[apple/ipsec.git] / ipsec-tools / racoon / isakmp_xauth.h

/*	$NetBSD: isakmp_xauth.h,v 1.4 2006/09/09 16:22:09 manu Exp $	*/

/*	$KAME$ */

/*
 * Copyright (C) 2004 Emmanuel Dreyfus 
 * All rights reserved.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the project nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 * 
 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#ifndef _ISAKMP_XAUTH_H
#define _ISAKMP_XAUTH_H

#include "racoon_types.h"

/* ISAKMP mode config attribute types specific to the Xauth vendor ID */
#define	XAUTH_TYPE                16520
#define	XAUTH_USER_NAME           16521
#define	XAUTH_USER_PASSWORD       16522
#define	XAUTH_PASSCODE            16523
#define	XAUTH_MESSAGE             16524
#define	XAUTH_CHALLENGE           16525
#define	XAUTH_DOMAIN              16526
#define	XAUTH_STATUS              16527
#define	XAUTH_NEXT_PIN            16528
#define	XAUTH_ANSWER              16529

/* Types for XAUTH_TYPE */
#define	XAUTH_TYPE_GENERIC 	0
#define	XAUTH_TYPE_CHAP    	1
#define	XAUTH_TYPE_OTP     	2
#define	XAUTH_TYPE_SKEY    	3

/* Values for XAUTH_STATUS */
#define	XAUTH_STATUS_FAIL       0
#define	XAUTH_STATUS_OK         1

/* For phase 1 Xauth status */
struct xauth_state {
	int status; /* authentication status, used only on server side */
	int vendorid;
	int authtype;
	union {
		struct authgeneric {
			char *usr;
			char *pwd;
		} generic;
	} authdata;
};

/* What's been sent */
#define XAUTH_SENT_USERNAME 1
#define XAUTH_SENT_PASSWORD 2
#define XAUTH_SENT_EVERYTHING (XAUTH_SENT_USERNAME | XAUTH_SENT_PASSWORD)

/* For rmconf Xauth data */
struct xauth_rmconf {
	vchar_t *login;	/* xauth login */
	vchar_t *pass;	/* xauth password */
	int state;      /* what's been sent */
};

/* status */
#define XAUTHST_NOTYET	0
#define XAUTHST_REQSENT	1
#define XAUTHST_OK	2

struct xauth_reply_arg {
	isakmp_index index;
	int port;
	int id;
	int res;
};

struct isakmp_data;
void xauth_sendreq (phase1_handle_t *);
int xauth_attr_reply (phase1_handle_t *, struct isakmp_data *, int);
int xauth_login_system (char *, char *);
void xauth_sendstatus (phase1_handle_t *, int, int);
int xauth_check (phase1_handle_t *);
int group_check (phase1_handle_t *, char **, int);
vchar_t *isakmp_xauth_req (phase1_handle_t *, struct isakmp_data *);
vchar_t *isakmp_xauth_set (phase1_handle_t *, struct isakmp_data *);
void xauth_rmstate (struct xauth_state *);
void xauth_reply_stub (void *);
int xauth_reply (phase1_handle_t *, int, int, int);
int xauth_rmconf_used (struct xauth_rmconf **);
void xauth_rmconf_delete (struct xauth_rmconf **);


