1 | /* SPDX-License-Identifier: GPL-2.0 */ |
2 | /* |
3 | * linux/include/linux/sunrpc/auth_gss.h |
4 | * |
5 | * Declarations for RPCSEC_GSS |
6 | * |
7 | * Dug Song <dugsong@monkey.org> |
8 | * Andy Adamson <andros@umich.edu> |
9 | * Bruce Fields <bfields@umich.edu> |
10 | * Copyright (c) 2000 The Regents of the University of Michigan |
11 | */ |
12 | |
13 | #ifndef _LINUX_SUNRPC_AUTH_GSS_H |
14 | #define _LINUX_SUNRPC_AUTH_GSS_H |
15 | |
16 | #include <linux/refcount.h> |
17 | #include <linux/sunrpc/auth.h> |
18 | #include <linux/sunrpc/svc.h> |
19 | #include <linux/sunrpc/gss_api.h> |
20 | |
21 | #define RPC_GSS_VERSION 1 |
22 | |
23 | #define MAXSEQ 0x80000000 /* maximum legal sequence number, from rfc 2203 */ |
24 | |
25 | enum rpc_gss_proc { |
26 | RPC_GSS_PROC_DATA = 0, |
27 | RPC_GSS_PROC_INIT = 1, |
28 | RPC_GSS_PROC_CONTINUE_INIT = 2, |
29 | RPC_GSS_PROC_DESTROY = 3 |
30 | }; |
31 | |
32 | enum rpc_gss_svc { |
33 | RPC_GSS_SVC_NONE = 1, |
34 | RPC_GSS_SVC_INTEGRITY = 2, |
35 | RPC_GSS_SVC_PRIVACY = 3 |
36 | }; |
37 | |
38 | /* on-the-wire gss cred: */ |
39 | struct rpc_gss_wire_cred { |
40 | u32 gc_v; /* version */ |
41 | u32 gc_proc; /* control procedure */ |
42 | u32 gc_seq; /* sequence number */ |
43 | u32 gc_svc; /* service */ |
44 | struct xdr_netobj gc_ctx; /* context handle */ |
45 | }; |
46 | |
47 | /* on-the-wire gss verifier: */ |
48 | struct rpc_gss_wire_verf { |
49 | u32 gv_flavor; |
50 | struct xdr_netobj gv_verf; |
51 | }; |
52 | |
53 | /* return from gss NULL PROC init sec context */ |
54 | struct rpc_gss_init_res { |
55 | struct xdr_netobj gr_ctx; /* context handle */ |
56 | u32 gr_major; /* major status */ |
57 | u32 gr_minor; /* minor status */ |
58 | u32 gr_win; /* sequence window */ |
59 | struct xdr_netobj gr_token; /* token */ |
60 | }; |
61 | |
62 | /* The gss_cl_ctx struct holds all the information the rpcsec_gss client |
63 | * code needs to know about a single security context. In particular, |
64 | * gc_gss_ctx is the context handle that is used to do gss-api calls, while |
65 | * gc_wire_ctx is the context handle that is used to identify the context on |
66 | * the wire when communicating with a server. */ |
67 | |
68 | struct gss_cl_ctx { |
69 | refcount_t count; |
70 | enum rpc_gss_proc gc_proc; |
71 | u32 gc_seq; |
72 | u32 gc_seq_xmit; |
73 | spinlock_t gc_seq_lock; |
74 | struct gss_ctx *gc_gss_ctx; |
75 | struct xdr_netobj gc_wire_ctx; |
76 | struct xdr_netobj gc_acceptor; |
77 | u32 gc_win; |
78 | unsigned long gc_expiry; |
79 | struct rcu_head gc_rcu; |
80 | }; |
81 | |
82 | struct gss_upcall_msg; |
83 | struct gss_cred { |
84 | struct rpc_cred gc_base; |
85 | enum rpc_gss_svc gc_service; |
86 | struct gss_cl_ctx __rcu *gc_ctx; |
87 | struct gss_upcall_msg *gc_upcall; |
88 | const char *gc_principal; |
89 | unsigned long gc_upcall_timestamp; |
90 | }; |
91 | |
92 | #endif /* _LINUX_SUNRPC_AUTH_GSS_H */ |
93 | |
94 | |