ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: usr / include

/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
/*
 * Copyright 2013 Red Hat, Inc.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 *
 *    1. Redistributions of source code must retain the above copyright
 *       notice, this list of conditions and the following disclaimer.
 *
 *    2. Redistributions in binary form must reproduce the above copyright
 *       notice, this list of conditions and the following disclaimer in
 *       the documentation and/or other materials provided with the
 *       distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
 * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
 * PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER
 * OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

/*
 * This API is not considered as stable as the main krb5 API.
 *
 * - We may make arbitrary incompatible changes between feature releases
 *   (e.g. from 1.12 to 1.13).
 * - We will make some effort to avoid making incompatible changes for
 *   bugfix releases, but will make them if necessary.
 */

#ifndef KRAD_H_
#define KRAD_H_

#include <krb5.h>
#include <verto.h>
#include <stddef.h>
#include <stdio.h>

#define KRAD_PACKET_SIZE_MAX 4096

#define KRAD_SERVICE_TYPE_LOGIN 1
#define KRAD_SERVICE_TYPE_FRAMED 2
#define KRAD_SERVICE_TYPE_CALLBACK_LOGIN 3
#define KRAD_SERVICE_TYPE_CALLBACK_FRAMED 4
#define KRAD_SERVICE_TYPE_OUTBOUND 5
#define KRAD_SERVICE_TYPE_ADMINISTRATIVE 6
#define KRAD_SERVICE_TYPE_NAS_PROMPT 7
#define KRAD_SERVICE_TYPE_AUTHENTICATE_ONLY 8
#define KRAD_SERVICE_TYPE_CALLBACK_NAS_PROMPT 9
#define KRAD_SERVICE_TYPE_CALL_CHECK 10
#define KRAD_SERVICE_TYPE_CALLBACK_ADMINISTRATIVE 11

typedef struct krad_attrset_st krad_attrset;
typedef struct krad_packet_st krad_packet;
typedef struct krad_client_st krad_client;
typedef unsigned char krad_code;
typedef unsigned char krad_attr;

/* Called when a response is received or the request times out. */
typedef void
(*krad_cb)(krb5_error_code retval, const krad_packet *request,
           const krad_packet *response, void *data);

/*
 * Called to iterate over a set of requests.  Either the callback will be
 * called until it returns NULL, or it will be called with cancel = TRUE to
 * terminate in the middle of an iteration.
 */
typedef const krad_packet *
(*krad_packet_iter_cb)(void *data, krb5_boolean cancel);

/*
 * Code
 */

/* Convert a code name to its number. Only works for codes defined
 * by RFC 2875 or 2882. Returns 0 if the name was not found. */
krad_code
krad_code_name2num(const char *name);

/* Convert a code number to its name. Only works for attributes defined
 * by RFC 2865 or 2882. Returns NULL if the name was not found. */
const char *
krad_code_num2name(krad_code code);

/*
 * Attribute
 */

/* Convert an attribute name to its number. Only works for attributes defined
 * by RFC 2865. Returns 0 if the name was not found. */
krad_attr
krad_attr_name2num(const char *name);

/* Convert an attribute number to its name. Only works for attributes defined
 * by RFC 2865. Returns NULL if the name was not found. */
const char *
krad_attr_num2name(krad_attr type);

/*
 * Attribute set
 */

/* Create a new attribute set. */
krb5_error_code
krad_attrset_new(krb5_context ctx, krad_attrset **set);

/* Create a deep copy of an attribute set. */
krb5_error_code
krad_attrset_copy(const krad_attrset *set, krad_attrset **copy);

/* Free an attribute set. */
void
krad_attrset_free(krad_attrset *set);

/* Add an attribute to a set. */
krb5_error_code
krad_attrset_add(krad_attrset *set, krad_attr type, const krb5_data *data);

/* Add a four-octet unsigned number attribute to the given set. */
krb5_error_code
krad_attrset_add_number(krad_attrset *set, krad_attr type, krb5_ui_4 num);

/* Delete the specified attribute. */
void
krad_attrset_del(krad_attrset *set, krad_attr type, size_t indx);

/* Get the specified attribute. */
const krb5_data *
krad_attrset_get(const krad_attrset *set, krad_attr type, size_t indx);

/*
 * Packet
 */

/* Determine the bytes needed from the socket to get the whole packet.  Don't
 * cache the return value as it can change! Returns -1 on EBADMSG. */
ssize_t
krad_packet_bytes_needed(const krb5_data *buffer);

