Blob Blame History Raw
/**
 * FreeRDP: A Remote Desktop Protocol Implementation
 * Generic Security Service Application Program Interface (GSSAPI)
 *
 * Copyright 2015 ANSSI, Author Thomas Calderon
 * Copyright 2015 Marc-Andre Moreau <marcandre.moreau@gmail.com>
 * Copyright 2017 Dorian Ducournau <dorian.ducournau@gmail.com>
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#ifndef FREERDP_SSPI_GSS_PRIVATE_H
#define FREERDP_SSPI_GSS_PRIVATE_H

#include <winpr/crt.h>
#include <winpr/sspi.h>

/**
 * The following are ABI-compatible, non-conflicting GSSAPI definitions
 *
 * http://tools.ietf.org/html/rfc2743
 * http://tools.ietf.org/html/rfc2744
 */

#define SSPI_GSSAPI
#define SSPI_GSSOID

struct sspi_gss_name_struct;
typedef struct sspi_gss_name_struct* sspi_gss_name_t;

struct sspi_gss_cred_id_struct;
typedef struct sspi_gss_cred_id_struct* sspi_gss_cred_id_t;

struct sspi_gss_ctx_id_struct;
typedef struct sspi_gss_ctx_id_struct* sspi_gss_ctx_id_t;

typedef struct sspi_gss_OID_desc_struct
{
	UINT32 length;
	void* elements;
} sspi_gss_OID_desc, *sspi_gss_OID;

typedef struct sspi_gss_OID_set_desc_struct
{
	size_t count;
	sspi_gss_OID elements;
} sspi_gss_OID_set_desc, *sspi_gss_OID_set;

typedef struct sspi_gss_buffer_desc_struct
{
	size_t length;
	void* value;
} sspi_gss_buffer_desc, *sspi_gss_buffer_t;

typedef struct sspi_gss_channel_bindings_struct
{
	UINT32 initiator_addrtype;
	sspi_gss_buffer_desc initiator_address;
	UINT32 acceptor_addrtype;
	sspi_gss_buffer_desc acceptor_address;
	sspi_gss_buffer_desc application_data;
} * sspi_gss_channel_bindings_t;

typedef UINT32 sspi_gss_qop_t;
typedef int sspi_gss_cred_usage_t;

#define SSPI_GSS_C_DELEG_FLAG 1
#define SSPI_GSS_C_MUTUAL_FLAG 2
#define SSPI_GSS_C_REPLAY_FLAG 4
#define SSPI_GSS_C_SEQUENCE_FLAG 8
#define SSPI_GSS_C_CONF_FLAG 16
#define SSPI_GSS_C_INTEG_FLAG 32
#define SSPI_GSS_C_ANON_FLAG 64
#define SSPI_GSS_C_PROT_READY_FLAG 128
#define SSPI_GSS_C_TRANS_FLAG 256
#define SSPI_GSS_C_DELEG_POLICY_FLAG 32768

#define SSPI_GSS_C_BOTH 0
#define SSPI_GSS_C_INITIATE 1
#define SSPI_GSS_C_ACCEPT 2

#define SSPI_GSS_C_GSS_CODE 1
#define SSPI_GSS_C_MECH_CODE 2

#define SSPI_GSS_C_AF_UNSPEC 0
#define SSPI_GSS_C_AF_LOCAL 1
#define SSPI_GSS_C_AF_INET 2
#define SSPI_GSS_C_AF_IMPLINK 3
#define SSPI_GSS_C_AF_PUP 4
#define SSPI_GSS_C_AF_CHAOS 5
#define SSPI_GSS_C_AF_NS 6
#define SSPI_GSS_C_AF_NBS 7
#define SSPI_GSS_C_AF_ECMA 8
#define SSPI_GSS_C_AF_DATAKIT 9
#define SSPI_GSS_C_AF_CCITT 10
#define SSPI_GSS_C_AF_SNA 11
#define SSPI_GSS_C_AF_DECnet 12
#define SSPI_GSS_C_AF_DLI 13
#define SSPI_GSS_C_AF_LAT 14
#define SSPI_GSS_C_AF_HYLINK 15
#define SSPI_GSS_C_AF_APPLETALK 16
#define SSPI_GSS_C_AF_BSC 17
#define SSPI_GSS_C_AF_DSS 18
#define SSPI_GSS_C_AF_OSI 19
#define SSPI_GSS_C_AF_NETBIOS 20
#define SSPI_GSS_C_AF_X25 21
#define SSPI_GSS_C_AF_NULLADDR 255

