X-Git-Url: https://git.decadent.org.uk/gitweb/?p=nfs-utils.git;a=blobdiff_plain;f=utils%2Fgssd%2Fkrb5_util.h;fp=utils%2Fgssd%2Fkrb5_util.h;h=da04530fdaeddd9d0adfac4f2ac31da8696643a8;hp=0000000000000000000000000000000000000000;hb=f1bfe0916c04d93de7a4fae5315fff6e4ccac23f;hpb=981d25a37fe4a71eddd162672a658da223453985 diff --git a/utils/gssd/krb5_util.h b/utils/gssd/krb5_util.h new file mode 100644 index 0000000..da04530 --- /dev/null +++ b/utils/gssd/krb5_util.h @@ -0,0 +1,30 @@ +#ifndef KRB5_UTIL_H +#define KRB5_UTIL_H + +#include + +/* + * List of principals from our keytab that we + * may try to get credentials for + */ +struct gssd_k5_kt_princ { + struct gssd_k5_kt_princ *next; + krb5_principal princ; + char *ccname; + char *realm; + krb5_timestamp endtime; +}; + + +void gssd_setup_krb5_user_gss_ccache(uid_t uid, char *servername); +int gssd_get_krb5_machine_cred_list(char ***list); +int gssd_refresh_krb5_machine_creds(void); +void gssd_free_krb5_machine_cred_list(char **list); +void gssd_setup_krb5_machine_gss_ccache(char *servername); +void gssd_destroy_krb5_machine_creds(void); + +#ifdef HAVE_SET_ALLOWABLE_ENCTYPES +int limit_krb5_enctypes(struct rpc_gss_sec *sec, uid_t uid); +#endif + +#endif /* KRB5_UTIL_H */