/* Free a packet. */
void
krad_packet_free(krad_packet *pkt);

/*
 * Create a new request packet.
 *
 * This function takes the attributes specified in set and converts them into a
 * radius packet. The packet will have a randomized id. If cb is not NULL, it
 * will be called passing data as the argument to iterate over a set of
 * outstanding requests. In this case, the id will be both random and unique
 * across the set of requests.
 */
krb5_error_code
krad_packet_new_request(krb5_context ctx, const char *secret, krad_code code,
                        const krad_attrset *set, krad_packet_iter_cb cb,
                        void *data, krad_packet **request);

/*
 * Create a new response packet.
 *
 * This function is similar to krad_packet_new_requst() except that it crafts a
 * packet in response to a request packet. This new packet will borrow values
 * from the request such as the id and the authenticator.
 */
krb5_error_code
krad_packet_new_response(krb5_context ctx, const char *secret, krad_code code,
                         const krad_attrset *set, const krad_packet *request,
                         krad_packet **response);

/*
 * Decode a request radius packet from krb5_data.
 *
 * The resulting decoded packet will be a request packet stored in *reqpkt.
 *
 * If cb is NULL, *duppkt will always be NULL.
 *
 * If cb is not NULL, it will be called (with the data argument) to iterate
 * over a set of requests currently being processed. In this case, if the
 * packet is a duplicate of an already received request, the original request
 * will be set in *duppkt.
 */
krb5_error_code
krad_packet_decode_request(krb5_context ctx, const char *secret,
                           const krb5_data *buffer, krad_packet_iter_cb cb,
                           void *data, const krad_packet **duppkt,
                           krad_packet **reqpkt);

/*
 * Decode a response radius packet from krb5_data.
 *
 * The resulting decoded packet will be a response packet stored in *rsppkt.
 *
 * If cb is NULL, *reqpkt will always be NULL.
 *
 * If cb is not NULL, it will be called (with the data argument) to iterate
 * over a set of requests awaiting responses. In this case, if the response
 * packet matches one of these requests, the original request will be set in
 * *reqpkt.
 */
krb5_error_code
krad_packet_decode_response(krb5_context ctx, const char *secret,
                            const krb5_data *buffer, krad_packet_iter_cb cb,
                            void *data, const krad_packet **reqpkt,
                            krad_packet **rsppkt);

/* Encode packet. */
const krb5_data *
krad_packet_encode(const krad_packet *pkt);

/* Get the code for the given packet. */
krad_code
krad_packet_get_code(const krad_packet *pkt);

/* Get the specified attribute. */
const krb5_data *
krad_packet_get_attr(const krad_packet *pkt, krad_attr type, size_t indx);

/*
 * Client
 */

/* Create a new client. */
krb5_error_code
krad_client_new(krb5_context kctx, verto_ctx *vctx, krad_client **client);

/* Free the client. */
void
krad_client_free(krad_client *client);

/*
 * Send a request to a radius server.
 *
 * The remote host may be specified by one of the following formats:
 *  - /path/to/unix.socket
 *  - IPv4
 *  - IPv4:port
 *  - IPv4:service
 *  - [IPv6]
 *  - [IPv6]:port
 *  - [IPv6]:service
 *  - hostname
 *  - hostname:port
 *  - hostname:service
 *
 * The timeout parameter (milliseconds) is the total timeout across all remote
 * hosts (when DNS returns multiple entries) and all retries.  For stream
 * sockets, the retries parameter is ignored and no retries are performed.
 *
 * The cb function will be called with the data argument when either a response
 * is received or the request times out on all possible remote hosts.
 */
krb5_error_code
krad_client_send(krad_client *rc, krad_code code, const krad_attrset *attrs,
                 const char *remote, const char *secret, int timeout,
                 size_t retries, krad_cb cb, void *data);