#endif /* _ISAKMP_XAUTH_H */
Commit	Line	Data
d1e348cf A	1	/* $NetBSD: isakmp_xauth.h,v 1.4 2006/09/09 16:22:09 manu Exp $ */
d1e348cf A	2
52b7d2ce A	3	/* $KAME$ */
	4
	5	/*
	6	* Copyright (C) 2004 Emmanuel Dreyfus
	7	* All rights reserved.
	8	*
	9	* Redistribution and use in source and binary forms, with or without
	10	* modification, are permitted provided that the following conditions
	11	* are met:
	12	* 1. Redistributions of source code must retain the above copyright
	13	* notice, this list of conditions and the following disclaimer.
	14	* 2. Redistributions in binary form must reproduce the above copyright
	15	* notice, this list of conditions and the following disclaimer in the
	16	* documentation and/or other materials provided with the distribution.
	17	* 3. Neither the name of the project nor the names of its contributors
	18	* may be used to endorse or promote products derived from this software
	19	* without specific prior written permission.
	20	*
	21	* THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
	22	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	23	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	24	* ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
	25	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	26	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	27	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	28	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	29	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	30	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	31	* SUCH DAMAGE.
	32	*/
	33
d1e348cf A	34	#ifndef _ISAKMP_XAUTH_H
	35	#define _ISAKMP_XAUTH_H
	36
65c25746 A	37	#include "racoon_types.h"
65c25746 A	38
52b7d2ce A	39	/* ISAKMP mode config attribute types specific to the Xauth vendor ID */
	40	#define XAUTH_TYPE 16520
	41	#define XAUTH_USER_NAME 16521
	42	#define XAUTH_USER_PASSWORD 16522
	43	#define XAUTH_PASSCODE 16523
	44	#define XAUTH_MESSAGE 16524
	45	#define XAUTH_CHALLENGE 16525
	46	#define XAUTH_DOMAIN 16526
	47	#define XAUTH_STATUS 16527
	48	#define XAUTH_NEXT_PIN 16528
	49	#define XAUTH_ANSWER 16529
	50
	51	/* Types for XAUTH_TYPE */
	52	#define XAUTH_TYPE_GENERIC 0
	53	#define XAUTH_TYPE_CHAP 1
	54	#define XAUTH_TYPE_OTP 2
	55	#define XAUTH_TYPE_SKEY 3
	56
	57	/* Values for XAUTH_STATUS */
	58	#define XAUTH_STATUS_FAIL 0
	59	#define XAUTH_STATUS_OK 1
	60
d1e348cf	61	/* For phase 1 Xauth status */
52b7d2ce	62	struct xauth_state {
d1e348cf	63	int status; /* authentication status, used only on server side */
52b7d2ce A	64	int vendorid;
	65	int authtype;
	66	union {
	67	struct authgeneric {
	68	char *usr;
	69	char *pwd;
	70	} generic;
	71	} authdata;
d1e348cf A	72	};
	73
	74	/* What's been sent */
	75	#define XAUTH_SENT_USERNAME 1
	76	#define XAUTH_SENT_PASSWORD 2
	77	#define XAUTH_SENT_EVERYTHING (XAUTH_SENT_USERNAME \| XAUTH_SENT_PASSWORD)
	78
	79	/* For rmconf Xauth data */
	80	struct xauth_rmconf {
	81	vchar_t login; / xauth login */
	82	vchar_t pass; / xauth password */
	83	int state; /* what's been sent */
52b7d2ce A	84	};
	85
	86	/* status */
	87	#define XAUTHST_NOTYET 0
	88	#define XAUTHST_REQSENT 1
	89	#define XAUTHST_OK 2
	90
	91	struct xauth_reply_arg {
	92	isakmp_index index;
	93	int port;
	94	int id;
	95	int res;
	96	};
	97
d1e348cf	98	struct isakmp_data;
65c25746 A	99	void xauth_sendreq (phase1_handle_t *);
	100	int xauth_attr_reply (phase1_handle_t , struct isakmp_data , int);
	101	int xauth_login_system (char , char );
	102	void xauth_sendstatus (phase1_handle_t *, int, int);
	103	int xauth_check (phase1_handle_t *);
	104	int group_check (phase1_handle_t , char *, int);
	105	vchar_t isakmp_xauth_req (phase1_handle_t , struct isakmp_data *);
	106	vchar_t isakmp_xauth_set (phase1_handle_t , struct isakmp_data *);
	107	void xauth_rmstate (struct xauth_state *);
	108	void xauth_reply_stub (void *);
	109	int xauth_reply (phase1_handle_t *, int, int, int);
	110	int xauth_rmconf_used (struct xauth_rmconf **);
	111	void xauth_rmconf_delete (struct xauth_rmconf **);
d1e348cf	112
d1e348cf A	113
d1e348cf A	114	#endif /* _ISAKMP_XAUTH_H */