#define SSPI_GSS_C_NO_NAME ((sspi_gss_name_t)0)
#define SSPI_GSS_C_NO_BUFFER ((sspi_gss_buffer_t)0)
#define SSPI_GSS_C_NO_OID ((sspi_gss_OID)0)
#define SSPI_GSS_C_NO_OID_SET ((sspi_gss_OID_set)0)
#define SSPI_GSS_C_NO_CONTEXT ((sspi_gss_ctx_id_t)0)
#define SSPI_GSS_C_NO_CREDENTIAL ((sspi_gss_cred_id_t)0)
#define SSPI_GSS_C_NO_CHANNEL_BINDINGS ((sspi_gss_channel_bindings_t)0)
#define SSPI_GSS_C_EMPTY_BUFFER \
	{                           \
		0, NULL                 \
	}

#define SSPI_GSS_C_NULL_OID SSPI_GSS_C_NO_OID
#define SSPI_GSS_C_NULL_OID_SET SSPI_GSS_C_NO_OID_SET

#define SSPI_GSS_C_QOP_DEFAULT 0

#define SSPI_GSS_C_INDEFINITE ((UINT32)0xFFFFFFFF)

#define SSPI_GSS_S_COMPLETE 0

#define SSPI_GSS_C_CALLING_ERROR_OFFSET 24
#define SSPI_GSS_C_ROUTINE_ERROR_OFFSET 16
#define SSPI_GSS_C_SUPPLEMENTARY_OFFSET 0
#define SSPI_GSS_C_CALLING_ERROR_MASK ((UINT32)0377)
#define SSPI_GSS_C_ROUTINE_ERROR_MASK ((UINT32)0377)
#define SSPI_GSS_C_SUPPLEMENTARY_MASK ((UINT32)0177777)

#define SSPI_GSS_CALLING_ERROR(_x) \
	((_x) & (SSPI_GSS_C_CALLING_ERROR_MASK << SSPI_GSS_C_CALLING_ERROR_OFFSET))
#define SSPI_GSS_ROUTINE_ERROR(_x) \
	((_x) & (SSPI_GSS_C_ROUTINE_ERROR_MASK << SSPI_GSS_C_ROUTINE_ERROR_OFFSET))
#define SSPI_GSS_SUPPLEMENTARY_INFO(_x) \
	((_x) & (SSPI_GSS_C_SUPPLEMENTARY_MASK << SSPI_GSS_C_SUPPLEMENTARY_OFFSET))
#define SSPI_GSS_ERROR(_x)                                                        \
	((_x) & ((SSPI_GSS_C_CALLING_ERROR_MASK << SSPI_GSS_C_CALLING_ERROR_OFFSET) | \
	         (SSPI_GSS_C_ROUTINE_ERROR_MASK << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)))

#define SSPI_GSS_S_CALL_INACCESSIBLE_READ (((UINT32)1) << SSPI_GSS_C_CALLING_ERROR_OFFSET)
#define SSPI_GSS_S_CALL_INACCESSIBLE_WRITE (((UINT32)2) << SSPI_GSS_C_CALLING_ERROR_OFFSET)
#define SSPI_GSS_S_CALL_BAD_STRUCTURE (((UINT32)3) << SSPI_GSS_C_CALLING_ERROR_OFFSET)

#define SSPI_GSS_S_BAD_MECH (((UINT32)1) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_BAD_NAME (((UINT32)2) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_BAD_NAMETYPE (((UINT32)3) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_BAD_BINDINGS (((UINT32)4) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_BAD_STATUS (((UINT32)5) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_BAD_SIG (((UINT32)6) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_NO_CRED (((UINT32)7) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_NO_CONTEXT (((UINT32)8) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_DEFECTIVE_TOKEN (((UINT32)9) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_DEFECTIVE_CREDENTIAL (((UINT32)10) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_CREDENTIALS_EXPIRED (((UINT32)11) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_CONTEXT_EXPIRED (((UINT32)12) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_FAILURE (((UINT32)13) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_BAD_QOP (((UINT32)14) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_UNAUTHORIZED (((UINT32)15) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_UNAVAILABLE (((UINT32)16) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_DUPLICATE_ELEMENT (((UINT32)17) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_NAME_NOT_MN (((UINT32)18) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)
#define SSPI_GSS_S_BAD_MECH_ATTR (((UINT32)19) << SSPI_GSS_C_ROUTINE_ERROR_OFFSET)

#define SSPI_GSS_S_CONTINUE_NEEDED (1 << (SSPI_GSS_C_SUPPLEMENTARY_OFFSET + 0))
#define SSPI_GSS_S_DUPLICATE_TOKEN (1 << (SSPI_GSS_C_SUPPLEMENTARY_OFFSET + 1))
#define SSPI_GSS_S_OLD_TOKEN (1 << (SSPI_GSS_C_SUPPLEMENTARY_OFFSET + 2))
#define SSPI_GSS_S_UNSEQ_TOKEN (1 << (SSPI_GSS_C_SUPPLEMENTARY_OFFSET + 3))
#define SSPI_GSS_S_GAP_TOKEN (1 << (SSPI_GSS_C_SUPPLEMENTARY_OFFSET + 4))

