/usr/include/dpm/Csec_common.h is in libdpm-dev 1.8.10-1build3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 | #ifndef _CSEC_COMMON_H
#define _CSEC_COMMON_H
#include <osdep.h>
#include <signal.h>
#include <Castor_limits.h>
#include <marshall.h>
#include <Csec_constants.h>
/* Structure used in Csec - similar to a gss_buffer */
typedef struct csec_buffer_desc_struct
{
size_t length;
void *value;
} csec_buffer_desc, *csec_buffer_t;
/* To hold the negotiation request and response,
for possible later verification
*/
typedef struct Csec_neg_dialogue
{
csec_buffer_desc req;
csec_buffer_desc reply;
int req_type, reply_type;
} Csec_neg_dialogue;
/* Structure containing protocol information */
typedef struct Csec_protocol {
char id[CA_MAXCSECPROTOLEN+1];
} Csec_protocol;
/** Structure holding the context */
typedef struct Csec_context {
int magic;
U_LONG flags; /* Flags containing status of context structure */
void *shhandle; /* Handle to the shared library */
void *credentials; /* gss_cred_id_t credentials; */
void *connection_context; /* gss_ctx_id_t context; */
U_LONG peer_sec_flags;
size_t deleg_credentials_len; /* size of exported deleg credentials */
void *deleg_credentials; /* malloc buffer containing exported credentials from delegation */
U_LONG peer_version; /* Peer Csec protocol version */
U_LONG sec_flags; /* Security flags */
/* Possible protocols avilable at this end of the connecrtion */
Csec_protocol *total_protocols; /* Contains the list of protocols supported by this end of the connection */
int nb_total_protocols; /* Number of entries in the previous list */
/* Variables containing ths status of the security protocol negotiation
between client and server */
U_LONG protocol_negociation_status;
Csec_protocol *protocols; /* Protocols to offer/check-against the peer */
int nb_protocols; /* Number of protocols above */
int current_protocol; /* Index of the protocol in the list mentioned above */
Csec_protocol *peer_protocols; /* List of protocols offered by peer */
int nb_peer_protocols; /* Number of entries in list above */
/* Local and peer identity information */
char client_authorization_mech[CA_MAXCSECPROTOLEN+1]; /* Authorization mech associated to the name */
char client_authorization_id[CA_MAXCSECNAMELEN+1]; /* Private authorization name the client may set */
char local_name[CA_MAXCSECNAMELEN+1];
char peer_name[CA_MAXCSECNAMELEN+1]; /* Requested server name (in the Csec client) */
char effective_peer_name[CA_MAXCSECNAMELEN+1]; /* Name returned by the GSI layer */
U_LONG context_flags; /* Context flags from the GSS API */
char user_ca[CA_MAXCSECNAMELEN+1];
int peer_uid;
int peer_gid;
int thread_safe;
int server_service_type;
/* Pointers to the functions in the loaded shared libraries */
int (*Csec_activate)(struct Csec_context *);
int (*Csec_deactivate)(struct Csec_context *);
int (*Csec_init_context)(struct Csec_context *);
int (*Csec_reinit_context)(struct Csec_context *);
int (*Csec_delete_connection_context)(struct Csec_context *);
int (*Csec_delete_creds)(struct Csec_context *);
int (*Csec_acquire_creds)(struct Csec_context *, char *, int);
int (*Csec_server_establish_context_ext)(struct Csec_context *, int, char *, int);
int (*Csec_client_establish_context)(struct Csec_context *, int);
int (*Csec_map2name)(struct Csec_context *, const char *, char *, int);
int (*Csec_get_service_name)(struct Csec_context *, int, char *, char *, char *, int);
/* Pointers to VOMS data */
char *voname;
char **fqan;
int nbfqan;
/* Pointers to VOMS data received in the negotiation handshake */
char *auth_voname;
char **auth_fqan;
int auth_nbfqan;
int auth_voms_in_use;
U_LONG min_peer_version;
} Csec_context_t;
/** linked list nodes for error messages */
struct Csec_error_node_s {
char *err;
struct Csec_error_node_s *prev;
};
/** Structure with thread specific information */
struct Csec_api_thread_info {
int sec_errno;
int init_done;
Csec_context_t default_context;
struct Csec_error_node_s *err_first, *err_last;
char *err_summary;
size_t err_summary_size;
};
struct Csec_api_global_info {
volatile sig_atomic_t init_done;
int trace_mode;
char trace_file[CA_MAXNAMELEN+1];
U_LONG min_peer_version;
};
int DLL_DECL check_ctx _PROTO ((Csec_context_t *, char *));
void DLL_DECL Csec_unload_shlib _PROTO ((Csec_context_t *));
void DLL_DECL *Csec_get_shlib _PROTO ((Csec_context_t *));
/* int DLL_DECL Csec_init_context_ext _PROTO ((Csec_context_t *, int, int)) ; */
int DLL_DECL Csec_errmsg _PROTO((char *func, char *msg, ...));
int DLL_DECL Csec_clear_errmsg _PROTO(());
int DLL_DECL Csec_apiinit _PROTO((struct Csec_api_thread_info **thip));
int DLL_DECL Csec_seterrbuf _PROTO((char *buffer, int buflen));
int DLL_DECL Csec_trace _PROTO((char *func, char *msg, ...));
int DLL_DECL Csec_setup_trace _PROTO(());
int DLL_DECL _Csec_recv_token _PROTO ((int s, csec_buffer_t tok, int timeout, int *token_type));
int DLL_DECL _Csec_send_token _PROTO ((int s, csec_buffer_t tok, int timeout, int token_type));
void DLL_DECL _Csec_print_token _PROTO((csec_buffer_t tok));
/* Protocol functions */
int DLL_DECL Csec_client_negociate_protocol _PROTO((int, int, Csec_context_t *, Csec_neg_dialogue *));
int DLL_DECL Csec_setup_protocols_to_offer _PROTO((Csec_context_t *));
int DLL_DECL Csec_server_negociate_protocol _PROTO((int, int, Csec_context_t *, csec_buffer_t, Csec_neg_dialogue *));
int DLL_DECL Csec_initialize_protocols_from_list _PROTO((Csec_context_t *, Csec_protocol *));
/* Misc utils */
int DLL_DECL Csec_server_establish_context_ext _PROTO ((Csec_context_t *ctx,
int s,
char *buf,
int len));
int DLL_DECL Csec_map2name _PROTO((Csec_context_t *ctx,
const char *principal,
char *name,
int maxnamelen));
int DLL_DECL Csec_get_service_name _PROTO ((Csec_context_t *ctx,
int service_type,
char *host,
char *domain,
char *service_name,
int service_namelen));
int DLL_DECL Csec_map2id _PROTO((Csec_context_t *ctx, char *principal, uid_t *uid, gid_t *gid));
int DLL_DECL Csec_name2id _PROTO((char *name, uid_t *uid, gid_t *gid));
int DLL_DECL Csec_get_peer_service_name _PROTO ((Csec_context_t *ctx, int s, int service_type,
char *service_name, int service_namelen));
int DLL_DECL Csec_get_local_service_name _PROTO ((Csec_context_t *ctx, int service_type,
char *service_name, int service_namelen));
int DLL_DECL Csec_server_set_service_name _PROTO ((Csec_context_t *, int));
int DLL_DECL Csec_client_set_service_name _PROTO ((Csec_context_t *, int));
int DLL_DECL Csec_context_is_client _PROTO ((Csec_context_t *ctx));
int DLL_DECL Csec_init_globals _PROTO ((struct Csec_api_global_info **));
#endif /* _CSEC_COMMON_H */
|