doc/html/appdev/refs/api/krb5_verify_init_creds.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
   2   "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
   3
   4
   5 <html xmlns="http://www.w3.org/1999/xhtml">
   6   <head>
   7     <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
   8
   9     <title>krb5_verify_init_creds - Verify initial credentials against a keytab. &mdash; MIT Kerberos Documentation</title>
  10
  11     <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
  12     <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
  13     <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
  14
  15     <script type="text/javascript">
  16       var DOCUMENTATION_OPTIONS = {
  17         URL_ROOT:    '../../../',
  18         VERSION:     '1.15.1',
  19         COLLAPSE_INDEX: false,
  20         FILE_SUFFIX: '.html',
  21         HAS_SOURCE:  true
  22       };
  23     </script>
  24     <script type="text/javascript" src="../../../_static/jquery.js"></script>
  25     <script type="text/javascript" src="../../../_static/underscore.js"></script>
  26     <script type="text/javascript" src="../../../_static/doctools.js"></script>
  27     <link rel="author" title="About these documents" href="../../../about.html" />
  28     <link rel="copyright" title="Copyright" href="../../../copyright.html" />
  29     <link rel="top" title="MIT Kerberos Documentation" href="../../../index.html" />
  30     <link rel="up" title="krb5 API" href="index.html" />
  31     <link rel="next" title="krb5_verify_init_creds_opt_init - Initialize a credential verification options structure." href="krb5_verify_init_creds_opt_init.html" />
  32     <link rel="prev" title="krb5_tkt_creds_step - Get the next KDC request in a TGS exchange." href="krb5_tkt_creds_step.html" />
  33   </head>
  34   <body>
  35     <div class="header-wrapper">
  36         <div class="header">
  37
  38
  39             <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
  40
  41             <div class="rel">
  42
  43         <a href="../../../index.html" title="Full Table of Contents"
  44             accesskey="C">Contents</a> |
  45         <a href="krb5_tkt_creds_step.html" title="krb5_tkt_creds_step - Get the next KDC request in a TGS exchange."
  46             accesskey="P">previous</a> |
  47         <a href="krb5_verify_init_creds_opt_init.html" title="krb5_verify_init_creds_opt_init - Initialize a credential verification options structure."
  48             accesskey="N">next</a> |
  49         <a href="../../../genindex.html" title="General Index"
  50             accesskey="I">index</a> |
  51         <a href="../../../search.html" title="Enter search criteria"
  52             accesskey="S">Search</a> |
  53     <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds -  Verify initial credentials against a keytab.">feedback</a>
  54             </div>
  55         </div>
  56     </div>
  57
  58     <div class="content-wrapper">
  59       <div class="content">
  60         <div class="document">
  61
  62       <div class="documentwrapper">
  63         <div class="bodywrapper">
  64           <div class="body">
  65
  66   <div class="section" id="krb5-verify-init-creds-verify-initial-credentials-against-a-keytab">
  67 <h1>krb5_verify_init_creds -  Verify initial credentials against a keytab.<a class="headerlink" href="#krb5-verify-init-creds-verify-initial-credentials-against-a-keytab" title="Permalink to this headline">¶</a></h1>
  68 <dl class="function">
  69 <dt id="c.krb5_verify_init_creds">
  70 <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <tt class="descname">krb5_verify_init_creds</tt><big>(</big><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em>&nbsp;context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em>&nbsp;creds</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em>&nbsp;server</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em>&nbsp;keytab</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em>&nbsp;ccache</em>, <a class="reference internal" href="../types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt" title="krb5_verify_init_creds_opt">krb5_verify_init_creds_opt</a> *<em>&nbsp;options</em><big>)</big><a class="headerlink" href="#c.krb5_verify_init_creds" title="Permalink to this definition">¶</a></dt>
  71 <dd></dd></dl>
  72
  73 <table class="docutils field-list" frame="void" rules="none">
  74 <col class="field-name" />
  75 <col class="field-body" />
  76 <tbody valign="top">
  77 <tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
  78 <p><strong>[in]</strong> <strong>creds</strong> - Initial credentials to be verified</p>
  79 <p><strong>[in]</strong> <strong>server</strong> - Server principal (or NULL)</p>
  80 <p><strong>[in]</strong> <strong>keytab</strong> - Key table (NULL to use default keytab)</p>
  81 <p><strong>[in]</strong> <strong>ccache</strong> - Credential cache for fetched creds (or NULL)</p>
  82 <p class="last"><strong>[in]</strong> <strong>options</strong> - Verification options (NULL for default options)</p>
  83 </td>
  84 </tr>
  85 </tbody>
  86 </table>
  87 <table class="docutils field-list" frame="void" rules="none">
