r21876: Start adding in the seal implementation - prototype code

for the server side enc. (doesn't break anything).
I'll keep updating this until I've got NTLM seal working
on both client and server, then add in the gss level
seal.
Jeremy.
(This used to be commit 530ac29abf23e920baa549e7cec55199edd8bd74)

1 files changed, 16 insertions, 2 deletions

diff --git a/source3/include/client.h b/source3/include/client.h
index aa8a6479470..97922ba232a 100644
--- a/source3/include/client.h
+++ b/source3/include/client.h
@@ -34,8 +34,7 @@
  * These definitions depend on smb.h
  */
 
-struct print_job_info
-{
+struct print_job_info {
 	uint16 id;
 	uint16 priority;
 	size_t size;
@@ -79,6 +78,19 @@ struct rpc_pipe_client {
 	struct dcinfo *dc;
 };
 
+/* Transport encryption state. */
+enum smb_trans_enc_type { SMB_TRANS_ENC_NTLM, SMB_TRANS_ENC_KRB5 };
+
+struct smb_trans_enc_state {
+	enum smb_trans_enc_type smb_enc_type;
+	union {
+		NTLMSSP_STATE *ntlmssp_state;
+#if defined(HAVE_GSSAPI_SUPPORT) && defined(HAVE_KRB5)
+		gss_ctx_id_t context_handle;
+#endif
+	};
+};
+
 struct cli_state {
 	int port;
 	int fd;
@@ -137,6 +149,8 @@ struct cli_state {
 
 	smb_sign_info sign_info;
 
+	struct smb_trans_enc_state *trans_enc_state; /* Setup if we're encrypting SMB's. */
+
 	/* the session key for this CLI, outside 
 	   any per-pipe authenticaion */
 	DATA_BLOB user_session_key;