1a61aeb8dd
addition to existing authentication. No change to the existing APIs to preseve both binary and API compatibility, so I am not inclined to bump the library version number unless someone thinks this is necessary. Submitted by: Paul Fraley <fraley@juniper.net> MFC after: 2 weeks
133 lines
4.9 KiB
C
133 lines
4.9 KiB
C
/*-
|
|
* Copyright (c) 1998, 2001, Juniper Networks, Inc.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*
|
|
* $FreeBSD$
|
|
*/
|
|
|
|
#ifndef _TACLIB_H_
|
|
#define _TACLIB_H_
|
|
|
|
#include <sys/types.h>
|
|
|
|
struct tac_handle;
|
|
|
|
/* Flags for tac_add_server(). */
|
|
#define TAC_SRVR_SINGLE_CONNECT 0x04 /* Keep connection open for multiple
|
|
sessions. */
|
|
|
|
/* Disassembly of tac_send_authen() return value. */
|
|
#define TAC_AUTHEN_STATUS(s) ((s) & 0xff)
|
|
#define TAC_AUTHEN_NOECHO(s) ((s) & (1<<8))
|
|
|
|
/* Disassembly of tac_send_author() return value. */
|
|
#define TAC_AUTHOR_STATUS(s) ((s) & 0xff)
|
|
#define TAC_AUTHEN_AV_COUNT(s) (((s)>>8) & 0xff)
|
|
|
|
/* Privilege levels */
|
|
#define TAC_PRIV_LVL_MIN 0x00
|
|
#define TAC_PRIV_LVL_USER 0x01
|
|
#define TAC_PRIV_LVL_ROOT 0x0f
|
|
#define TAC_PRIV_LVL_MAX 0x0f
|
|
|
|
/* Authentication actions */
|
|
#define TAC_AUTHEN_LOGIN 0x01
|
|
#define TAC_AUTHEN_CHPASS 0x02
|
|
#define TAC_AUTHEN_SENDPASS 0x03
|
|
#define TAC_AUTHEN_SENDAUTH 0x04
|
|
|
|
/* Authentication types */
|
|
#define TAC_AUTHEN_TYPE_ASCII 0x01
|
|
#define TAC_AUTHEN_TYPE_PAP 0x02
|
|
#define TAC_AUTHEN_TYPE_CHAP 0x03
|
|
#define TAC_AUTHEN_TYPE_ARAP 0x04
|
|
#define TAC_AUTHEN_TYPE_MSCHAP 0x05
|
|
|
|
/* Authentication services */
|
|
#define TAC_AUTHEN_SVC_NONE 0x00
|
|
#define TAC_AUTHEN_SVC_LOGIN 0x01
|
|
#define TAC_AUTHEN_SVC_ENABLE 0x02
|
|
#define TAC_AUTHEN_SVC_PPP 0x03
|
|
#define TAC_AUTHEN_SVC_ARAP 0x04
|
|
#define TAC_AUTHEN_SVC_PT 0x05
|
|
#define TAC_AUTHEN_SVC_RCMD 0x06
|
|
#define TAC_AUTHEN_SVC_X25 0x07
|
|
#define TAC_AUTHEN_SVC_NASI 0x08
|
|
#define TAC_AUTHEN_SVC_FWPROXY 0x09
|
|
|
|
/* Authentication reply status codes */
|
|
#define TAC_AUTHEN_STATUS_PASS 0x01
|
|
#define TAC_AUTHEN_STATUS_FAIL 0x02
|
|
#define TAC_AUTHEN_STATUS_GETDATA 0x03
|
|
#define TAC_AUTHEN_STATUS_GETUSER 0x04
|
|
#define TAC_AUTHEN_STATUS_GETPASS 0x05
|
|
#define TAC_AUTHEN_STATUS_RESTART 0x06
|
|
#define TAC_AUTHEN_STATUS_ERROR 0x07
|
|
#define TAC_AUTHEN_STATUS_FOLLOW 0x21
|
|
|
|
/* Authorization authenticatication methods */
|
|
#define TAC_AUTHEN_METH_NOT_SET 0x00
|
|
#define TAC_AUTHEN_METH_NONE 0x01
|
|
#define TAC_AUTHEN_METH_KRB5 0x02
|
|
#define TAC_AUTHEN_METH_LINE 0x03
|
|
#define TAC_AUTHEN_METH_ENABLE 0x04
|
|
#define TAC_AUTHEN_METH_LOCAL 0x05
|
|
#define TAC_AUTHEN_METH_TACACSPLUS 0x06
|
|
#define TAC_AUTHEN_METH_RCMD 0x20
|
|
/* If adding more, see comments in protocol_version() in taclib.c */
|
|
|
|
/* Authorization status */
|
|
#define TAC_AUTHOR_STATUS_PASS_ADD 0x01
|
|
#define TAC_AUTHOR_STATUS_PASS_REPL 0x02
|
|
#define TAC_AUTHOR_STATUS_FAIL 0x10
|
|
#define TAC_AUTHOR_STATUS_ERROR 0x11
|
|
|
|
__BEGIN_DECLS
|
|
int tac_add_server(struct tac_handle *,
|
|
const char *, int, const char *, int, int);
|
|
void tac_close(struct tac_handle *);
|
|
int tac_config(struct tac_handle *, const char *);
|
|
int tac_create_authen(struct tac_handle *, int, int, int);
|
|
void *tac_get_data(struct tac_handle *, size_t *);
|
|
char *tac_get_msg(struct tac_handle *);
|
|
struct tac_handle *tac_open(void);
|
|
int tac_send_authen(struct tac_handle *);
|
|
int tac_set_data(struct tac_handle *,
|
|
const void *, size_t);
|
|
int tac_set_msg(struct tac_handle *, const char *);
|
|
int tac_set_port(struct tac_handle *, const char *);
|
|
int tac_set_priv(struct tac_handle *, int);
|
|
int tac_set_rem_addr(struct tac_handle *, const char *);
|
|
int tac_set_user(struct tac_handle *, const char *);
|
|
const char *tac_strerror(struct tac_handle *);
|
|
int tac_send_author(struct tac_handle *);
|
|
int tac_create_author(struct tac_handle *, int, int, int);
|
|
int tac_set_av(struct tac_handle *, u_int, const char *);
|
|
char *tac_get_av(struct tac_handle *, u_int);
|
|
char *tac_get_av_value(struct tac_handle *, const char *);
|
|
void tac_clear_avs(struct tac_handle *);
|
|
__END_DECLS
|
|
|
|
#endif /* _TACLIB_H_ */
|