Path: blob/main/crypto/heimdal/lib/gssapi/mech/doxygen.c
34907 views
/*1* Copyright (c) 2009 Kungliga Tekniska Högskolan2* (Royal Institute of Technology, Stockholm, Sweden).3* All rights reserved.4*5* Redistribution and use in source and binary forms, with or without6* modification, are permitted provided that the following conditions7* are met:8*9* 1. Redistributions of source code must retain the above copyright10* notice, this list of conditions and the following disclaimer.11*12* 2. Redistributions in binary form must reproduce the above copyright13* notice, this list of conditions and the following disclaimer in the14* documentation and/or other materials provided with the distribution.15*16* 3. Neither the name of the Institute nor the names of its contributors17* may be used to endorse or promote products derived from this software18* without specific prior written permission.19*20* THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND21* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE22* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE23* ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE24* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL25* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS26* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)27* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT28* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY29* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF30* SUCH DAMAGE.31*/3233/*! @mainpage Heimdal GSS-API Library34*35* Heimdal implements the following mechanisms:36*37* - Kerberos 538* - SPNEGO39* - NTLM40*41* See @ref gssapi_mechs for more describtion about these mechanisms.42*43* The project web page: http://www.h5l.org/44*45* - @ref gssapi_services_intro46* - @ref gssapi_mechs47* - @ref gssapi_api_INvsMN48*/4950/**51* @page gssapi_services_intro Introduction to GSS-API services52* @section gssapi_services GSS-API services53*54* @subsection gssapi_services_context Context creation55*56* - delegation57* - mutual authentication58* - anonymous59* - use per message before context creation has completed60*61* return status:62* - support conf63* - support int64*65* @subsection gssapi_context_flags Context creation flags66*67* - GSS_C_DELEG_FLAG68* - GSS_C_MUTUAL_FLAG69* - GSS_C_REPLAY_FLAG70* - GSS_C_SEQUENCE_FLAG71* - GSS_C_CONF_FLAG72* - GSS_C_INTEG_FLAG73* - GSS_C_ANON_FLAG74* - GSS_C_PROT_READY_FLAG75* - GSS_C_TRANS_FLAG76* - GSS_C_DCE_STYLE77* - GSS_C_IDENTIFY_FLAG78* - GSS_C_EXTENDED_ERROR_FLAG79* - GSS_C_DELEG_POLICY_FLAG80*81*82* @subsection gssapi_services_permessage Per-message services83*84* - conf85* - int86* - message integrity87* - replay detection88* - out of sequence89*90*/9192/**93* @page gssapi_mechs_intro GSS-API mechanisms94* @section gssapi_mechs GSS-API mechanisms95*96* - Kerberos 5 - GSS_KRB5_MECHANISM97* - SPNEGO - GSS_SPNEGO_MECHANISM98* - NTLM - GSS_NTLM_MECHANISM99100*/101102103/**104* @page internalVSmechname Internal names and mechanism names105* @section gssapi_api_INvsMN Name forms106*107* There are two forms of name in GSS-API, Internal form and108* Contiguous string ("flat") form. gss_export_name() and109* gss_import_name() can be used to convert between the two forms.110*111* - The contiguous string form is described by an oid specificing the112* type and an octet string. A special form of the contiguous113* string form is the exported name object. The exported name114* defined for each mechanism, is something that can be stored and115* complared later. The exported name is what should be used for116* ACLs comparisons.117*118* - The Internal form119*120* There is also special form of the Internal Name (IN), and that is121* the Mechanism Name (MN). In the mechanism name all the generic122* information is stripped of and only contain the information for123* one mechanism. In GSS-API some function return MN and some124* require MN as input. Each of these function is marked up as such.125*126*127* Describe relationship between import_name, canonicalize_name,128* export_name and friends.129*/130131/** @defgroup gssapi Heimdal GSS-API functions */132133134