
13 /* remove this mess when libkcrypt is ready --umka */
16 * Algorithm masks and types.
18 #define CRYPTO_ALG_TYPE_MASK 0x000000ff
19 #define CRYPTO_ALG_TYPE_CIPHER 0x00000001
20 #define CRYPTO_ALG_TYPE_DIGEST 0x00000002
21 #define CRYPTO_ALG_TYPE_COMPRESS 0x00000004
24 * Transform masks and values (for crt_flags).
26 #define CRYPTO_TFM_MODE_MASK 0x000000ff
27 #define CRYPTO_TFM_REQ_MASK 0x000fff00
28 #define CRYPTO_TFM_RES_MASK 0xfff00000
30 #define CRYPTO_TFM_MODE_ECB 0x00000001
31 #define CRYPTO_TFM_MODE_CBC 0x00000002
32 #define CRYPTO_TFM_MODE_CFB 0x00000004
33 #define CRYPTO_TFM_MODE_CTR 0x00000008
35 #define CRYPTO_TFM_REQ_WEAK_KEY 0x00000100
36 #define CRYPTO_TFM_RES_WEAK_KEY 0x00100000
37 #define CRYPTO_TFM_RES_BAD_KEY_LEN 0x00200000
38 #define CRYPTO_TFM_RES_BAD_KEY_SCHED 0x00400000
39 #define CRYPTO_TFM_RES_BAD_BLOCK_LEN 0x00800000
40 #define CRYPTO_TFM_RES_BAD_FLAGS 0x01000000
43 * Miscellaneous stuff.
45 #define CRYPTO_UNSPEC 0
46 #define CRYPTO_MAX_ALG_NAME 64
55 static inline struct crypto_tfm *
56 crypto_alloc_tfm(const char *name, __u32 flags)
62 crypto_free_tfm(struct crypto_tfm *tfm)
68 crypto_digest_setkey(struct crypto_tfm *tfm,
69 const __u8 *key, unsigned int keylen)
74 static inline unsigned int
75 crypto_tfm_alg_blocksize(struct crypto_tfm *tfm)
80 static inline unsigned int
81 crypto_tfm_alg_ivsize(struct crypto_tfm *tfm)
86 #endif /* __KERNEL__ */
91 typedef struct rawobj_s {
96 int rawobj_alloc(rawobj_t *obj, char *buf, int len);
97 void rawobj_free(rawobj_t *obj);
98 int rawobj_equal(rawobj_t *a, rawobj_t *b);
99 int rawobj_dup(rawobj_t *dest, rawobj_t *src);
100 int rawobj_serialize(rawobj_t *obj, __u32 **buf, __u32 *buflen);
101 int rawobj_extract(rawobj_t *obj, __u32 **buf, __u32 *buflen);
102 int rawobj_extract_local(rawobj_t *obj, __u32 **buf, __u32 *buflen);
104 typedef struct rawobj_buf_s {
112 * mark of the interface between kernel and lgssd/lsvcgssd
114 #define GSSD_INTERFACE_VERSION (1)
116 #define MAXSEQ 0x80000000 /* maximum legal sequence number, from rfc 2203 */
119 RPC_GSS_PROC_DATA = 0,
120 RPC_GSS_PROC_INIT = 1,
121 RPC_GSS_PROC_CONTINUE_INIT = 2,
122 RPC_GSS_PROC_DESTROY = 3,
126 RPC_GSS_SVC_NONE = 1,
127 RPC_GSS_SVC_INTEGRITY = 2,
128 RPC_GSS_SVC_PRIVACY = 3,
131 /* on-the-wire gss cred: */
132 struct rpc_gss_wire_cred {
133 __u32 gc_v; /* version */
134 __u32 gc_proc; /* control procedure */
135 __u32 gc_seq; /* sequence number */
136 __u32 gc_svc; /* service */
137 rawobj_t gc_ctx; /* context handle */
140 /* on-the-wire gss verifier: */
141 struct rpc_gss_wire_verf {
147 atomic_t gc_refcount;
150 spinlock_t gc_seq_lock;
151 struct gss_ctx *gc_gss_ctx;
152 rawobj_t gc_wire_ctx;
157 struct ptlrpc_cred gc_base;
158 ptlrpcs_flavor_t gc_flavor;
159 struct gss_cl_ctx *gc_ctx;
163 * This only guaranteed be enough for current krb5 des-cbc-crc . We might
164 * adjust this when new enc type or mech added in.
166 #define GSS_PRIVBUF_PREFIX_LEN (32)
167 #define GSS_PRIVBUF_SUFFIX_LEN (32)
169 /* This is too coarse. We'll let mech determine it */
170 #define GSS_MAX_AUTH_PAYLOAD (128)
172 /* gss_mech_switch.c */
173 int init_kerberos_module(void);
174 void cleanup_kerberos_module(void);
176 /* gss_generic_token.c */
177 int g_token_size(rawobj_t *mech, unsigned int body_size);
178 void g_make_token_header(rawobj_t *mech, int body_size, unsigned char **buf);
179 __u32 g_verify_token_header(rawobj_t *mech, int *body_size,
180 unsigned char **buf_in, int toksize);
183 int gss_svc_init(void);
184 void gss_svc_exit(void);
186 #endif /* __SEC_GSS_GSS_INTERNAL_H_ */