TAuthenticate

 Create authentication object.

 Called in connection with a timer timeout

 Authenticate to remote rootd or proofd server. Return kTRUE if
 authentication succeeded.

 Set default authentication environment. The values are inferred
 from fSecurity and fDetails.

 Try to get user name and passwd from several sources.

 Try to get user name and passwd from the ~/.rootnetrc or
 ~/.netrc files. For more info see the version with 4 arguments.
 This version is maintained for backward compatability reasons.

 Try to get user name and passwd from the ~/.rootnetrc or
 ~/.netrc files. First ~/.rootnetrc is tried, after that ~/.netrc.
 These files will only be used when their access masks are 0600.
 Returns kTRUE if user and passwd were found for the machine
 specified in the URL. If kFALSE, user and passwd are "".
 If srppwd == kTRUE then a SRP ('secure') pwd is searched for in
 the files.
 The boolean pwhash is set to kTRUE if the returned passwd is to
 be understood as password hash, i.e. if the 'password-hash' keyword
 is found in the 'machine' lines; not implemented for 'secure'
 and the .netrc file.
 The format of these files are:

 # this is a comment line
 machine <machine fqdn> login <user> password <passwd>
 machine <machine fqdn> login <user> password-hash <passwd>

 and in addition ~/.rootnetrc also supports:

 secure <machine fqdn> login <user> password <passwd>

 <machine fqdn> may be a domain name or contain the wild card '*'.

 for the secure protocols. All lines must start in the first column.

 Static method returning the global user.

 Static method returning the global password hash flag.

 Static method returning the global SRP password flag.

 Static method returning default expiring date for new validity contexts

 Static method returning the default user information.

 Static method returning the principal to be used to init Krb5 tickets.

 Static method returning the authentication reuse settings.

 Static method returning the prompt user settings.

 Static method returning the method corresponding to idx.

 Static method returning the method index (which can be used to find
 the method in GetAuthMethod()). Returns -1 in case meth is not found.

 Static method to prompt for the user name to be used for authentication
 to rootd or proofd. User is asked to type user name.
 Returns user name (which must be deleted by caller) or 0.
 If non-interactive run (eg ProofServ) returns default user.

 Static method to prompt for the user's passwd to be used for
 authentication to rootd or proofd. Uses non-echoing command line
 to get passwd. Returns passwd (which must de deleted by caller) or 0.
 If non-interactive run (eg ProofServ) returns -1

 Static method returning the globus authorization hook.

 Static method returning the RSA public keys.

 Static method returning the RSA initialization flag.

 Static method setting the default type of RSA key.

 Static method setting RSA initialization flag.

 Static method returning the list with authentication details.

 Static method returning the list with authentication directives
 to be sent to proof.

 Print error string depending on error code.

 Set global user name to be used for authentication to rootd or proofd.

 Set global passwd to be used for authentication to rootd or proofd.

 Set global passwd hash flag to be used for authentication to rootd or proofd.

 Set global SRP passwd flag to be used for authentication to rootd or proofd.

 Set flag controlling the reading of $HOME/.rootauthrc.
 In PROOF the administrator may want to switch off private settings.
 Always true, may only be set false via option to proofd.

 Set default expiring date for new validity contexts

 Set default user name.

 Set timeout (active if > 0)

 Set global AuthReUse flag

 Set global PromptUser flag

 Set secure authorization function. Automatically called when libSRPAuth
 is loaded.

 Set kerberos5 authorization function. Automatically called when
 libKrb5Auth is loaded.

 Set Globus authorization function. Automatically called when
 libGlobusAuth is loaded.

 SSH error parsing: returns
     0  :  no error or fatal
     1  :  should retry (eg 'connection closed by remote host')

 SSH client authentication code.

 Method returning the user to be used for the ssh login.
 Looks first at SSH.Login and finally at env USER.
 If SSH.LoginPrompt is set to 'yes' it prompts for the 'login name'

 Check if 'host' matches 'href':
 this means either equal or "containing" it, even with wild cards *
 in the first field (in the case 'href' is a name, ie not IP address)
 Returns kTRUE if the two matches.

