diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-05-05 17:47:29 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-05-05 17:47:29 +0000 |
commit | 4f5791ebd03eaec1c7da0865a383175b05102712 (patch) | |
tree | 8ce7b00f7a76baa386372422adebbe64510812d4 /lib/krb5_wrap/gss_samba.h | |
parent | Initial commit. (diff) | |
download | samba-upstream.tar.xz samba-upstream.zip |
Adding upstream version 2:4.17.12+dfsg.upstream/2%4.17.12+dfsgupstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'lib/krb5_wrap/gss_samba.h')
-rw-r--r-- | lib/krb5_wrap/gss_samba.h | 49 |
1 files changed, 49 insertions, 0 deletions
diff --git a/lib/krb5_wrap/gss_samba.h b/lib/krb5_wrap/gss_samba.h new file mode 100644 index 0000000..89aee34 --- /dev/null +++ b/lib/krb5_wrap/gss_samba.h @@ -0,0 +1,49 @@ +/* + * Unix SMB/CIFS implementation. + * + * Simple GSSAPI wrappers + * + * Copyright (c) 2012 Andreas Schneider <asn@samba.org> + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see <http://www.gnu.org/licenses/>. + */ + +#ifndef _GSS_SAMBA_H +#define _GSS_SAMBA_H + +#ifdef HAVE_GSSAPI + +#include "system/gssapi.h" +#include "krb5_samba.h" + +#if defined(HAVE_GSS_OID_EQUAL) +#define smb_gss_oid_equal gss_oid_equal +#else +int smb_gss_oid_equal(const gss_OID first_oid, const gss_OID second_oid); +#endif /* HAVE_GSS_OID_EQUAL */ + +/* wrapper around gss_krb5_import_cred() that prefers to use gss_acquire_cred_from() + * if this GSSAPI extension is available. gss_acquire_cred_from() is properly + * interposed by GSS-proxy while gss_krb5_import_cred() is not. + * + * This wrapper requires a proper krb5_context to resolve the ccache name for + * gss_acquire_cred_from(). + * + * All gss_krb5_import_cred() callers in Samba already have krb5_context available. */ +uint32_t smb_gss_krb5_import_cred(OM_uint32 *minor_status, krb5_context ctx, + krb5_ccache id, krb5_principal keytab_principal, + krb5_keytab keytab, gss_cred_id_t *cred); + +#endif /* HAVE_GSSAPI */ +#endif /* _GSS_SAMBA_H */ |