summaryrefslogtreecommitdiff
path: root/source4/heimdal/lib/gssapi/spnego/spnego.asn1
blob: 187ce0a0a6d5ec803300830801f7b48ca0678a3c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
-- $Id: spnego.asn1,v 1.1.1.1 2006/06/28 08:34:45 lha Exp $

SPNEGO DEFINITIONS ::=
BEGIN

MechType::= OBJECT IDENTIFIER

MechTypeList ::= SEQUENCE OF MechType

ContextFlags ::= BIT STRING {
        delegFlag       (0),
        mutualFlag      (1),
        replayFlag      (2),
        sequenceFlag    (3),
        anonFlag        (4),
        confFlag        (5),
        integFlag       (6)
}

NegHints ::= SEQUENCE {
    hintName       [0]  GeneralString                          OPTIONAL,
    hintAddress    [1]  OCTET STRING                           OPTIONAL
} 

NegTokenInit ::= SEQUENCE {
                            mechTypes       [0] MechTypeList,
                            reqFlags        [1] ContextFlags   OPTIONAL,
                            mechToken       [2] OCTET STRING   OPTIONAL,
                            negHints        [3] NegHints       OPTIONAL,
			    mechListMIC	    [4] OCTET STRING   OPTIONAL
                         }

-- NB: negResult is not OPTIONAL in the new SPNEGO spec but
-- Windows clients do not always send it
NegTokenResp ::= SEQUENCE {
    negResult      [0] ENUMERATED {
                            accept_completed    (0),
                            accept_incomplete   (1),
                            reject              (2),
                            request-mic         (3) }          OPTIONAL,
    supportedMech  [1] MechType                                OPTIONAL,
    responseToken  [2] OCTET STRING                            OPTIONAL,
    mechListMIC    [3] OCTET STRING                            OPTIONAL
}

NegotiationToken ::= CHOICE {
	negTokenInit[0]		NegTokenInit,
	negTokenResp[1]		NegTokenResp
}

END