GDNegotiateScheme.h

Go to the documentation of this file.

/*
 * (c) 2017 BlackBerry Limited. All rights reserved.
 *
 */
 
#ifndef GD_GSS_API_NEGOTIATESCHEME_H_
#define GD_GSS_API_NEGOTIATESCHEME_H_
 
#include <stdint.h>
#include <netinet/in.h>
 
#if defined(_WIN32)
# define GD_ATTRIBUTE(ignore)
#else
# define GD_ATTRIBUTE __attribute__
#endif
 
namespace  GD
{
 
namespace GSS_API
{
 
enum class GssStatusCode
{
    /* Major status codes. */
 
    STATUS_GSS_S_COMPLETE,
    
    /*
     * Calling errors.
     */
 
    STATUS_GSS_S_CALL_INACCESSIBLE_READ,
 
    STATUS_GSS_S_CALL_INACCESSIBLE_WRITE,
 
    STATUS_GSS_S_CALL_BAD_STRUCTURE,
    
    /*
     * Routine errors.
     */
 
    STATUS_GSS_S_BAD_MECH,
    
    STATUS_GSS_S_BAD_NAME,
    
    STATUS_GSS_S_BAD_NAMETYPE,
    
 
    STATUS_GSS_S_BAD_BINDINGS,
 
    STATUS_GSS_S_BAD_STATUS,
 
    STATUS_GSS_S_BAD_SIG,
 
    STATUS_GSS_S_BAD_MIC,
 
    STATUS_GSS_S_NO_CRED,
 
    STATUS_GSS_S_NO_CONTEXT,
 
    STATUS_GSS_S_DEFECTIVE_TOKEN,
 
    STATUS_GSS_S_DEFECTIVE_CREDENTIAL,
 
    STATUS_GSS_S_CREDENTIALS_EXPIRED,
 
    STATUS_GSS_S_CONTEXT_EXPIRED,
 
    STATUS_GSS_S_FAILURE,
 
    STATUS_GSS_S_BAD_QOP,
 
    STATUS_GSS_S_UNAUTHORIZED,
 
    STATUS_GSS_S_UNAVAILABLE,
 
    STATUS_GSS_S_DUPLICATE_ELEMENT,
 
    STATUS_GSS_S_NAME_NOT_MN,
    
    /*
     * Supplementary status:
     */
 
    STATUS_GSS_S_CONTINUE_NEEDED,
 
    STATUS_GSS_S_DUPLICATE_TOKEN,
 
    STATUS_GSS_S_OLD_TOKEN,
 
    STATUS_GSS_S_UNSEQ_TOKEN,
 
    STATUS_GSS_S_GAP_TOKEN,
    
    STATUS_UNKNOWN
};
    
enum class NegotiateMechanism
{
    NEGOTIATE_MECHANISM_SPNEGO,
 
    NEGOTIATE_MECHANISM_KRB5
};
 
class GD_ATTRIBUTE((visibility("default")))  NegotiateScheme /* final */
{
    
public:
    NegotiateScheme();
    ~NegotiateScheme();
    
public:
    
    char* generateGssApiData(const char* token,
                             const char* hostname,
                             const bool allow_delegation);
          
    
    char* generateGssApiDataWithCB(const char* token,
                             const char* hostname,
                             const bool allow_delegation,
                             const char* initiator_IPV4);
    
    char* generateGssApiData(const char* token,
                             NegotiateMechanism mechanism,
                             const char* service_principal_name,
                             const bool allow_delegation);
    
    GssStatusCode getGssApiStatus() const;
    
    bool gssContextEstablishmentInitiated() const;
    
    static void resetKerberosNegotiateTimeout();
    
    static void setKerberosNegotiateTimeout(unsigned long timeout);
    
    static bool attemptToCancelKDCNegotiate(const char* host);
 
 
private:
    void* _impl;
};
 
 
} // end of namespace GSS_API
    
} // end of namespace GD
 
#endif /* GDNEGOTIATESCHEME_H_ */