#define SSPI_GSS_C_PRF_KEY_FULL 0
#define SSPI_GSS_C_PRF_KEY_PARTIAL 1

#ifdef __cplusplus
extern "C"
{
#endif

	SSPI_GSSOID extern sspi_gss_OID SSPI_GSS_C_NT_USER_NAME;
	SSPI_GSSOID extern sspi_gss_OID SSPI_GSS_C_NT_MACHINE_UID_NAME;
	SSPI_GSSOID extern sspi_gss_OID SSPI_GSS_C_NT_STRING_UID_NAME;
	SSPI_GSSOID extern sspi_gss_OID SSPI_GSS_C_NT_HOSTBASED_SERVICE_X;
	SSPI_GSSOID extern sspi_gss_OID SSPI_GSS_C_NT_HOSTBASED_SERVICE;
	SSPI_GSSOID extern sspi_gss_OID SSPI_GSS_C_NT_ANONYMOUS;
	SSPI_GSSOID extern sspi_gss_OID SSPI_GSS_C_NT_EXPORT_NAME;

	UINT32 SSPI_GSSAPI sspi_gss_acquire_cred(UINT32* minor_status, sspi_gss_name_t desired_name,
	                                         UINT32 time_req, sspi_gss_OID_set desired_mechs,
	                                         sspi_gss_cred_usage_t cred_usage,
	                                         sspi_gss_cred_id_t* output_cred_handle,
	                                         sspi_gss_OID_set* actual_mechs, UINT32* time_rec);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_acquire_cred)(
	    UINT32* minor_status, sspi_gss_name_t desired_name, UINT32 time_req,
	    sspi_gss_OID_set desired_mechs, sspi_gss_cred_usage_t cred_usage,
	    sspi_gss_cred_id_t* output_cred_handle, sspi_gss_OID_set* actual_mechs, UINT32* time_rec);

	UINT32 SSPI_GSSAPI sspi_gss_release_cred(UINT32* minor_status, sspi_gss_cred_id_t* cred_handle);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_release_cred)(UINT32* minor_status,
	                                                      sspi_gss_cred_id_t* cred_handle);

	UINT32 SSPI_GSSAPI sspi_gss_init_sec_context(
	    UINT32* minor_status, sspi_gss_cred_id_t claimant_cred_handle,
	    sspi_gss_ctx_id_t* context_handle, sspi_gss_name_t target_name, sspi_gss_OID mech_type,
	    UINT32 req_flags, UINT32 time_req, sspi_gss_channel_bindings_t input_chan_bindings,
	    sspi_gss_buffer_t input_token, sspi_gss_OID* actual_mech_type,
	    sspi_gss_buffer_t output_token, UINT32* ret_flags, UINT32* time_rec);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_init_sec_context)(
	    UINT32* minor_status, sspi_gss_cred_id_t claimant_cred_handle,
	    sspi_gss_ctx_id_t* context_handle, sspi_gss_name_t target_name, sspi_gss_OID mech_type,
	    UINT32 req_flags, UINT32 time_req, sspi_gss_channel_bindings_t input_chan_bindings,
	    sspi_gss_buffer_t input_token, sspi_gss_OID* actual_mech_type,
	    sspi_gss_buffer_t output_token, UINT32* ret_flags, UINT32* time_rec);

	UINT32 SSPI_GSSAPI sspi_gss_accept_sec_context(
	    UINT32* minor_status, sspi_gss_ctx_id_t* context_handle,
	    sspi_gss_cred_id_t acceptor_cred_handle, sspi_gss_buffer_t input_token_buffer,
	    sspi_gss_channel_bindings_t input_chan_bindings, sspi_gss_name_t* src_name,
	    sspi_gss_OID* mech_type, sspi_gss_buffer_t output_token, UINT32* ret_flags,
	    UINT32* time_rec, sspi_gss_cred_id_t* delegated_cred_handle);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_accept_sec_context)(
	    UINT32* minor_status, sspi_gss_ctx_id_t* context_handle,
	    sspi_gss_cred_id_t acceptor_cred_handle, sspi_gss_buffer_t input_token_buffer,
	    sspi_gss_channel_bindings_t input_chan_bindings, sspi_gss_name_t* src_name,
	    sspi_gss_OID* mech_type, sspi_gss_buffer_t output_token, UINT32* ret_flags,
	    UINT32* time_rec, sspi_gss_cred_id_t* delegated_cred_handle);