  88 <col class="field-name" />
  89 <col class="field-body" />
  90 <tbody valign="top">
  91 <tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
  92 <li>0   Success; otherwise - Kerberos error codes</li>
  93 </ul>
  94 </td>
  95 </tr>
  96 </tbody>
  97 </table>
  98 <p>This function attempts to verify that <em>creds</em> were obtained from a KDC with knowledge of a key in <em>keytab</em> , or the default keytab if <em>keytab</em> is NULL. If <em>server</em> is provided, the highest-kvno key entry for that principal name is used to verify the credentials; otherwise, all unique&#8221;host&#8221;service principals in the keytab are tried.</p>
  99 <p>If the specified keytab does not exist, or is empty, or cannot be read, or does not contain an entry for <em>server</em> , then credential verification may be skipped unless configuration demands that it succeed. The caller can control this behavior by providing a verification options structure; see <a class="reference internal" href="krb5_verify_init_creds_opt_init.html#c.krb5_verify_init_creds_opt_init" title="krb5_verify_init_creds_opt_init"><tt class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds_opt_init()</span></tt></a> and <a class="reference internal" href="krb5_verify_init_creds_opt_set_ap_req_nofail.html#c.krb5_verify_init_creds_opt_set_ap_req_nofail" title="krb5_verify_init_creds_opt_set_ap_req_nofail"><tt class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds_opt_set_ap_req_nofail()</span></tt></a> .</p>
 100 <p>If <em>ccache</em> is NULL, any additional credentials fetched during the verification process will be destroyed. If <em>ccache</em> points to NULL, a memory ccache will be created for the additional credentials and returned in <em>ccache</em> . If <em>ccache</em> points to a valid credential cache handle, the additional credentials will be stored in that cache.</p>
 101 </div>
 102
 103
 104           </div>
 105         </div>
 106       </div>
 107         </div>
 108         <div class="sidebar">
 109     <h2>On this page</h2>
 110     <ul>
 111 <li><a class="reference internal" href="#">krb5_verify_init_creds -  Verify initial credentials against a keytab.</a></li>
 112 </ul>
 113
 114     <br/>
 115     <h2>Table of contents</h2>
 116     <ul class="current">
 117 <li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
 118 <li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
 119 <li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
 120 <li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
 121 <li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
 122 <li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
 123 <li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
 124 <li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
 125 <li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
 126 <li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
 127 <li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
 128 </ul>
 129 </li>
 130 </ul>
 131 </li>
 132 <li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
 133 <li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
 134 <li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
 135 <li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
 136 <li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
 137 <li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
 138 <li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
 139 <li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
 140 </ul>
 141
 142     <br/>
 143     <h4><a href="../../../index.html">Full Table of Contents</a></h4>
 144     <h4>Search</h4>
 145     <form class="search" action="../../../search.html" method="get">
 146       <input type="text" name="q" size="18" />
 147       <input type="submit" value="Go" />
 148       <input type="hidden" name="check_keywords" value="yes" />
 149       <input type="hidden" name="area" value="default" />
 150     </form>
 151         </div>
 152         <div class="clearer"></div>
 153       </div>
 154     </div>
 155
 156     <div class="footer-wrapper">
 157         <div class="footer" >
 158             <div class="right" ><i>Release: 1.15.1</i><br />
 159                 &copy; <a href="../../../copyright.html">Copyright</a> 1985-2017, MIT.
 160             </div>
 161             <div class="left">
 162
 163         <a href="../../../index.html" title="Full Table of Contents"
 164             >Contents</a> |
 165         <a href="krb5_tkt_creds_step.html" title="krb5_tkt_creds_step - Get the next KDC request in a TGS exchange."
 166             >previous</a> |
 167         <a href="krb5_verify_init_creds_opt_init.html" title="krb5_verify_init_creds_opt_init - Initialize a credential verification options structure."
 168             >next</a> |
 169         <a href="../../../genindex.html" title="General Index"
 170             >index</a> |
 171         <a href="../../../search.html" title="Enter search criteria"
 172             >Search</a> |
 173     <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds -  Verify initial credentials against a keytab.">feedback</a>
 174             </div>
 175         </div>
 176     </div>
 177
 178   </body>
 179 </html>