#endif /* KRAD_H_ */

[+] ..
[-] krb5.h [edit]
[-] lauxlib.h [edit]
[-] execinfo.h [edit]
[-] zlib.h [edit]
[+] drm
[-] sched.h [edit]
[-] netdb.h [edit]
[-] fmtmsg.h [edit]
[+] mtd
[-] kdb.h [edit]
[+] libpng15
[-] ctype.h [edit]
[-] xf86drm.h [edit]
[-] gpg-error.h [edit]
[-] gshadow.h [edit]
[-] spawn.h [edit]
[-] wchar.h [edit]
[-] gdfontg.h [edit]
[+] rpc
[-] FlexLexer.h [edit]
[-] cpufreq.h [edit]
[-] monetary.h [edit]
[-] autosprintf.h [edit]
[-] ldap.h [edit]
[-] punycode.h [edit]
[-] db_185.h [edit]
[+] gtk-2.0
[+] gnu
[+] GL
[+] pixman-1
[-] string.h [edit]
[-] unistd.h [edit]
[-] lber_types.h [edit]
[-] pcreposix.h [edit]
[-] endian.h [edit]
[+] libexslt
[+] autotrace
[-] stdio_ext.h [edit]
[+] nfs
[-] pcre.h [edit]
[-] locale.h [edit]
[-] idn-free.h [edit]
[+] pango-1.0
[-] jmorecfg.h [edit]
[+] ImageMagick-6
[+] libkms
[-] getopt.h [edit]
[-] gcrypt.h [edit]
[-] dirent.h [edit]
[-] expat_external.h [edit]
[-] xlocale.h [edit]
[+] ijs
[-] grp.h [edit]
[-] gconv.h [edit]
[-] tiffconf.h [edit]
[-] jpeglib.h [edit]
[-] unctrl.h [edit]
[+] gio-unix-2.0
[-] utime.h [edit]
[+] net
[+] rdma
[-] bzlib.h [edit]
[-] png.h [edit]
[+] netax25
[-] mntent.h [edit]
[-] cursesp.h [edit]
[+] libltdl
[-] pwd.h [edit]
[+] libxslt
[+] neteconet
[-] aio.h [edit]
[+] db4.7.25
[-] fenv.h [edit]
[+] libxml2
[+] netash
[+] gdbm
[+] xen
[+] openssl
[+] sepol
[-] mcheck.h [edit]
[-] syscall.h [edit]
[-] nl_types.h [edit]
[-] crypt.h [edit]
[+] protocols
[-] com_err.h [edit]
[+] selinux
[+] rpcsvc
[-] errno.h [edit]
[-] argp.h [edit]
[-] regex.h [edit]
[-] fcntl.h [edit]
[-] stdc-predef.h [edit]
[-] gssapi.h [edit]
[-] cursesw.h [edit]
[-] malloc.h [edit]
[-] mqueue.h [edit]
[-] pnglibconf.h [edit]
[+] scsi
[-] dbm.h [edit]
[-] xf86drmMode.h [edit]
[-] ndbm.h [edit]
[-] math.h [edit]
[-] cursslk.h [edit]
[-] krad.h [edit]
[+] netrose
[-] ncurses_dll.h [edit]
[+] fontconfig
[-] libsync.h [edit]
[-] err.h [edit]
[-] termcap.h [edit]
[-] jerror.h [edit]
[-] semaphore.h [edit]
[+] glib-2.0
[-] gcrypt-module.h [edit]
[-] obstack.h [edit]
[-] _G_config.h [edit]
[-] luaconf.h [edit]
[-] cursesf.h [edit]
[-] ldap_cdefs.h [edit]
[-] sysexits.h [edit]
[-] envz.h [edit]
[+] harfbuzz
[-] stdint.h [edit]
[-] lber.h [edit]
[+] graphite2
[+] gssrpc
[-] gnu-versions.h [edit]
[+] unicode
[-] cursesm.h [edit]
[-] re_comp.h [edit]
[+] kadm5
[-] printf.h [edit]
[-] gdfontl.h [edit]
[+] arpa
[-] pthread.h [edit]
[-] pcre_scanner.h [edit]
[-] gdfontt.h [edit]
[-] slapi-plugin.h [edit]
[+] uapi
[+] mysql
[+] freetype2
[-] tld.h [edit]
[-] ldif.h [edit]
[-] lualib.h [edit]
[+] libwmf
[-] time.h [edit]
[+] X11
[-] pcrecpp.h [edit]
[+] quota
[+] sys
[-] setjmp.h [edit]
[-] regexp.h [edit]
[-] features.h [edit]
[-] libaio.h [edit]