	UINT32 SSPI_GSSAPI sspi_gss_process_context_token(UINT32* minor_status,
	                                                  sspi_gss_ctx_id_t context_handle,
	                                                  sspi_gss_buffer_t token_buffer);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_process_context_token)(UINT32* minor_status,
	                                                               sspi_gss_ctx_id_t context_handle,
	                                                               sspi_gss_buffer_t token_buffer);

	UINT32 SSPI_GSSAPI sspi_gss_delete_sec_context(UINT32* minor_status,
	                                               sspi_gss_ctx_id_t* context_handle,
	                                               sspi_gss_buffer_t output_token);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_delete_sec_context)(UINT32* minor_status,
	                                                            sspi_gss_ctx_id_t* context_handle,
	                                                            sspi_gss_buffer_t output_token);

	UINT32 SSPI_GSSAPI sspi_gss_context_time(UINT32* minor_status, sspi_gss_ctx_id_t context_handle,
	                                         UINT32* time_rec);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_context_time)(UINT32* minor_status,
	                                                      sspi_gss_ctx_id_t context_handle,
	                                                      UINT32* time_rec);

	UINT32 SSPI_GSSAPI sspi_gss_get_mic(UINT32* minor_status, sspi_gss_ctx_id_t context_handle,
	                                    sspi_gss_qop_t qop_req, sspi_gss_buffer_t message_buffer,
	                                    sspi_gss_buffer_t message_token);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_get_mic)(UINT32* minor_status,
	                                                 sspi_gss_ctx_id_t context_handle,
	                                                 sspi_gss_qop_t qop_req,
	                                                 sspi_gss_buffer_t message_buffer,
	                                                 sspi_gss_buffer_t message_token);

	UINT32 SSPI_GSSAPI sspi_gss_verify_mic(UINT32* minor_status, sspi_gss_ctx_id_t context_handle,
	                                       sspi_gss_buffer_t message_buffer,
	                                       sspi_gss_buffer_t message_token,
	                                       sspi_gss_qop_t* qop_state);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_verify_mic)(UINT32* minor_status,
	                                                    sspi_gss_ctx_id_t context_handle,
	                                                    sspi_gss_buffer_t message_buffer,
	                                                    sspi_gss_buffer_t message_token,
	                                                    sspi_gss_qop_t* qop_state);

	UINT32 SSPI_GSSAPI sspi_gss_wrap(UINT32* minor_status, sspi_gss_ctx_id_t context_handle,
	                                 int conf_req_flag, sspi_gss_qop_t qop_req,
	                                 sspi_gss_buffer_t input_message_buffer, int* conf_state,
	                                 sspi_gss_buffer_t output_message_buffer);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_wrap)(UINT32* minor_status,
	                                              sspi_gss_ctx_id_t context_handle,
	                                              int conf_req_flag, sspi_gss_qop_t qop_req,
	                                              sspi_gss_buffer_t input_message_buffer,
	                                              int* conf_state,
	                                              sspi_gss_buffer_t output_message_buffer);

	UINT32 SSPI_GSSAPI sspi_gss_unwrap(UINT32* minor_status, const sspi_gss_ctx_id_t context_handle,
	                                   const sspi_gss_buffer_t input_message_buffer,
	                                   sspi_gss_buffer_t output_message_buffer, int* conf_state,
	                                   sspi_gss_qop_t* qop_state);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_unwrap)(UINT32* minor_status,
	                                                sspi_gss_ctx_id_t context_handle,
	                                                sspi_gss_buffer_t input_message_buffer,
	                                                sspi_gss_buffer_t output_message_buffer,
	                                                int* conf_state, sspi_gss_qop_t* qop_state);

	UINT32 SSPI_GSSAPI sspi_gss_display_status(UINT32* minor_status, UINT32 status_value,
	                                           int status_type, sspi_gss_OID mech_type,
	                                           UINT32* message_context,
	                                           sspi_gss_buffer_t status_string);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_display_status)(UINT32* minor_status,
	                                                        UINT32 status_value, int status_type,
	                                                        sspi_gss_OID mech_type,
	                                                        UINT32* message_context,
	                                                        sspi_gss_buffer_t status_string);

	UINT32 SSPI_GSSAPI sspi_gss_indicate_mechs(UINT32* minor_status, sspi_gss_OID_set* mech_set);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_indicate_mechs)(UINT32* minor_status,
	                                                        sspi_gss_OID_set* mech_set);

	UINT32 SSPI_GSSAPI sspi_gss_compare_name(UINT32* minor_status, sspi_gss_name_t name1,
	                                         sspi_gss_name_t name2, int* name_equal);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_compare_name)(UINT32* minor_status,
	                                                      sspi_gss_name_t name1,
	                                                      sspi_gss_name_t name2, int* name_equal);

