auth-client-interface.h revision 5911c6b4d098a4335214a0f3d84bbad08f025ab3
#ifndef AUTH_CLIENT_INTERFACE_H
#define AUTH_CLIENT_INTERFACE_H
/* Major version changes are not backwards compatible,
minor version numbers can be ignored. */
#define AUTH_CLIENT_PROTOCOL_MAJOR_VERSION 1
#define AUTH_CLIENT_PROTOCOL_MINOR_VERSION 0
/* GSSAPI can use quite large packets */
#define AUTH_CLIENT_MAX_LINE_LENGTH 16384
/* Use a bit smaller than login process timeout */
#define AUTH_REQUEST_TIMEOUT (3*60 - 30)
enum mech_security_flags {
/* Don't advertise this as available SASL mechanism (eg. APOP) */
MECH_SEC_PRIVATE = 0x0001,
/* Anonymous authentication */
MECH_SEC_ANONYMOUS = 0x0002,
/* Transfers plaintext passwords */
MECH_SEC_PLAINTEXT = 0x0004,
/* Subject to passive (dictionary) attack */
MECH_SEC_DICTIONARY = 0x0008,
/* Subject to active (non-dictionary) attack */
MECH_SEC_ACTIVE = 0x0010,
/* Provides forward secrecy between sessions */
MECH_SEC_FORWARD_SECRECY = 0x0020,
/* Provides mutual authentication */
MECH_SEC_MUTUAL_AUTH = 0x0040
};
#endif