Tell Heimdal gss code the correct credential to use
[nfs-utils.git] / utils / gssd / krb5_util.h
1 #ifndef KRB5_UTIL_H
2 #define KRB5_UTIL_H
3
4 #include <krb5.h>
5
6 /*
7  * List of principals from our keytab that we
8  * will try to use to obtain credentials
9  * (known as a principal list entry (ple))
10  */
11 struct gssd_k5_kt_princ {
12         struct gssd_k5_kt_princ *next;
13         krb5_principal princ;
14         char *ccname;
15         char *realm;
16         krb5_timestamp endtime;
17 };
18
19
20 void gssd_setup_krb5_user_gss_ccache(uid_t uid, char *servername);
21 int  gssd_get_krb5_machine_cred_list(char ***list);
22 void gssd_free_krb5_machine_cred_list(char **list);
23 void gssd_setup_krb5_machine_gss_ccache(char *servername);
24 void gssd_destroy_krb5_machine_creds(void);
25 int  gssd_refresh_krb5_machine_credential(char *hostname,
26                                           struct gssd_k5_kt_princ *ple);
27
28 #ifdef HAVE_SET_ALLOWABLE_ENCTYPES
29 int limit_krb5_enctypes(struct rpc_gss_sec *sec, uid_t uid);
30 #endif
31
32 /*
33  * Hide away some of the MIT vs. Heimdal differences
34  * here with macros...
35  */
36
37 #ifdef HAVE_KRB5
38 #define k5_free_unparsed_name(ctx, name)        krb5_free_unparsed_name((ctx), (name))
39 #define k5_free_default_realm(ctx, realm)       krb5_free_default_realm((ctx), (realm))
40 #define k5_free_kt_entry(ctx, kte)              krb5_free_keytab_entry_contents((ctx),(kte))
41 #else   /* Heimdal */
42 #define k5_free_unparsed_name(ctx, name)        free(name)
43 #define k5_free_default_realm(ctx, realm)       free(realm)
44 #define k5_free_kt_entry(ctx, kte)              krb5_kt_free_entry((ctx),(kte))
45 #undef USE_GSS_KRB5_CCACHE_NAME
46 #define USE_GSS_KRB5_CCACHE_NAME 1
47 #endif
48
49 #endif /* KRB5_UTIL_H */