1
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
3
* Copyright 1990,1991,2008 by the Massachusetts Institute of Technology.
6
* Export of this software from the United States of America may
7
* require a specific license from the United States Government.
8
* It is the responsibility of any person or organization contemplating
9
* export to obtain such a license before exporting.
11
* WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
12
* distribute this software and its documentation for any purpose and
13
* without fee is hereby granted, provided that the above copyright
14
* notice appear in all copies and that both that copyright notice and
15
* this permission notice appear in supporting documentation, and that
16
* the name of M.I.T. not be used in advertising or publicity pertaining
17
* to distribution of the software without specific, written prior
18
* permission. Furthermore if you modify this software you must label
19
* your software as modified software and not distribute it in such a
20
* fashion that it might be confused with the original M.I.T. software.
21
* M.I.T. makes no representations about the suitability of
22
* this software for any purpose. It is provided "as is" without express
23
* or implied warranty.
26
/* Site- and OS- dependent configuration */
32
/* Don't try to pull in autoconf.h for Windows, since it's not used */
33
#ifndef KRB5_AUTOCONF__
34
#define KRB5_AUTOCONF__
39
#if defined(__MACH__) && defined(__APPLE__)
40
# include <TargetConditionals.h>
44
#define DEFAULT_PROFILE_FILENAME "krb5.ini"
47
#define DEFAULT_SECURE_PROFILE_PATH "/Library/Preferences/edu.mit.Kerberos:/etc/krb5.conf:@SYSCONFDIR/krb5.conf"
48
#define DEFAULT_PROFILE_PATH ("~/Library/Preferences/edu.mit.Kerberos" ":" DEFAULT_SECURE_PROFILE_PATH)
49
#define KRB5_PLUGIN_BUNDLE_DIR "/System/Library/KerberosPlugins/KerberosFrameworkPlugins"
50
#define KDB5_PLUGIN_BUNDLE_DIR "/System/Library/KerberosPlugins/KerberosDatabasePlugins"
51
#define KRB5_AUTHDATA_PLUGIN_BUNDLE_DIR "/System/Library/KerberosPlugins/KerberosAuthDataPlugins"
53
#define DEFAULT_SECURE_PROFILE_PATH "/etc/krb5.conf:@SYSCONFDIR/krb5.conf"
54
#define DEFAULT_PROFILE_PATH DEFAULT_SECURE_PROFILE_PATH
58
#define DEFAULT_PLUGIN_BASE_DIR "@LIBDIR/krb5/plugins"
59
#define PLUGIN_EXT "@DYNOBJEXT"
61
#define DEFAULT_KDB_FILE "@LOCALSTATEDIR/krb5kdc/principal"
62
#define DEFAULT_KEYFILE_STUB "@LOCALSTATEDIR/krb5kdc/.k5."
63
#define KRB5_DEFAULT_ADMIN_ACL "@LOCALSTATEDIR/krb5kdc/krb5_adm.acl"
64
/* Used by old admin server */
65
#define DEFAULT_ADMIN_ACL "@LOCALSTATEDIR/krb5kdc/kadm_old.acl"
67
/* Location of KDC profile */
68
#define DEFAULT_KDC_PROFILE "@LOCALSTATEDIR/krb5kdc/kdc.conf"
69
#define KDC_PROFILE_ENV "KRB5_KDC_PROFILE"
72
#define DEFAULT_KDB_LIB_PATH { KDB5_PLUGIN_BUNDLE_DIR, "@MODULEDIR/kdb", NULL }
74
#define DEFAULT_KDB_LIB_PATH { "@MODULEDIR/kdb", NULL }
77
#define DEFAULT_KDC_ENCTYPE ENCTYPE_AES256_CTS_HMAC_SHA1_96
78
#define KDCRCACHE "dfl:krb5kdc_rcache"
80
#define KDC_PORTNAME "kerberos" /* for /etc/services or equiv. */
81
#define KDC_SECONDARY_PORTNAME "kerberos-sec" /* For backwards */
82
/* compatibility with */
83
/* port 750 clients */
85
#define KRB5_DEFAULT_PORT 88
86
#define KRB5_DEFAULT_SEC_PORT 750
88
#define DEFAULT_KPASSWD_PORT 464
90
#define DEFAULT_KDC_UDP_PORTLIST "88,750"
91
#define DEFAULT_KDC_TCP_PORTLIST ""
94
* Defaults for the KADM5 admin system.
96
#define DEFAULT_KADM5_KEYTAB "@LOCALSTATEDIR/krb5kdc/kadm5.keytab"
97
#define DEFAULT_KADM5_ACL_FILE "@LOCALSTATEDIR/krb5kdc/kadm5.acl"
98
#define DEFAULT_KADM5_PORT 749 /* assigned by IANA */
100
#define KRB5_DEFAULT_SUPPORTED_ENCTYPES \
101
"aes256-cts-hmac-sha1-96:normal " \
102
"aes128-cts-hmac-sha1-96:normal " \
103
"des3-cbc-sha1:normal arcfour-hmac-md5:normal"
105
#define MAX_DGRAM_SIZE 65536
107
#define RCTMPDIR "@KRB5RCTMPDIR" /* directory to store replay caches */
109
#define KRB5_PATH_TTY "/dev/tty"
110
#define KRB5_PATH_LOGIN "@SBINDIR/login.krb5"
111
#define KRB5_PATH_RLOGIN "@BINDIR/rlogin"
113
#define KRB5_ENV_CCNAME "KRB5CCNAME"
116
* krb5 slave support follows
119
#define KPROP_DEFAULT_FILE "@LOCALSTATEDIR/krb5kdc/slave_datatrans"
120
#define KPROPD_DEFAULT_FILE "@LOCALSTATEDIR/krb5kdc/from_master"
121
#define KPROPD_DEFAULT_KDB5_UTIL "@SBINDIR/kdb5_util"
122
#define KPROPD_DEFAULT_KPROP "@SBINDIR/kprop"
123
#define KPROPD_DEFAULT_KRB_DB DEFAULT_KDB_FILE
124
#define KPROPD_ACL_FILE "@LOCALSTATEDIR/krb5kdc/kpropd.acl"
129
#define MECH_CONF "@SYSCONFDIR/gss/mech"
130
#define MECH_LIB_PREFIX "@GSSMODULEDIR/"
132
#endif /* KRB5_OSCONF__ */