2
0

ntlm.h 5.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143
  1. #ifndef HEADER_VAUTH_NTLM_H
  2. #define HEADER_VAUTH_NTLM_H
  3. /***************************************************************************
  4. * _ _ ____ _
  5. * Project ___| | | | _ \| |
  6. * / __| | | | |_) | |
  7. * | (__| |_| | _ <| |___
  8. * \___|\___/|_| \_\_____|
  9. *
  10. * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
  11. *
  12. * This software is licensed as described in the file COPYING, which
  13. * you should have received as part of this distribution. The terms
  14. * are also available at https://curl.se/docs/copyright.html.
  15. *
  16. * You may opt to use, copy, modify, merge, publish, distribute and/or sell
  17. * copies of the Software, and permit persons to whom the Software is
  18. * furnished to do so, under the terms of the COPYING file.
  19. *
  20. * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
  21. * KIND, either express or implied.
  22. *
  23. * SPDX-License-Identifier: curl
  24. *
  25. ***************************************************************************/
  26. #include "curl_setup.h"
  27. #ifdef USE_NTLM
  28. /* NTLM buffer fixed size, large enough for long user + host + domain */
  29. #define NTLM_BUFSIZE 1024
  30. /* Stuff only required for curl_ntlm_msgs.c */
  31. #ifdef BUILDING_CURL_NTLM_MSGS_C
  32. /* Flag bits definitions based on
  33. https://davenport.sourceforge.net/ntlm.html */
  34. #define NTLMFLAG_NEGOTIATE_UNICODE (1<<0)
  35. /* Indicates that Unicode strings are supported for use in security buffer
  36. data. */
  37. #define NTLMFLAG_NEGOTIATE_OEM (1<<1)
  38. /* Indicates that OEM strings are supported for use in security buffer data. */
  39. #define NTLMFLAG_REQUEST_TARGET (1<<2)
  40. /* Requests that the server's authentication realm be included in the Type 2
  41. message. */
  42. /* unknown (1<<3) */
  43. #define NTLMFLAG_NEGOTIATE_SIGN (1<<4)
  44. /* Specifies that authenticated communication between the client and server
  45. should carry a digital signature (message integrity). */
  46. #define NTLMFLAG_NEGOTIATE_SEAL (1<<5)
  47. /* Specifies that authenticated communication between the client and server
  48. should be encrypted (message confidentiality). */
  49. #define NTLMFLAG_NEGOTIATE_DATAGRAM_STYLE (1<<6)
  50. /* Indicates that datagram authentication is being used. */
  51. #define NTLMFLAG_NEGOTIATE_LM_KEY (1<<7)
  52. /* Indicates that the LAN Manager session key should be used for signing and
  53. sealing authenticated communications. */
  54. #define NTLMFLAG_NEGOTIATE_NTLM_KEY (1<<9)
  55. /* Indicates that NTLM authentication is being used. */
  56. /* unknown (1<<10) */
  57. #define NTLMFLAG_NEGOTIATE_ANONYMOUS (1<<11)
  58. /* Sent by the client in the Type 3 message to indicate that an anonymous
  59. context has been established. This also affects the response fields. */
  60. #define NTLMFLAG_NEGOTIATE_DOMAIN_SUPPLIED (1<<12)
  61. /* Sent by the client in the Type 1 message to indicate that a desired
  62. authentication realm is included in the message. */
  63. #define NTLMFLAG_NEGOTIATE_WORKSTATION_SUPPLIED (1<<13)
  64. /* Sent by the client in the Type 1 message to indicate that the client
  65. workstation's name is included in the message. */
  66. #define NTLMFLAG_NEGOTIATE_LOCAL_CALL (1<<14)
  67. /* Sent by the server to indicate that the server and client are on the same
  68. machine. Implies that the client may use a pre-established local security
  69. context rather than responding to the challenge. */
  70. #define NTLMFLAG_NEGOTIATE_ALWAYS_SIGN (1<<15)
  71. /* Indicates that authenticated communication between the client and server
  72. should be signed with a "dummy" signature. */
  73. #define NTLMFLAG_TARGET_TYPE_DOMAIN (1<<16)
  74. /* Sent by the server in the Type 2 message to indicate that the target
  75. authentication realm is a domain. */
  76. #define NTLMFLAG_TARGET_TYPE_SERVER (1<<17)
  77. /* Sent by the server in the Type 2 message to indicate that the target
  78. authentication realm is a server. */
  79. #define NTLMFLAG_TARGET_TYPE_SHARE (1<<18)
  80. /* Sent by the server in the Type 2 message to indicate that the target
  81. authentication realm is a share. Presumably, this is for share-level
  82. authentication. Usage is unclear. */
  83. #define NTLMFLAG_NEGOTIATE_NTLM2_KEY (1<<19)
  84. /* Indicates that the NTLM2 signing and sealing scheme should be used for
  85. protecting authenticated communications. */
  86. #define NTLMFLAG_REQUEST_INIT_RESPONSE (1<<20)
  87. /* unknown purpose */
  88. #define NTLMFLAG_REQUEST_ACCEPT_RESPONSE (1<<21)
  89. /* unknown purpose */
  90. #define NTLMFLAG_REQUEST_NONNT_SESSION_KEY (1<<22)
  91. /* unknown purpose */
  92. #define NTLMFLAG_NEGOTIATE_TARGET_INFO (1<<23)
  93. /* Sent by the server in the Type 2 message to indicate that it is including a
  94. Target Information block in the message. */
  95. /* unknown (1<24) */
  96. /* unknown (1<25) */
  97. /* unknown (1<26) */
  98. /* unknown (1<27) */
  99. /* unknown (1<28) */
  100. #define NTLMFLAG_NEGOTIATE_128 (1<<29)
  101. /* Indicates that 128-bit encryption is supported. */
  102. #define NTLMFLAG_NEGOTIATE_KEY_EXCHANGE (1<<30)
  103. /* Indicates that the client will provide an encrypted master key in
  104. the "Session Key" field of the Type 3 message. */
  105. #define NTLMFLAG_NEGOTIATE_56 (1<<31)
  106. /* Indicates that 56-bit encryption is supported. */
  107. #endif /* BUILDING_CURL_NTLM_MSGS_C */
  108. #endif /* USE_NTLM */
  109. #endif /* HEADER_VAUTH_NTLM_H */