1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
|
/* saslint.h - internal SASL library definitions
* Tim Martin
*/
/*
* Copyright (c) 2000 Carnegie Mellon University. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. The name "Carnegie Mellon University" must not be used to
* endorse or promote products derived from this software without
* prior written permission. For permission or any other legal
* details, please contact
* Office of Technology Transfer
* Carnegie Mellon University
* 5000 Forbes Avenue
* Pittsburgh, PA 15213-3890
* (412) 268-4387, fax: (412) 268-7395
* tech-transfer@andrew.cmu.edu
*
* 4. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by Computing Services
* at Carnegie Mellon University (http://www.cmu.edu/computing/)."
*
* CARNEGIE MELLON UNIVERSITY DISCLAIMS ALL WARRANTIES WITH REGARD TO
* THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
* AND FITNESS, IN NO EVENT SHALL CARNEGIE MELLON UNIVERSITY BE LIABLE
* FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN
* AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING
* OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
#ifndef SASLINT_H
#define SASLINT_H
#include <sasl.h>
typedef struct {
const sasl_callback_t *callbacks;
const char *appname;
} sasl_global_callbacks_t;
typedef struct sasl_mech_secret {
unsigned long len;
unsigned long mechoffset; /* 0 if plain mechanism */
unsigned long useroffset;
char buf[1];
} sasl_mech_secret_t;
typedef struct sasl_credentials sasl_credentials_t;
typedef struct sasl_out_params {
int doneflag; /* exchange complete */
sasl_ssf_t mech_ssf; /* security layer strength factor of mech */
unsigned maxoutbuf; /* max plain output to security layer */
/* mic functions differs from encode in that the output is intended to be
* appended to the input rather than an encapsulated variant of it.
* a plugin which supports getmic()/verifymic() but not
* encode()/decode() should be exportable. Ditto for framework.
* datalen param of verifymic returns length of data in buffer
*/
void *encode_context;
int (*encode)(void *context, const char *input, unsigned inputlen,
char **output, unsigned *outputlen);
int (*getmic)(void *context, const char *input, unsigned inputlen,
char **output, unsigned *outputlen);
void *decode_context;
int (*decode)(void *context, const char *input, unsigned inputlen,
char **output, unsigned *outputlen);
int (*verifymic)(void *context, const char *input, unsigned inputlen,
unsigned *datalen);
char *user; /* canonicalized user name */
char *authid; /* canonicalized authentication id */
char *realm; /* security realm */
/* set to 0 initially, this allows a plugin with extended parameters
* to work with an older framework by updating version as parameters
* are added.
*/
int param_version;
/* Credentials passed by clients. NOTE: this should ONLY
* be set by server plugins. */
sasl_credentials_t *credentials;
} sasl_out_params_t;
struct sasl_conn {
void (*destroy_conn)(sasl_conn_t *); /* destroy function */
int open; /* connection open or not */
char *service;
int secflags; /* security layer flags passed to sasl_*_new */
int got_ip_local, got_ip_remote;
struct sockaddr_in ip_local, ip_remote;
sasl_external_properties_t external;
void *context;
sasl_out_params_t oparams;
sasl_security_properties_t props;
sasl_secret_t *secret;
int uses_sec_layer; /* if need to encrypt/decrpt all transmissions */
void *mutex;
int (*idle_hook)(sasl_conn_t *conn);
const sasl_callback_t *callbacks;
const sasl_global_callbacks_t *global_callbacks; /* global callbacks
* for this
* connection */
char *serverFQDN;
};
#endif /* SASLINT_H */
|