 UidGid client authentication code.
 Returns 0 in case authentication failed
         1 in case of success
        <0 in case of system error

 UsrPwd client authentication code.
 Returns 0 in case authentication failed
         1 in case of success

 Sets fUser=user and search fgAuthInfo for the entry pertaining to
 (host,user), setting fHostAuth accordingly.
 If opt = "P" use fgProofAuthInfo list instead
 If no entry is found fHostAuth is not changed

 Checks if a THostAuth with exact match for {host,user} exists
 in the fgAuthInfo list
 If opt = "P" use ProofAuthInfo list instead
 Returns pointer to it or 0

 Expands include directives found in fexp files
 The expanded, temporary file, is pointed to by 'ftmp'
 and should be already open. To be called recursively.

 Determine default authentication details for method 'sec' and user 'usr'.
 Checks .rootrc family files. Returned string must be deleted by the user.

 Remove THostAuth instance from the list

 Print info about the authentication sector.
 If 'opt' contains 's' or 'S' prints information about established TSecContext,
 else prints information about THostAuth (if 'opt' is 'p' or 'P', prints
 Proof related information)

 Check if we have a valid established sec context in memory
 Retrieves relevant info and negotiates with server.
 options = "Opt,strlen(username),username.Data()"
 message = kROOTD_USER, ...

 Initialize random machine using seed from /dev/urandom
 (or current time if /dev/urandom not available).

 Generate a valid pair of private/public RSA keys to protect for
 authentication token exchange

 Allocates and fills a 0 terminated buffer of length len+1 with
 len random characters.
 Returns pointer to the buffer (to be deleted by the caller)
 opt = 0      any non dangerous char
       1      letters and numbers  (upper and lower case)
       2      hex characters       (upper and lower case)

 Encode null terminated str using the session private key indicated by enc
 and sends it over the network
 Returns number of bytes sent, or -1 in case of error.
 enc = 1 for private encoding, enc = 2 for public encoding

 Receive str from sock and decode it using key indicated by key type
 Return number of received bytes or -1 in case of error.
 dec = 1 for private decoding, dec = 2 for public decoding

 Store RSA public keys from export string rsaPubExport.

 Store RSA public keys from export string rsaPubExport.
 Returns type of stored key, or -1 is not recognized

 Receives server RSA Public key
 Sends local RSA public key encoded

 Read authentication directives from $ROOTAUTHRC, $HOME/.rootauthrc or
 <Root_etc_dir>/system.rootauthrc and create related THostAuth objects.
 Files are read only if they changed since last reading
 If 'proofconf' is defined, check also file proofconf for directives

 Check if the authentication method can be attempted for the client.

 Tool for updating fgAuthInfo or fgProofAuthInfo
 'nin' contains list of last input information through (re)reading
 of a rootauthrc-alike file. 'nin' info has priority.
 'std' is cleaned from inactive members.
 'nin' members used to update existing members in 'std' are
 removed from 'nin', do that they do not leak
 opt = "P" for proofauthinfo.

 Tool for removing SecContext ctx from THostAuth listed in
 fgAuthInfo or fgProofAuthInfo

 Transform lin bytes at in into a null terminated base64 string
 at out.
 Returns length of output string or -1 in case of failure

 Decode base64 string at in into a generic buffer at out.
 No check for base64-ness of input characters.
 Called with out == 0 return the length of the output buffer.
 Return number of meaningful bytes in output, or -1 if input
 array is not defined.

 NB: if the length of the input string is not a multiple of
     4, the (strlen(in) - strlen(in)/4) bytes at the end are
     ignored.

 Authentication related stuff setup in TProofServ.
 This is the place where the buffer send by the client / master is
 decoded. It contains also password information, if the case requires.
 Return 0 on success, -1 on failure.

 Setup of authetication related stuff in PROOF run after a
 successful authentication.
 Return 0 on success, -1 on failure.

 Static method returning supported client protocol.