	UINT32 SSPI_GSSAPI sspi_gss_display_name(UINT32* minor_status, sspi_gss_name_t input_name,
	                                         sspi_gss_buffer_t output_name_buffer,
	                                         sspi_gss_OID* output_name_type);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_display_name)(UINT32* minor_status,
	                                                      sspi_gss_name_t input_name,
	                                                      sspi_gss_buffer_t output_name_buffer,
	                                                      sspi_gss_OID* output_name_type);

	UINT32 SSPI_GSSAPI sspi_gss_import_name(UINT32* minor_status,
	                                        sspi_gss_buffer_t input_name_buffer,
	                                        sspi_gss_OID input_name_type,
	                                        sspi_gss_name_t* output_name);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_import_name)(UINT32* minor_status,
	                                                     sspi_gss_buffer_t input_name_buffer,
	                                                     sspi_gss_OID input_name_type,
	                                                     sspi_gss_name_t* output_name);

	UINT32 SSPI_GSSAPI sspi_gss_release_name(UINT32* minor_status, sspi_gss_name_t* input_name);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_release_name)(UINT32* minor_status,
	                                                      sspi_gss_name_t* input_name);

	UINT32 SSPI_GSSAPI sspi_gss_release_buffer(UINT32* minor_status, sspi_gss_buffer_t buffer);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_release_buffer)(UINT32* minor_status,
	                                                        sspi_gss_buffer_t buffer);

	UINT32 SSPI_GSSAPI sspi_gss_release_oid_set(UINT32* minor_status, sspi_gss_OID_set* set);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_release_oid_set)(UINT32* minor_status,
	                                                         sspi_gss_OID_set* set);

	UINT32 SSPI_GSSAPI sspi_gss_inquire_cred(UINT32* minor_status, sspi_gss_cred_id_t cred_handle,
	                                         sspi_gss_name_t* name, UINT32* lifetime,
	                                         sspi_gss_cred_usage_t* cred_usage,
	                                         sspi_gss_OID_set* mechanisms);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_inquire_cred)(UINT32* minor_status,
	                                                      sspi_gss_cred_id_t cred_handle,
	                                                      sspi_gss_name_t* name, UINT32* lifetime,
	                                                      sspi_gss_cred_usage_t* cred_usage,
	                                                      sspi_gss_OID_set* mechanisms);

	UINT32 SSPI_GSSAPI sspi_gss_inquire_context(UINT32* minor_status,
	                                            sspi_gss_ctx_id_t context_handle,
	                                            sspi_gss_name_t* src_name,
	                                            sspi_gss_name_t* targ_name, UINT32* lifetime_rec,
	                                            sspi_gss_OID* mech_type, UINT32* ctx_flags,
	                                            int* locally_initiated, int* open);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_inquire_context)(
	    UINT32* minor_status, sspi_gss_ctx_id_t context_handle, sspi_gss_name_t* src_name,
	    sspi_gss_name_t* targ_name, UINT32* lifetime_rec, sspi_gss_OID* mech_type,
	    UINT32* ctx_flags, int* locally_initiated, int* open);

	UINT32 SSPI_GSSAPI sspi_gss_wrap_size_limit(UINT32* minor_status,
	                                            sspi_gss_ctx_id_t context_handle, int conf_req_flag,
	                                            sspi_gss_qop_t qop_req, UINT32 req_output_size,
	                                            UINT32* max_input_size);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_wrap_size_limit)(
	    UINT32* minor_status, sspi_gss_ctx_id_t context_handle, int conf_req_flag,
	    sspi_gss_qop_t qop_req, UINT32 req_output_size, UINT32* max_input_size);

	UINT32 SSPI_GSSAPI sspi_gss_import_name_object(UINT32* minor_status, void* input_name,
	                                               sspi_gss_OID input_name_type,
	                                               sspi_gss_name_t* output_name);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_import_name_object)(UINT32* minor_status,
	                                                            void* input_name,
	                                                            sspi_gss_OID input_name_type,
	                                                            sspi_gss_name_t* output_name);

	UINT32 SSPI_GSSAPI sspi_gss_export_name_object(UINT32* minor_status, sspi_gss_name_t input_name,
	                                               sspi_gss_OID desired_name_type,
	                                               void** output_name);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_export_name_object)(UINT32* minor_status,
	                                                            sspi_gss_name_t input_name,
	                                                            sspi_gss_OID desired_name_type,
	                                                            void** output_name);

