kerberos.h

#include <krb5.h>

#ifndef KERBEROS_CONNECTOR_H
#define KERBEROS_CONNECTOR_H


/*
 * mask for krbconn_modify()
 *
 * Values were copied from MIT Kerberos Admin library, but they are not required to be the same.
 *
 * Values MUST be in sync with the Java code of Kerbebros connector.
 */
#define KRBCONN_PRINCIPAL         0x000001
#define KRBCONN_PRINC_EXPIRE_TIME 0x000002
#define KRBCONN_PW_EXPIRATION     0x000004
#define KRBCONN_LAST_PWD_CHANGE   0x000008
#define KRBCONN_ATTRIBUTES        0x000010
#define KRBCONN_MAX_LIFE          0x000020
#define KRBCONN_POLICY            0x000800
#define KRBCONN_MAX_RLIFE         0x002000
#define KRBCONN_LAST_SUCCESS      0x004000
#define KRBCONN_LAST_FAILED       0x008000


typedef struct {
	/* keytab or password needed */
	char *keytab;
	char *password;
	char *principal;
	char *realm;
	int debug;
} krbconn_config_t;

typedef struct {
	krb5_context krb;
	char *realm;
	void *handle;
	int debug;
} krbconn_context_t;

typedef struct {
	char *name;
	time_t princ_expire;
	time_t pwd_expire;
	time_t pwd_change;

	char *mod_name;
	time_t mod_date;

	int attributes;
	char *policy;

	time_t max_ticket_life;
	time_t max_renewable_life;
	time_t last_login;
	time_t last_failed_login;
} krbconn_principal_t;

char *krbconn_error(krbconn_context_t *ctx, long code);
long krbconn_renew(krbconn_context_t *ctx, krbconn_config_t *config);
long krbconn_init(krbconn_context_t *ctx, krbconn_config_t *config);
void krbconn_destroy(krbconn_context_t *ctx);
void krbconn_free_config(krbconn_config_t *config);
void krbconn_free_principal(krbconn_principal_t *principal);

long krbconn_get(krbconn_context_t *ctx, char *princ_name, krbconn_principal_t *result);
long krbconn_create(krbconn_context_t *ctx, krbconn_principal_t *info, int mask, char *pass);
long krbconn_delete(krbconn_context_t *ctx, char *name);
long krbconn_list(krbconn_context_t *ctx, const char *search, char ***list, int *count);
void krbconn_free_list(krbconn_context_t *ctx, char **list, int count);
long krbconn_modify(krbconn_context_t *ctx, krbconn_principal_t *info, int mask);
long krbconn_rename(krbconn_context_t *ctx, const char *oldname, const char *newname);
long krbconn_chpass(krbconn_context_t *ctx, const char *princ_name, char *password);
#endif