1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
|
/*
* Copyright (c) 2005-2009 Brocade Communications Systems, Inc.
* All rights reserved
* www.brocade.com
*
* Linux driver for Brocade Fibre Channel Host Bus Adapter.
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License (GPL) Version 2 as
* published by the Free Software Foundation
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* General Public License for more details.
*/
#ifndef __BFA_DEFS_AUTH_H__
#define __BFA_DEFS_AUTH_H__
#include <defs/bfa_defs_types.h>
#define PUBLIC_KEY 15409
#define PRIVATE_KEY 19009
#define KEY_LEN 32399
#define BFA_AUTH_SECRET_STRING_LEN 256
#define BFA_AUTH_FAIL_NO_PASSWORD 0xFE
#define BFA_AUTH_FAIL_TIMEOUT 0xFF
/**
* Authentication status
*/
enum bfa_auth_status {
BFA_AUTH_STATUS_NONE = 0, /* no authentication */
BFA_AUTH_UNINIT = 1, /* state - uninit */
BFA_AUTH_NEG_SEND = 2, /* state - negotiate send */
BFA_AUTH_CHAL_WAIT = 3, /* state - challenge wait */
BFA_AUTH_NEG_RETRY = 4, /* state - negotiate retry */
BFA_AUTH_REPLY_SEND = 5, /* state - reply send */
BFA_AUTH_STATUS_WAIT = 6, /* state - status wait */
BFA_AUTH_SUCCESS = 7, /* state - success */
BFA_AUTH_FAILED = 8, /* state - failed */
BFA_AUTH_STATUS_UNKNOWN = 9, /* authentication status unknown */
};
enum bfa_auth_rej_code {
BFA_AUTH_RJT_CODE_AUTH_FAILURE = 1, /* auth failure */
BFA_AUTH_RJT_CODE_LOGICAL_ERR = 2, /* logical error */
};
/**
* Authentication reject codes
*/
enum bfa_auth_rej_code_exp {
BFA_AUTH_MECH_NOT_USABLE = 1, /* auth. mechanism not usable */
BFA_AUTH_DH_GROUP_NOT_USABLE = 2, /* DH Group not usable */
BFA_AUTH_HASH_FUNC_NOT_USABLE = 3, /* hash Function not usable */
BFA_AUTH_AUTH_XACT_STARTED = 4, /* auth xact started */
BFA_AUTH_AUTH_FAILED = 5, /* auth failed */
BFA_AUTH_INCORRECT_PLD = 6, /* incorrect payload */
BFA_AUTH_INCORRECT_PROTO_MSG = 7, /* incorrect proto msg */
BFA_AUTH_RESTART_AUTH_PROTO = 8, /* restart auth protocol */
BFA_AUTH_AUTH_CONCAT_NOT_SUPP = 9, /* auth concat not supported */
BFA_AUTH_PROTO_VER_NOT_SUPP = 10,/* proto version not supported */
};
struct auth_proto_stats_s {
u32 auth_rjts;
u32 auth_negs;
u32 auth_dones;
u32 dhchap_challenges;
u32 dhchap_replies;
u32 dhchap_successes;
};
/**
* Authentication related statistics
*/
struct bfa_auth_stats_s {
u32 auth_failures; /* authentication failures */
u32 auth_successes; /* authentication successes*/
struct auth_proto_stats_s auth_rx_stats; /* Rx protocol stats */
struct auth_proto_stats_s auth_tx_stats; /* Tx protocol stats */
};
/**
* Authentication hash function algorithms
*/
enum bfa_auth_algo {
BFA_AUTH_ALGO_MD5 = 1, /* Message-Digest algorithm 5 */
BFA_AUTH_ALGO_SHA1 = 2, /* Secure Hash Algorithm 1 */
BFA_AUTH_ALGO_MS = 3, /* MD5, then SHA-1 */
BFA_AUTH_ALGO_SM = 4, /* SHA-1, then MD5 */
};
/**
* DH Groups
*
* Current value could be combination of one or more of the following values
*/
enum bfa_auth_group {
BFA_AUTH_GROUP_DHNULL = 0, /* DH NULL (value == 0) */
BFA_AUTH_GROUP_DH768 = 1, /* DH group 768 (value == 1) */
BFA_AUTH_GROUP_DH1024 = 2, /* DH group 1024 (value == 2) */
BFA_AUTH_GROUP_DH1280 = 4, /* DH group 1280 (value == 3) */
BFA_AUTH_GROUP_DH1536 = 8, /* DH group 1536 (value == 4) */
BFA_AUTH_GROUP_ALL = 256 /* Use default DH group order
* 0, 1, 2, 3, 4 */
};
/**
* Authentication secret sources
*/
enum bfa_auth_secretsource {
BFA_AUTH_SECSRC_LOCAL = 1, /* locally configured */
BFA_AUTH_SECSRC_RADIUS = 2, /* use radius server */
BFA_AUTH_SECSRC_TACACS = 3, /* TACACS server */
};
/**
* Authentication attributes
*/
struct bfa_auth_attr_s {
enum bfa_auth_status status;
enum bfa_auth_algo algo;
enum bfa_auth_group dh_grp;
enum bfa_auth_rej_code rjt_code;
enum bfa_auth_rej_code_exp rjt_code_exp;
u8 secret_set;
u8 resv[3];
};
#endif /* __BFA_DEFS_AUTH_H__ */
|