	UINT32 SSPI_GSSAPI sspi_gss_add_cred(UINT32* minor_status, sspi_gss_cred_id_t input_cred_handle,
	                                     sspi_gss_name_t desired_name, sspi_gss_OID desired_mech,
	                                     sspi_gss_cred_usage_t cred_usage,
	                                     UINT32 initiator_time_req, UINT32 acceptor_time_req,
	                                     sspi_gss_cred_id_t* output_cred_handle,
	                                     sspi_gss_OID_set* actual_mechs, UINT32* initiator_time_rec,
	                                     UINT32* acceptor_time_rec);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_add_cred)(
	    UINT32* minor_status, sspi_gss_cred_id_t input_cred_handle, sspi_gss_name_t desired_name,
	    sspi_gss_OID desired_mech, sspi_gss_cred_usage_t cred_usage, UINT32 initiator_time_req,
	    UINT32 acceptor_time_req, sspi_gss_cred_id_t* output_cred_handle,
	    sspi_gss_OID_set* actual_mechs, UINT32* initiator_time_rec, UINT32* acceptor_time_rec);

	UINT32 SSPI_GSSAPI sspi_gss_inquire_cred_by_mech(UINT32* minor_status,
	                                                 sspi_gss_cred_id_t cred_handle,
	                                                 sspi_gss_OID mech_type, sspi_gss_name_t* name,
	                                                 UINT32* initiator_lifetime,
	                                                 UINT32* acceptor_lifetime,
	                                                 sspi_gss_cred_usage_t* cred_usage);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_inquire_cred_by_mech)(
	    UINT32* minor_status, sspi_gss_cred_id_t cred_handle, sspi_gss_OID mech_type,
	    sspi_gss_name_t* name, UINT32* initiator_lifetime, UINT32* acceptor_lifetime,
	    sspi_gss_cred_usage_t* cred_usage);

	UINT32 SSPI_GSSAPI sspi_gss_export_sec_context(UINT32* minor_status,
	                                               sspi_gss_ctx_id_t* context_handle,
	                                               sspi_gss_buffer_t interprocess_token);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_export_sec_context)(
	    UINT32* minor_status, sspi_gss_ctx_id_t* context_handle,
	    sspi_gss_buffer_t interprocess_token);

	UINT32 SSPI_GSSAPI sspi_gss_import_sec_context(UINT32* minor_status,
	                                               sspi_gss_buffer_t interprocess_token,
	                                               sspi_gss_ctx_id_t* context_handle);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_import_sec_context)(
	    UINT32* minor_status, sspi_gss_buffer_t interprocess_token,
	    sspi_gss_ctx_id_t* context_handle);

	UINT32 SSPI_GSSAPI sspi_gss_release_oid(UINT32* minor_status, sspi_gss_OID* oid);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_release_oid)(UINT32* minor_status, sspi_gss_OID* oid);

	UINT32 SSPI_GSSAPI sspi_gss_create_empty_oid_set(UINT32* minor_status,
	                                                 sspi_gss_OID_set* oid_set);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_create_empty_oid_set)(UINT32* minor_status,
	                                                              sspi_gss_OID_set* oid_set);

	UINT32 SSPI_GSSAPI sspi_gss_add_oid_set_member(UINT32* minor_status, sspi_gss_OID member_oid,
	                                               sspi_gss_OID_set* oid_set);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_add_oid_set_member)(UINT32* minor_status,
	                                                            sspi_gss_OID member_oid,
	                                                            sspi_gss_OID_set* oid_set);

	UINT32 SSPI_GSSAPI sspi_gss_test_oid_set_member(UINT32* minor_status, sspi_gss_OID member,
	                                                sspi_gss_OID_set set, int* present);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_test_oid_set_member)(UINT32* minor_status,
	                                                             sspi_gss_OID member,
	                                                             sspi_gss_OID_set set,
	                                                             int* present);

	UINT32 SSPI_GSSAPI sspi_gss_str_to_oid(UINT32* minor_status, sspi_gss_buffer_t oid_str,
	                                       sspi_gss_OID* oid);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_str_to_oid)(UINT32* minor_status,
	                                                    sspi_gss_buffer_t oid_str,
	                                                    sspi_gss_OID* oid);

	UINT32 SSPI_GSSAPI sspi_gss_oid_to_str(UINT32* minor_status, sspi_gss_OID oid,
	                                       sspi_gss_buffer_t oid_str);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_oid_to_str)(UINT32* minor_status, sspi_gss_OID oid,
	                                                    sspi_gss_buffer_t oid_str);

	UINT32 SSPI_GSSAPI sspi_gss_inquire_names_for_mech(UINT32* minor_status, sspi_gss_OID mechanism,
	                                                   sspi_gss_OID_set* name_types);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_inquire_names_for_mech)(UINT32* minor_status,
	                                                                sspi_gss_OID mechanism,
	                                                                sspi_gss_OID_set* name_types);