[-] eti.h [edit]
[-] term.h [edit]
[-] utmpx.h [edit]
[+] gdk-pixbuf-2.0
[-] ar.h [edit]
[-] panel.h [edit]
[-] iconv.h [edit]
[+] ncurses
[-] gd_io.h [edit]
[-] gdbm.h [edit]
[+] uuid
[-] ncurses.h [edit]
[+] librsvg-2.0
[-] fnmatch.h [edit]
[+] c++
[-] stdlib.h [edit]
[-] stringprep.h [edit]
[-] gdcache.h [edit]
[-] tiff.h [edit]
[-] sgtty.h [edit]
[-] pngconf.h [edit]
[-] wctype.h [edit]
[-] ldap_schema.h [edit]
[-] syslog.h [edit]
[-] cursesapp.h [edit]
[-] complex.h [edit]
[+] asm
[-] ifaddrs.h [edit]
[-] ieee754.h [edit]
[-] limits.h [edit]
[-] fstab.h [edit]
[+] krb5
[+] netpacket
[-] libio.h [edit]
[-] lua.h [edit]
[+] misc
[-] poll.h [edit]
[-] values.h [edit]
[+] ghostscript
[+] netipx
[+] netrom
[-] stdio.h [edit]
[-] tiffvers.h [edit]
[+] netiucv
[-] memory.h [edit]
[+] layout
[-] db.h [edit]
[-] alloca.h [edit]
[-] uchar.h [edit]
[-] tiffio.hxx [edit]
[-] tiffconf-64.h [edit]
[-] nc_tparm.h [edit]
[+] netinet
[-] pcrecpparg.h [edit]
[-] aliases.h [edit]
[-] ulimit.h [edit]
[-] verto.h [edit]
[-] tic.h [edit]
[+] python3.6m
[-] lzma.h [edit]
[-] paths.h [edit]
[+] et
[-] idna.h [edit]
[+] cairo
[-] term_entry.h [edit]
[-] fpu_control.h [edit]
[-] profile.h [edit]
[+] ncursesw
[+] KHR
[-] jconfig.h [edit]
[+] sasl
[+] sound
[-] search.h [edit]
[-] fts.h [edit]
[-] termios.h [edit]
[-] ltdl.h [edit]
[-] verto-module.h [edit]
[+] bits
[-] elf.h [edit]
[-] expat.h [edit]
[+] atk-1.0
[-] termio.h [edit]
[-] ustat.h [edit]
[-] nss.h [edit]
[+] apache2
[-] wait.h [edit]
[-] error.h [edit]
[-] ttyent.h [edit]
[-] inttypes.h [edit]
[-] assert.h [edit]
[+] video
[+] python2.7
[-] wordexp.h [edit]
[-] a.out.h [edit]
[-] tgmath.h [edit]
[-] shadow.h [edit]
[-] zconf.h [edit]
[-] ftw.h [edit]
[-] resolv.h [edit]
[-] libintl.h [edit]
[+] fribidi
[-] ldap_features.h [edit]
[-] glob.h [edit]
[+] xcb
[-] curses.h [edit]
[-] gdfonts.h [edit]
[-] tiffio.h [edit]
[-] entities.h [edit]
[+] gtk-unix-print-2.0
[+] asm-generic
[-] argz.h [edit]
[-] lastlog.h [edit]
[-] keyutils.h [edit]
[-] tcpd.h [edit]
[-] gd.h [edit]
[-] ucontext.h [edit]
[+] linux
[-] menu.h [edit]
[+] ext2fs
[-] stab.h [edit]
[-] form.h [edit]
[-] idn-int.h [edit]
[-] langinfo.h [edit]
[+] e2p
[-] libgen.h [edit]
[-] thread_db.h [edit]
[-] signal.h [edit]
[+] netatalk
[-] dlfcn.h [edit]
[-] ldap_utf8.h [edit]
[-] pcre_stringpiece.h [edit]
[-] cpio.h [edit]
[+] glvnd
[+] gail-1.0
[-] gdfx.h [edit]
[-] pty.h [edit]
[+] bind9
[-] gdfontmb.h [edit]
[-] utmp.h [edit]
[+] jasper
[+] libdrm
[-] byteswap.h [edit]
[+] gssapi
[-] fam.h [edit]
[-] pr29.h [edit]
[-] tar.h [edit]
[-] etip.h [edit]
[+] EGL
[+] libdb
[+] ffmpeg
[+] security
[-] link.h [edit]
[-] strings.h [edit]
[-] gettext-po.h [edit]
[+] lzma
[-] lua.hpp [edit]