Module Netsys_gssapi

module Netsys_gssapi: sig .. end

This is mainly a translation of RFC 2743/2744 to Ocaml.

The following other modules are also interesting in this context:

• Netgssapi_support
• Netoid

Types

type oid = int array 

type oid_set = oid list 

type token = string 

type interprocess_token = string 

type calling_error = [ `Bad_structure | `Inaccessible_read | `Inaccessible_write | `None ] 

type routine_error = [ `Bad_QOP
       | `Bad_bindings
       | `Bad_mech
       | `Bad_mic
       | `Bad_name
       | `Bad_nametype
       | `Bad_status
       | `Context_expired
       | `Credentials_expired
       | `Defective_credential
       | `Defective_token
       | `Duplicate_element
       | `Failure
       | `Name_not_mn
       | `No_context
       | `No_cred
       | `None
       | `Unauthorized
       | `Unavailable ] 

type suppl_status = [ `Continue_needed
       | `Duplicate_token
       | `Gap_token
       | `Old_token
       | `Unseq_token ] 

type major_status = calling_error * routine_error *
       suppl_status list 

type minor_status = int32 

type address = [ `Inet of Unix.inet_addr
       | `Local of string
       | `Nulladdr
       | `Other of int32 * string
       | `Unspecified of string ] 

type channel_bindings = address * address * string 

type cred_usage = [ `Accept | `Both | `Initiate ] 

type qop = int32 

type message = Netsys_types.mstring list 

type ret_flag = [ `Anon_flag
       | `Conf_flag
       | `Deleg_flag
       | `Integ_flag
       | `Mutual_flag
       | `Prot_ready_flag
       | `Replay_flag
       | `Sequence_flag
       | `Trans_flag ] 

type req_flag = [ `Anon_flag
       | `Conf_flag
       | `Deleg_flag
       | `Integ_flag
       | `Mutual_flag
       | `Replay_flag
       | `Sequence_flag ] 

type time = [ `Indefinite | `This of float ] 

class type [['credential, 'name, 'context]] poly_gss_api = object .. end

module type GSSAPI = sig .. end

Utility functions

These functions convert values to strings. Useful for generating log messages.

val string_of_calling_error : calling_error -> string

val string_of_routine_error : routine_error -> string

val string_of_suppl_status : suppl_status -> string

val string_of_major_status : major_status -> string

val string_of_flag : ret_flag -> string

Common OID's for name types

See RFC 2078, section 4

val nt_hostbased_service : oid

val nt_hostbased_service_alt : oid

val nt_user_name : oid

val nt_machine_uid_name : oid

val nt_string_uid_name : oid

val nt_anonymous : oid

val nt_export_name : oid

val nt_krb5_principal_name : oid

val parse_hostbased_service : string -> string * string

Configuring clients

type support_level = [ `If_possible | `None | `Required ] 

class type client_config = object .. end

val create_client_config : ?mech_type:oid ->
       ?initiator_name:string * oid ->
       ?initiator_cred:exn ->
       ?target_name:string * oid ->
       ?privacy:support_level ->
       ?integrity:support_level ->
       ?flags:(req_flag * support_level) list ->
       unit -> client_config

class type client_props = object .. end

val marshal_client_props : client_props -> string

val unmarshal_client_props : string -> client_props

Configuring servers

class type server_config = object .. end

val create_server_config : ?mech_types:oid list ->
       ?acceptor_name:string * oid ->
       ?privacy:support_level ->
       ?integrity:support_level ->
       ?flags:(req_flag * support_level) list ->
       unit -> server_config

class type server_props = object .. end

val marshal_server_props : server_props -> string

val unmarshal_server_props : string -> server_props

Encodings

Some conversions have been moved to Netoid:

• oid_to_string is now Netoid.to_string_curly
• string_to_oid is now Netoid.of_string_curly

The remaining functions can now be found in Netgssapi_support.

Create tokens

All functions have been moved to Netgssapi_support