	UINT32 SSPI_GSSAPI sspi_gss_inquire_mechs_for_name(UINT32* minor_status,
	                                                   const sspi_gss_name_t input_name,
	                                                   sspi_gss_OID_set* mech_types);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_inquire_mechs_for_name)(
	    UINT32* minor_status, const sspi_gss_name_t input_name, sspi_gss_OID_set* mech_types);

	UINT32 SSPI_GSSAPI sspi_gss_sign(UINT32* minor_status, sspi_gss_ctx_id_t context_handle,
	                                 int qop_req, sspi_gss_buffer_t message_buffer,
	                                 sspi_gss_buffer_t message_token);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_sign)(UINT32* minor_status,
	                                              sspi_gss_ctx_id_t context_handle, int qop_req,
	                                              sspi_gss_buffer_t message_buffer,
	                                              sspi_gss_buffer_t message_token);

	UINT32 SSPI_GSSAPI sspi_gss_verify(UINT32* minor_status, sspi_gss_ctx_id_t context_handle,
	                                   sspi_gss_buffer_t message_buffer,
	                                   sspi_gss_buffer_t token_buffer, int* qop_state);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_verify)(UINT32* minor_status,
	                                                sspi_gss_ctx_id_t context_handle,
	                                                sspi_gss_buffer_t message_buffer,
	                                                sspi_gss_buffer_t token_buffer, int* qop_state);

	UINT32 SSPI_GSSAPI sspi_gss_seal(UINT32* minor_status, sspi_gss_ctx_id_t context_handle,
	                                 int conf_req_flag, int qop_req,
	                                 sspi_gss_buffer_t input_message_buffer, int* conf_state,
	                                 sspi_gss_buffer_t output_message_buffer);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_seal)(UINT32* minor_status,
	                                              sspi_gss_ctx_id_t context_handle,
	                                              int conf_req_flag, int qop_req,
	                                              sspi_gss_buffer_t input_message_buffer,
	                                              int* conf_state,
	                                              sspi_gss_buffer_t output_message_buffer);

	UINT32 SSPI_GSSAPI sspi_gss_unseal(UINT32* minor_status, sspi_gss_ctx_id_t context_handle,
	                                   sspi_gss_buffer_t input_message_buffer,
	                                   sspi_gss_buffer_t output_message_buffer, int* conf_state,
	                                   int* qop_state);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_unseal)(UINT32* minor_status,
	                                                sspi_gss_ctx_id_t context_handle,
	                                                sspi_gss_buffer_t input_message_buffer,
	                                                sspi_gss_buffer_t output_message_buffer,
	                                                int* conf_state, int* qop_state);

	UINT32 SSPI_GSSAPI sspi_gss_export_name(UINT32* minor_status, const sspi_gss_name_t input_name,
	                                        sspi_gss_buffer_t exported_name);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_export_name)(UINT32* minor_status,
	                                                     const sspi_gss_name_t input_name,
	                                                     sspi_gss_buffer_t exported_name);

	UINT32 SSPI_GSSAPI sspi_gss_duplicate_name(UINT32* minor_status,
	                                           const sspi_gss_name_t input_name,
	                                           sspi_gss_name_t* dest_name);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_duplicate_name)(UINT32* minor_status,
	                                                        const sspi_gss_name_t input_name,
	                                                        sspi_gss_name_t* dest_name);

	UINT32 SSPI_GSSAPI sspi_gss_canonicalize_name(UINT32* minor_status,
	                                              const sspi_gss_name_t input_name,
	                                              const sspi_gss_OID mech_type,
	                                              sspi_gss_name_t* output_name);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_canonicalize_name)(UINT32* minor_status,
	                                                           const sspi_gss_name_t input_name,
	                                                           const sspi_gss_OID mech_type,
	                                                           sspi_gss_name_t* output_name);

	UINT32 SSPI_GSSAPI sspi_gss_pseudo_random(UINT32* minor_status, sspi_gss_ctx_id_t context,
	                                          int prf_key, const sspi_gss_buffer_t prf_in,
	                                          SSIZE_T desired_output_len,
	                                          sspi_gss_buffer_t prf_out);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_pseudo_random)(UINT32* minor_status,
	                                                       sspi_gss_ctx_id_t context, int prf_key,
	                                                       const sspi_gss_buffer_t prf_in,
	                                                       SSIZE_T desired_output_len,
	                                                       sspi_gss_buffer_t prf_out);

	UINT32 SSPI_GSSAPI sspi_gss_store_cred(UINT32* minor_status,
	                                       const sspi_gss_cred_id_t input_cred_handle,
	                                       sspi_gss_cred_usage_t input_usage,
	                                       const sspi_gss_OID desired_mech, UINT32 overwrite_cred,
	                                       UINT32 default_cred, sspi_gss_OID_set* elements_stored,
	                                       sspi_gss_cred_usage_t* cred_usage_stored);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_store_cred)(UINT32* minor_status,
	                                                    const sspi_gss_cred_id_t input_cred_handle,
	                                                    sspi_gss_cred_usage_t input_usage,
	                                                    const sspi_gss_OID desired_mech,
	                                                    UINT32 overwrite_cred, UINT32 default_cred,
	                                                    sspi_gss_OID_set* elements_stored,
	                                                    sspi_gss_cred_usage_t* cred_usage_stored);

	UINT32 SSPI_GSSAPI sspi_gss_set_neg_mechs(UINT32* minor_status, sspi_gss_cred_id_t cred_handle,
	                                          const sspi_gss_OID_set mech_set);

	typedef UINT32(SSPI_GSSAPI* fn_sspi_gss_set_neg_mechs)(UINT32* minor_status,
	                                                       sspi_gss_cred_id_t cred_handle,
	                                                       const sspi_gss_OID_set mech_set);

#ifdef __cplusplus
}
#endif

struct _GSSAPI_FUNCTION_TABLE
{
	fn_sspi_gss_acquire_cred gss_acquire_cred;
	fn_sspi_gss_release_cred gss_release_cred;
	fn_sspi_gss_init_sec_context gss_init_sec_context;
	fn_sspi_gss_accept_sec_context gss_accept_sec_context;
	fn_sspi_gss_process_context_token gss_process_context_token;
	fn_sspi_gss_delete_sec_context gss_delete_sec_context;
	fn_sspi_gss_context_time gss_context_time;
	fn_sspi_gss_get_mic gss_get_mic;
	fn_sspi_gss_verify_mic gss_verify_mic;
	fn_sspi_gss_wrap gss_wrap;
	fn_sspi_gss_unwrap gss_unwrap;
	fn_sspi_gss_display_status gss_display_status;
	fn_sspi_gss_indicate_mechs gss_indicate_mechs;
	fn_sspi_gss_compare_name gss_compare_name;
	fn_sspi_gss_display_name gss_display_name;
	fn_sspi_gss_import_name gss_import_name;
	fn_sspi_gss_release_name gss_release_name;
	fn_sspi_gss_release_buffer gss_release_buffer;
	fn_sspi_gss_release_oid_set gss_release_oid_set;
	fn_sspi_gss_inquire_cred gss_inquire_cred;
	fn_sspi_gss_inquire_context gss_inquire_context;
	fn_sspi_gss_wrap_size_limit gss_wrap_size_limit;
	fn_sspi_gss_import_name_object gss_import_name_object;
	fn_sspi_gss_export_name_object gss_export_name_object;
	fn_sspi_gss_add_cred gss_add_cred;
	fn_sspi_gss_inquire_cred_by_mech gss_inquire_cred_by_mech;
	fn_sspi_gss_export_sec_context gss_export_sec_context;
	fn_sspi_gss_import_sec_context gss_import_sec_context;
	fn_sspi_gss_release_oid gss_release_oid;
	fn_sspi_gss_create_empty_oid_set gss_create_empty_oid_set;
	fn_sspi_gss_add_oid_set_member gss_add_oid_set_member;
	fn_sspi_gss_test_oid_set_member gss_test_oid_set_member;
	fn_sspi_gss_str_to_oid gss_str_to_oid;
	fn_sspi_gss_oid_to_str gss_oid_to_str;
	fn_sspi_gss_inquire_names_for_mech gss_inquire_names_for_mech;
	fn_sspi_gss_inquire_mechs_for_name gss_inquire_mechs_for_name;
	fn_sspi_gss_sign gss_sign;
	fn_sspi_gss_verify gss_verify;
	fn_sspi_gss_seal gss_seal;
	fn_sspi_gss_unseal gss_unseal;
	fn_sspi_gss_export_name gss_export_name;
	fn_sspi_gss_duplicate_name gss_duplicate_name;
	fn_sspi_gss_canonicalize_name gss_canonicalize_name;
	fn_sspi_gss_pseudo_random gss_pseudo_random;
	fn_sspi_gss_store_cred gss_store_cred;
	fn_sspi_gss_set_neg_mechs gss_set_neg_mechs;
};
typedef struct _GSSAPI_FUNCTION_TABLE GSSAPI_FUNCTION_TABLE;

GSSAPI_FUNCTION_TABLE* SEC_ENTRY gssApi_InitSecurityInterface(void);

#ifdef __cplusplus
extern "C"
{
#endif

#ifdef __cplusplus
}
#endif

#endif /* FREERDP_SSPI_GSS_PRIVATE_H */